Identity & Access Management Architect

Skechers•Manhattan Beach, CA

23h

About The Position

The Identity & Access Management (IAM) Architect is a key member of the IAM team. This role shapes and delivers the organization’s global identity architecture across workforce IAM, privileged access, identity governance, customer identities, non-human identities, and non-employee and contingent-worker identities. The architect translates business, security, threat, and operational requirements into resilient identity solutions. The role provides technical direction while remaining directly involved in design, integration, testing, implementation, and complex troubleshooting across cloud, enterprise, application, and security environments. This role requires deep expertise in modern identity threats and defensive controls. The architect must recognize exploitable trust relationships and attack paths, understand how adversaries compromise human and nonhuman identities, and design preventive, detective, and responsive controls that materially reduce identity risk.

Requirements

Deep technical expertise and extensive hands-on experience across identity lifecycle management, authentication, authorization, federation, access governance, customer identity, privileged access, cloud IAM, and nonhuman identity controls
Expert-level understanding of Zero Trust architecture, least privilege, continuous access evaluation, authentication assurance, trust boundaries, and risk-based authorization
Deep knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, APIs, tokens, sessions, federation, and modern identity integration patterns
Demonstrated expertise identifying and mitigating identity threats such as adversary-in-the-middle phishing, credential and token theft, session hijacking, MFA bypass, password attacks, consent phishing, OAuth abuse, privilege escalation, and nonhuman identity compromise
Experience implementing phishing-resistant authentication, adaptive access, device and workload trust, token protection, session controls, and just-in-time privileged access
Ability to design integrations, diagnose complex identity flows, analyze attack paths, challenge unsafe trust assumptions, and select controls that reduce likelihood and blast radius
Deep understanding of security and governance controls for privileged accounts, service accounts, application identities, workloads, secrets, and machine credentials
Experience designing identity telemetry, detections, investigation workflows, and response playbooks in partnership with security operations teams
Strong communication and collaboration skills, including the ability to document architecture, explain technical risk, and influence outcomes without direct authority
Extensive professional experience designing, implementing, integrating, securing, and supporting enterprise identity and access management solutions
Demonstrated experience serving as a hands-on technical architect, solution designer, lead engineer, or equivalent IAM subject-matter expert responsible for complex troubleshooting

Nice To Haves

Relevant identity, security, cloud, or architecture certifications are a plus
Experience operating IAM capabilities across a global, hybrid, and multi-cloud environment preferred
Experience with identity threat detection and response, identity attack-path analysis, or exposure-management practices preferred
Experience securing privileged and nonhuman identities at enterprise scale preferred
Hands-on experience using infrastructure as code, scripting, APIs, workflow automation, and software-development practices to automate IAM capabilities preferred

Responsibilities

Own end-to-end technical architecture for workforce IAM, customer identity, privileged access, identity governance, non-human identities, and non-employee identities, translating business requirements into resilient solutions
Lead technical design reviews and provide authoritative guidance to IAM, application, infrastructure, cloud, cybersecurity, and business teams
Design, configure, build, integrate, test, and troubleshoot IAM solutions, including proofs of concept and production-ready implementations
Partner with engineers and analysts to implement designs, resolve complex issues, translate governance requirements, and establish effective operational handoffs
Design identity lifecycle and access controls for employees, contractors, third parties, and other contingent workers, including joiner, mover, and leaver processes
Design secure customer identity patterns that protect accounts and sessions while supporting appropriate authentication, authorization, privacy, and user experience
Architect lifecycle, privilege, credential, and monitoring controls for privileged and nonhuman identities, including service accounts, application identities, workloads, secrets, keys, and machine credentials
Advance access governance capabilities including requests, approvals, certifications, role and entitlement design, segregation of duties, and policy enforcement
Threat-model identity architectures and remediate attack paths involving credentials, tokens, sessions, federation trusts, privileged roles, delegated permissions, and nonhuman identities
Apply Zero Trust principles through phishing-resistant authentication, adaptive access, device and workload trust, token and session protection, least privilege, continuous evaluation, and controls that limit blast radius
Integrate identity providers, cloud IAM, access governance, privileged access, security telemetry, zero-trust access, and service-management capabilities using vendor-neutral patterns
Partner with security operations and incident response teams to produce actionable identity telemetry, detection logic, investigation context, containment options, and post-incident improvements
Automate IAM processes, remove standing access, and prioritize control improvements based on threat likelihood, exploitability, blast radius, and business impact
Ensure identity solutions are auditable and satisfy applicable privacy, financial-control, and regulatory obligations without compromising effective security design