IAM Expert Solution Architect

Ensono

4h • Hybrid

About The Position

The IAM Solution Architect is a senior role with broad domain expertise responsible for assessing IAM-related needs as they relate to migration and landing zone exits. This role provides end-to-end architecture leadership for IAM integration work in support of large-scale application migrations to AWS, Microsoft Azure, and strategic data centers.

Requirements

• 10+ years of experience in Identity and Access Management
• Deep expertise across IAM domains with hands-on experience in the following platforms: Privileged Access Management: CyberArk (EPV, PSM, PTA, CCP), HashiCorp Vault (secrets engine, dynamic secrets, encryption as a service)
• Authentication/Identity Providers (IDP): ForgeRock (AM, IDM, DS, IG), RSA (SecurID, Identity Governance & Lifecycle)
• User Access & Entitlement Management: SailPoint (IdentityIQ, IdentityNow), ESF (Enterprise Security Framework)
• Strong experience with cloud IAM services (AWS IAM, Azure AD/Entra ID, etc.)
• Knowledge of security frameworks and compliance requirements (SOX, GDPR, etc.)
• Experience designing IAM solutions for large-scale enterprise migrations
• Strong understanding of Active Directory, LDAP, SAML, OAuth, OpenID Connect
• Excellent communication skills with ability to translate technical concepts for various audiences

Nice To Haves

• Experience in financial services or highly regulated industries strongly preferred
• Relevant certifications preferred: CISSP, CISM
• Cloud certifications (AWS, Azure)
• CyberArk Certified Delivery Engineer
• SailPoint Certified IdentityIQ Engineer

Responsibilities

• Stand up an IAM team that accelerates application migrations by delivering standard IAM patterns and implementation across: Authentication and federation, Authorization integration, Secret management, Identity governance and administration, Privileged access management (PAM) integration, Migration readiness and cutover support for IAM controls, Development of accelerators and self-service tools to help in the migration
• Design and govern the technical IAM architecture for migration workloads
• Assess current state IAM landscape and define target state architecture aligned to enterprise standards
• Develop IAM integration patterns that are reusable across multiple application migrations
• Build and deploy common scaffolding services such as logging, monitoring, secrets management, integration services, shared storage, middleware components, and platform utilities
• Ensure these services are production ready, secure, and consumable by application teams
• Document consumption patterns and onboarding procedures
• Define and approve security baselines and minimum compliance standards for IAM controls
• Provide technical guidance and mentorship to IAM Engineers
• Collaborate with infrastructure and platform BAU teams to ensure alignment with enterprise standards

Benefits

• Unlimited Paid Days Off
• Three health plan options
• 401k with company match
• Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts
• Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement
• Paid childbearing and paternal leave
• Education Reimbursement, Student Loan Assistance or 529 College Funding
• Sabbatical leave
• Wellness program
• Flexible work schedule

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed
• Number of Employees: 501-1,000 employees