Identity Access Management Architect

HUB International • Chicago, IL

1d • $120,000 - $150,000 • Hybrid

About The Position

HUB International is seeking an experienced IAM Architect to design, build, and evolve its enterprise Identity and Access Management program. The role leads architectural standards for authentication, authorization, provisioning, and privileged access across cloud, SaaS, and on-premises environments. It translates business and security requirements into reference architectures, technical standards, and multi-year roadmaps supporting workforce and privileged identities.

The IAM Architect leads the architecture, design, implementation, and integration of IAM/IGA solutions; establishes governance models and best practices; and develops scalable identity lifecycle processes. The role works across cybersecurity, infrastructure, cloud, and application teams to align identity strategy with enterprise security goals, support compliance and audit readiness, and improve identity operations. It also provides technical leadership and mentoring, participates in planning and design reviews, and supports Agile delivery. The position reports into Chicago and is hybrid, with travel of up to 10% of working time.

Requirements

• Bachelor's degree in technology or security, or equivalent experience.
• 7+ years of experience in identity and access management, including at least 3 years in an architecture or technical leadership role.
• Proven experience designing and implementing enterprise IGA/IAM solutions such as SailPoint ISC/IdentityNow, Saviynt, or similar platforms.
• Experience with access certifications, provisioning workflows, lifecycle management, and governance controls.
• Strong understanding of Zero Trust architecture and enterprise security frameworks.
• Expertise with IGA platforms, Active Directory, Entra ID, LDAP, SSO, RBAC, REST APIs, and/or JSON/XML.
• Expertise with SAML, OIDC, OAuth, and SCIM.
• Experience integrating IAM platforms with HR systems such as Workday, ITSM tools such as ServiceNow and JIRA, business applications, and cloud platforms such as AWS, Azure, and GCP.
• Understanding of identity and access compliance and audit requirements.
• Excellent communication skills and ability to explain technical concepts to technical and non-technical stakeholders.
• Experience mentoring engineers and leading technical governance discussions.
• Familiarity with Agile delivery methodologies.
• Knowledge of security standards, guidelines, and information-security regulatory and compliance requirements such as ISO 27001, NIST 800-53, SOC 2, PCI, and SOX.
• Willingness to travel up to 10% of working time.

Responsibilities

• Develop and maintain the enterprise IAM framework for authentication, authorization, provisioning, and privileged access.
• Rationalize identity platforms and standardize integration patterns to reduce complexity, cost, and operational risk.
• Ensure high availability, resilience, and audit readiness of identity services.
• Improve Joiner-Mover-Leaver onboarding and offboarding efficiency and reduce identity-related security incidents, including credential compromise and orphaned accounts.
• Provide technical leadership for IAM initiatives and develop scalable identity architecture and governance standards across cloud and on-premises environments.
• Ensure identity operations use tools and processes that support rapid identification of security events and mitigation of risks.
• Engage with peers on security operations functions, project status, activities, and achievements.
• Lead continuous-improvement efforts for HUB's information security identity tooling and systems.
• Plan, organize, and execute responsibilities to achieve project goals and move operational projects to completion.
• Contribute to security requirements, standards, procedures, and reference architectures that comply with policies and technical standards.
• Lead the architecture, design, implementation, and integration of IAM/IGA solutions across enterprise environments.
• Define IAM architecture standards, governance models, and best practices.
• Design scalable Joiner, Mover, and Leaver identity lifecycle workflows.
• Architect integrations with Active Directory, Azure AD/Entra ID, Workday, ServiceNow, LDAP, SAP, cloud platforms, and REST APIs.
• Maintain IAM architectural diagrams, as-built documentation, and roadmaps.
• Lead application onboarding, provisioning, deprovisioning, and access-certification initiatives.
• Provide architecture guidance for compliance, audit readiness, and regulatory requirements, including SOX, HIPAA, GDPR, and PCI-DSS.
• Collaborate with cybersecurity, infrastructure, cloud, and application teams to align IAM strategy with enterprise security goals.
• Mentor engineers, developers, and analysts on IAM platform best practices and technical standards.
• Participate in roadmap planning, technical governance, and solution architecture reviews.
• Support Agile delivery, sprint planning, and technical design workshops.
• Travel up to 10% of working time.

Benefits

• Comprehensive health, dental, vision, life, and disability insurance.
• Flexible spending account (FSA).
• 401(k) accounts and retirement savings matching.
• Paid time off, including vacation, sick, personal, floating holidays, and company holidays.
• Paid parental leave.
• Wellbeing program.
• Structured training, licensing support, and ongoing development opportunities.
• Eligible annual bonuses, equity, and commissions may be available for some positions.
• Company-paid life and disability plans.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior