IAM Architect

Galaxy i Technologies, Inc
Milton, United States
about 2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Job source

Tech stack

Java (Programming Language) Active Directory Amazon Web Services Audit Trail User Authentication Microsoft Azure Cloud Computing Cloud Computing Security Cyber Security Identity and Access Management Information Technology Operations Python (Programming Language)
+23 more
Lightweight Directory Access Protocols (LDAP) OAuth OpenID Ping (Networking Utility) Windows PowerShell Role-Based Access Control Openid Connect Azure Active Directory Zero Trust Network Access Salesforce.Com Security Assertion Markup Language (SAML) SAP (Applications) Security Information and Event Management Scripting Google Cloud Enterprise Software Applications Okta Cyberark IT Architecture Software Security SailPoint Splunk Workday

Job description

An IAM Architect is responsible for designing, implementing, and governing identity and access management solutions that ensure secure access to enterprise systems, applications, and data. This role bridges business requirements, cybersecurity, and IT architecture to enforce robust identity governance and compliance.

Key Responsibilities

  1. Architecture & Design

Design and develop enterprise IAM architecture aligned with security and business goals Define identity lifecycle management (joiner, mover, leaver processes) Architect solutions for: Authentication (SSO, MFA, passwordless) Authorization (RBAC, ABAC) Federation (SAML, OAuth, OIDC) Develop zero trust security models for identity

  1. Implementation & Integration

Lead implementation of IAM platforms such as: Azure AD / Entra ID Okta SailPoint CyberArk Ping Identity Integrate IAM systems with: Cloud platforms (AWS, Azure, Google Cloud Platform) On-prem systems (Active Directory, LDAP) Enterprise applications (SAP, Salesforce, Workday) Enable API security and identity federation

  1. Governance, Risk & Compliance

Establish Identity Governance & Administration (IGA) frameworks Design role models and access certification campaigns Ensure compliance with standards: SOX, GDPR, HIPAA, ISO 27001 Implement audit logging, monitoring, and reporting

  1. Security & Risk Management

Enforce least privilege & segregation of duties (SoD) Design solutions to mitigate identity-based threats Integrate IAM with: SIEM (e.g., Splunk, Sentinel) PAM (Privileged Access Management) Conduct risk assessments and threat modeling

  1. Strategy & Roadmap

Define IAM strategy and technology roadmap Evaluate and recommend IAM tools and platforms Drive cloud identity transformation initiatives Promote adoption of passwordless and Zero Trust frameworks

  1. Stakeholder Collaboration

Work with: Security teams IT operations Application owners Compliance and audit teams Provide technical leadership and mentorship to IAM engineers Communicate complex IAM concepts to non-technical stakeholders, SSO, MFA, Federation protocols (SAML, OAuth 2.0, OpenID Connect) Identity lifecycle management Hands-on experience with IAM tools: Azure AD / Entra ID, Okta, SailPoint, Ping, CyberArk Strong understanding of: Active Directory / LDAP Cloud security (AWS IAM, Azure RBAC) API security Scripting/programming: PowerShell, Python, Java, or similar

Requirements

We are seeking a highly skilled and experienced IAM Architect. If you are looking for new role, please share resume at

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on dice.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:28 min

Building shared Java modules and analyst targeting platforms

Chris Heilmann +2 · LIVE

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · WWC Europe 2026

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann +2 · LIVE

1:24 min

Evaluating formal AWS certifications versus raw practical engineering experience

Jan Giacomelli · LIVE

3:10 min

Correlating dispersed logs using structured request tracing

Michael Eder +1 · LIVE

Videos

See all

Related articles

See all