IAM Security Architect

Mouser • Mansfield, TX

1d

About The Position

The IAM Security Architect is responsible for designing, building, and maintaining the enterprise IAM architecture and strategy. This role involves developing and implementing IAM policies, procedures, and standards, and leading the administration of IAM platforms. The architect will define identity lifecycle processes, establish access control models, and assess/remediate IAM capabilities to mitigate risk. Key responsibilities include driving the adoption of least privilege, eliminating high-risk access practices, and integrating IAM solutions across various systems. The role also involves conducting risk assessments, audits, and compliance activities, developing automation for IAM services, and providing technical guidance to IAM engineers. Staying current on IAM trends and threats is crucial, as is maintaining confidentiality of sensitive information.

Requirements

• Strong knowledge of Identity and Access Management concepts and technologies
• Expertise in Identity Governance, Active Directory / Entra ID, and Privileged Access Management
• Deep understanding of authentication and federation protocols (SAML, OAuth, OIDC)
• Experience implementing RBAC/ABAC models and access control frameworks
• Knowledge of security frameworks and compliance requirements (NIST, SOX, ISO, PCI, etc.)
• Strong analytical, problem-solving, and risk assessment skills
• Experience with automation, scripting, and API integrations
• Ability to communicate effectively with both technical and non-technical stakeholders
• Proven ability to work collaboratively across cross-functional teams
• Self-starter with strong initiative and the ability to identify and solve complex security challenges
• Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related field
• Minimum of 7+ years of experience in Identity and Access Management, security architecture, or related disciplines
• Proven experience designing and implementing enterprise-level IAM solutions
• Experience leading or contributing to large-scale IAM transformation or remediation initiatives

Nice To Haves

• CISSP, CISM, CISA, or IAM-specific certifications (e.g., SailPoint, Microsoft Identity)

Responsibilities

• Design, build, and maintain enterprise IAM architecture and strategy
• Develop and implement IAM policies, procedures, and standards aligned with security and compliance requirements
• Lead the implementation and ongoing administration of IAM platforms (e.g., identity governance, directory services, privileged access management)
• Define and implement identity lifecycle processes, including Joiner/Mover/Leaver (JML), provisioning, deprovisioning, and access certifications
• Establish scalable Role-Based and Attribute-Based Access Control (RBAC/ABAC) models
• Assess current IAM capabilities, identify gaps, and implement remediation strategies to mitigate risk
• Drive enterprise-wide adoption of least privilege and segregation of duties (SoD) principles
• Eliminate high-risk access practices, including excessive privileges, direct entitlement assignments, and orphaned accounts
• Collaborate with cross-functional teams to integrate IAM solutions across cloud, SaaS, and on-premises systems
• Conduct IAM-related risk assessments, audits, and compliance activities
• Develop automation and workflows to improve IAM service delivery and operational efficiency
• Provide technical guidance and oversight to IAM engineers and administrators
• Review IAM-related designs and implementations to ensure alignment with security standards and best practices
• Develop and maintain documentation, metrics, and reporting related to IAM program performance
• Stay current on IAM technologies, trends, and emerging threats, recommending improvements as needed
• Maintain strict confidentiality of all sensitive or confidential information

What This Job Offers

• Job Type: Full-time
• Career Level: Senior