> Markdown version of [/jobs/ext/4549163-iam-architect](https://www.wearedevelopers.com/jobs/ext/4549163-iam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Architect

- **Company:** Peoplentech Llc
- **Location:** Santa Clara, CA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $176,800
- **Contract:** Temporary contract
- **Skills:** LangGraph Framework, Application Programming Interfaces (APIs), Artificial Intelligence, Audit Trail, User Authentication, Cloud Computing, Cyber Security, DevOps, Identity and Access Management, Key Management, OAuth, OpenID, Azure Active Directory, Zero Trust Network Access, Sherwood Applied Business Security Architecture, Security Assertion Markup Language (SAML), Okta, Cyberark, Software Security, Agentic-AI, Togaf, CrewAI, Bots, AutoGen, Virtual Agents, CIS Benchmarks, SailPoint, Semantic Kernel
- **Published:** November 3, 2026
- **Apply:** https://www.thejobnetwork.com/job/a4a3f447-4a11-4a00-8cd7-ab4345742bd4/iam-architect

## About the Role

We are seeking a highly experienced Principal Security Architect with deep expertise in Identity & Access Management (IAM), Privileged Access Management (PAM), Non-Human Identities (NHI), and Machine Identity Security. The individual will lead the assessment, design, and governance of AI Agent and NHI security architecture, defining enterprise-wide identity control frameworks to enable secure adoption of Agentic AI and autonomous systems., Must-Have

 * 10 years of IAM/PAM architecture and security consulting experience.
 * Strong expertise in:
 + Machine Identities / Non-Human Identities (NHI)
 + Service Accounts Governance
 + Workload Identity Security
 + Secrets Management
 + Zero Trust Architecture
 * Experience with SailPoint, Saviynt, CyberArk, BeyondTrust, Microsoft Entra ID, Okta, or equivalent platforms.
 * Deep understanding of OAuth2, OIDC, SAML, SCIM, SPIFFE/SPIRE, mTLS, API Security, and Workload Identities.
 * Experience designing enterprise IAM architectures.

Preferred

 * Experience securing AI Agents, Agentic Workflows, or Autonomous Systems.
 * Familiarity with LangGraph, AutoGen, CrewAI, Semantic Kernel, MCP, or similar Agentic AI frameworks.
 * CISSP, CISM, SABSA, TOGAF, or equivalent certifications.

## Description

Architecture & Strategy

 * Lead current-state assessment of AI Agents, Machine Identities, Service Accounts, APIs, Bots, and Non-Human Identities.
 * Design target-state AI Agent and NHI reference architecture aligned with Zero Trust principles.
 * Define security architecture patterns for AI agents, agent-to-agent interactions, and agent-to-system communications.
 * Develop governance architecture covering identity lifecycle, privileged access, authorization, auditability, and runtime enforcement.

Identity & Access Governance

 * Define and operationalize the Registry * Intent * Issuance * Execution * Monitoring control framework.
 * Design lifecycle governance processes for registration, approval, certification, rotation, suspension, and retirement of NHI identities.
 * Establish JIT/JEA credential management and privileged access controls for AI Agents.

Security Controls & Framework Alignment

 * Map architecture to NIST SP 800-53, NIST AI RMF, Zero Trust, CIS Controls, and enterprise IAM standards.
 * Define identity-centric security controls for:
 + Authentication
 + Authorization
 + Secrets Management
 + Workload Identities
 + Agent Trust Relationships
 + Runtime Access Enforcement
 * Conduct gap assessments and recommend remediation roadmaps.

Stakeholder Engagement

 * Work closely with Security, IAM, Cloud, Platform Engineering, AI/ML, DevOps, Compliance, and Architecture teams.
 * Lead executive workshops and architecture review sessions.
 * Present findings, recommendations, and roadmaps to senior leadership.