> Markdown version of [/jobs/ext/4588816-identity-access-management-architect](https://www.wearedevelopers.com/jobs/ext/4588816-identity-access-management-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Access Management Architect - **Company:** HUB - **Location:** Chicago, IL, United States - **Experience:** Experienced - **Salary:** $120,000 - $150,000 - **Contract:** Permanent contract - **Skills:** Active Directory, Agile Methodology, Amazon Web Services, JIRA, Microsoft Azure, Business Software, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, JSON, Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, PCI Data Security Standards, Scrum Methodology, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), SAP (Applications), Single Sign-On, Systems Integration, User Provisioning Software, Extensible Markup Language (XML), Google Cloud, Okta, System Availability, IT Architecture, HR Software, SailPoint, Restful APIs, Workday, Servicenow - **Published:** November 5, 2026 - **Apply:** https://hubinternational.jobs/chicago-il/identity-access-management-architect/248e0e22f7e54548b1ee54eac8cd69ff/job/ ## About the Role + Bachelor's degree in technology, Security, or equivalent experience. + 7+ years of experience in identity and access management, with at least 3 years in an architecture or technical leadership role. + Proven experience designing and implementing enterprise IGA/IAM solutions (e.g., SailPoint ISC/IdentityNow, Saviynt, or similar). + Experience with access certifications, provisioning workflows, lifecycle management, and governance controls. + Strong understanding of Zero Trust architecture and enterprise security frameworks. + Expertise with IGA platforms, Active Directory, EntraID, LDAP, SSO, RBAC, Rest APIs and/or JSON / XML. + Expertise with SAML, OIDC, oAuth, and SCIM. + Experience integrating IAM platforms with HR systems (e.g., Workday), ITSM tools (e.g., ServiceNow, JIRA), business applications, and cloud platforms (AWS, Azure, GCP). + Solid understanding of compliance and audit requirements related to identity and access. + Excellent communication skills, with the ability to translate technical concepts for both technical and non-technical stakeholders. + Experience mentoring engineers and leading technical governance discussions. + Familiarity with Agile delivery methodologies. + Knowledge of industry security standards, guidelines, and regulatory/compliance requirements related to information security such as ISO 27001, NIST 800-53, SOC2, PCI, SOX, etc. + This position reports into Chicago and is hybrid. + Willingness to travel up to 10% of working time. ## Description We are seeking an experienced IAM Architect to design, build, and evolve our enterprise Identity and Access Management (IAM) program. This role oversees and drives the IAM architectural standards for authentication, authorization, provisioning, and privileged access across cloud, SaaS, and on-premises environments. You will translate business and security requirements into reference architectures, technical standards, and multi-year roadmaps that support workforce, and privileged identities. The ideal candidate has deep hands-on experience with modern IAM/IGA platforms (e.g., SailPoint Identity Security Cloud/IdentityNow, Okta, Azure AD/Entra ID, or similar), a strong understanding of Zero Trust principles, and a track record of leading identity initiatives that reduce risk, complexity, and operational cost while improving the end-user experience. **Objectives of this Role** + Develop and maintain the enterprise IAM framework, including authentication, authorization, provisioning, and privileged access systems. + Rationalize identity platforms and standardize integration patterns to reduce complexity, cost, and operational risk. + Ensure high availability, resilience, and audit readiness of identity services. + Improve onboarding/offboarding (Joiner-Mover-Leaver) efficiency and reduce identity-related security incidents such as credential compromise or orphaned accounts. + Serve as the technical leader for IAM initiatives, driving scalable identity architecture and governance standards across cloud and on-prem environments. + Ensure identity operations practices provide a sound foundation that utilizes tools and processes for rapid identification of security events to address and mitigate risks. + Engage with peers regularly on security operations functions, project status, activities, and achievements. + Lead "Continuous Improvement" efforts, in respect to HUB's information security identity tooling and systems. + Lead/Assist in plan, organize, and execute multiple responsibilities to achieve project goals and provide technical leadership to move operational projects to completion. + Contribute to security requirements, standards, procedures, and reference architectures to comply with policies and technical standards. **Daily and Monthly Responsibilities** + Lead the architecture, design, implementation and integration of IAM/IGA solutions (e.g., SailPoint ISC) across enterprise environments. + Define IAM architecture standards, governance models, and best practices. + Design scalable identity lifecycle processes including Joiner, Mover, and Leaver workflows. + Architect integrations with Active Directory, Azure AD/Entra ID, Workday, ServiceNow, LDAP, SAP, cloud platforms, and REST APIs. + Maintain all IAM architectural diagrams, as-built documentation, and roadmaps. + Lead application onboarding, provisioning, deprovisioning, and access certification initiatives. + Provide architecture guidance for compliance, audit readiness, and regulatory requirements (e.g., SOX, HIPAA, GDPR, PCI-DSS). + Collaborate with cybersecurity, infrastructure, cloud, and application teams to align IAM strategy with enterprise security goals. + Mentor engineers, developers, and analysts on IAM platform best practices and technical standards. + Participate in roadmap planning, technical governance, and solution architecture reviews. + Support Agile delivery, sprint planning, and technical design workshops.