> Markdown version of [/jobs/ext/802967-iam-architect](https://www.wearedevelopers.com/jobs/ext/802967-iam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Architect - **Company:** Galaxy i Technologies, Inc - **Location:** Milton, United States - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Active Directory, Amazon Web Services, Audit Trail, User Authentication, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, Information Technology Operations, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Ping (Networking Utility), Windows PowerShell, Role-Based Access Control, Openid Connect, Azure Active Directory, Zero Trust Network Access, Salesforce.Com, Security Assertion Markup Language (SAML), SAP (Applications), Security Information and Event Management, Scripting, Google Cloud, Enterprise Software Applications, Okta, Cyberark, IT Architecture, Software Security, SailPoint, Splunk, Workday - **Published:** June 24, 2026 - **Apply:** https://www.dice.com/job-detail/5927aa09-5460-4937-8a00-7a48a8af8594 ## About the Role We are seeking a highly skilled and experienced IAM Architect. If you are looking for new role, please share resume at ## Description An IAM Architect is responsible for designing, implementing, and governing identity and access management solutions that ensure secure access to enterprise systems, applications, and data. This role bridges business requirements, cybersecurity, and IT architecture to enforce robust identity governance and compliance. Key Responsibilities 1. Architecture & Design Design and develop enterprise IAM architecture aligned with security and business goals Define identity lifecycle management (joiner, mover, leaver processes) Architect solutions for: Authentication (SSO, MFA, passwordless) Authorization (RBAC, ABAC) Federation (SAML, OAuth, OIDC) Develop zero trust security models for identity 2. Implementation & Integration Lead implementation of IAM platforms such as: Azure AD / Entra ID Okta SailPoint CyberArk Ping Identity Integrate IAM systems with: Cloud platforms (AWS, Azure, Google Cloud Platform) On-prem systems (Active Directory, LDAP) Enterprise applications (SAP, Salesforce, Workday) Enable API security and identity federation 3. Governance, Risk & Compliance Establish Identity Governance & Administration (IGA) frameworks Design role models and access certification campaigns Ensure compliance with standards: SOX, GDPR, HIPAA, ISO 27001 Implement audit logging, monitoring, and reporting 4. Security & Risk Management Enforce least privilege & segregation of duties (SoD) Design solutions to mitigate identity-based threats Integrate IAM with: SIEM (e.g., Splunk, Sentinel) PAM (Privileged Access Management) Conduct risk assessments and threat modeling 5. Strategy & Roadmap Define IAM strategy and technology roadmap Evaluate and recommend IAM tools and platforms Drive cloud identity transformation initiatives Promote adoption of passwordless and Zero Trust frameworks 6. Stakeholder Collaboration Work with: Security teams IT operations Application owners Compliance and audit teams Provide technical leadership and mentorship to IAM engineers Communicate complex IAM concepts to non-technical stakeholders, SSO, MFA, Federation protocols (SAML, OAuth 2.0, OpenID Connect) Identity lifecycle management Hands-on experience with IAM tools: Azure AD / Entra ID, Okta, SailPoint, Ping, CyberArk Strong understanding of: Active Directory / LDAP Cloud security (AWS IAM, Azure RBAC) API security Scripting/programming: PowerShell, Python, Java, or similar ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)