Identity and Access Management (IAM) Architect

PennyMac • Carrollton, TX

69d • $110,000 - $175,000

About The Position

As an Identity Access Management Architect, you will be the principal owner and strategic visionary for our enterprise-wide Identity and Access Management (IAM) ecosystem. This is a critical leadership role responsible for designing, building, and maintaining the architectural foundation that secures our corporate data and enables our global workforce. You will architect a modern, scalable, and resilient identity fabric, leveraging industry-leading platforms to support our zero-trust security model and drive business agility. You will oversee all company identity platforms, provide architectural guidance and best practices, design and lead the implementation of platform enhancements, and continuously identify areas for improvement, increased security and resiliency, and operational efficiencies.

Requirements

• 5+ years in a senior role focused specifically on Identity and Access Management.
• 5+ years of deep, hands-on experience with Microsoft Active Directory architecture and management.
• 3+ years of hands-on experience with SAML IDP/Brokers (e.g., ADFS, Okta, Entra ID, OneLogin).
• Expert-level architectural experience with Okta, Active Directory/Entra ID, and Okta (Auth0).
• Proven experience designing and implementing complex identity federation solutions using SAML 2.0, OAuth 2.0, and OIDC.
• Experience integrating identity services with enterprise SaaS applications, cloud-native services, and legacy systems.
• Ability to conceptualize, design, and implement identity models across systems, ensuring least-privileged RBAC, strong naming conventions, and rich identity metadata.
• Proficiency in PowerShell or other scripting/automation languages.
• Experience architecting identity solutions for major cloud platforms (AWS, GCP).
• Familiarity with JIRA, Service now, or other ITSM systems.

Nice To Haves

• Relevant industry certifications, such as Okta Certified Technical Architect, Microsoft Certified: Identity and Access Administrator Associate/Expert, or CISSP.
• Knowledge of Infrastructure as Code (IaC) principles and tools (e.g., Terraform) as they apply to IAM.
• Experience with adjacent security domains, such as Privileged Access Management (PAM) and Identity Governance & Administration (IGA) platforms.

Responsibilities

• Provide high-level oversight of all company identity platforms.
• Design, own, and evolve the enterprise identity architecture and strategic roadmap, encompassing Workforce and Customer IAM (CIAM).
• Develop and maintain high-level and low-level design documents, standards, and patterns for our core identity platforms.
• Design robust identity patterns for internal application development and off the shelf applications.
• Lead the architectural design of complex federation patterns using Multi-factor Authentication, SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) to securely integrate a diverse portfolio of SaaS, cloud applications, and internal applications.
• Drive and oversee platform improvements, including IDP consolidation (e.g., OneLogin -> SDO) and cleanup of existing identity providers.
• Serve as the senior technical expert on projects involving identity, authentication, and authorization.
• Provide expert-level troubleshooting for the most complex identity-related issues.
• Partner with the InfoSec team to define and enforce IAM policies, controls, and best practices aligned with a zero-trust framework.
• Maintain a strong awareness of security issues and considerations around identity platforms and lead efforts to mitigate and remediate risks.
• Lead Active Directory management and cleanup initiatives, including modernization, de-nesting groups, identifying risky service accounts, and performing remediation of over-privileged accounts and SPNs.
• Ensure all identity solutions meet stringent security requirements and comply with regulatory standards (e.g., SOX, GDPR, CCPA).
• Collaborate closely with application owners, infrastructure engineers, Infosec, and business stakeholders to translate requirements into secure and scalable identity solutions.
• Mentor and guide senior engineers, fostering technical excellence and professional growth.
• Clearly articulate and present complex architectural concepts to technical and non-technical audiences, including executive leadership.

Benefits

• Comprehensive Medical, Dental, and Vision
• Paid Time Off Programs including vacation, holidays, illness, and parental leave
• Wellness Programs, Employee Recognition Programs, and onsite gyms and cafe style dining (select locations)
• Retirement benefits, life insurance, 401k match, and tuition reimbursement
• Philanthropy Programs including matching gifts, volunteer grants, charitable grants and corporate sponsorships

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Credit Intermediation and Related Activities