Systems Architect — Identity & Access Management

T-Mobile•Frisco, TX

19h•$79,000 - $142,600•Onsite

About The Position

The System Architect is essential for designing and building enterprise-level identity and access management solutions that support secure access across the organization. It involves collaborating with leadership, principal architects, and development teams to align solutions with identity and security strategies. The role requires maintaining a thorough understanding of identity architecture to ensure solutions meet business and compliance requirements. Success is measured by the effectiveness of designing new solutions, driving it forward with experience at the core. The work directly impacts the organization's ability to leverage technology for secure, least-privilege access at scale. You'll join Identity Experience Operations, lead and Architect our Identity Management forward.

Requirements

Bachelor's Degree plus 3-5 years of related work experience OR advanced degree with 2-3 year of related work experience OR combination of education and experience deemed equivalent (Required)
Identity and Access Management
Federation Protocols — SAML 2.0, OIDC, OAuth 2.0, SCIM
Microsoft Entra ID (Azure AD)
Identity Lifecycle and Provisioning
Entitlement and Access Design
Directory Services and Hybrid Identity
Security Architecture and Zero Trust
API and Integration Architecture
Architectural Modeling
Prototyping
Solution Architecture
Stakeholder Management
Strategic Planning
Systems Architecture
Technology Roadmap
At least 18 years of age
Legally authorized to work in the United States

Nice To Haves

Acceptable areas of study include Computer Science, Technology or related field (Preferred)
2-4+ years of experience with enterprise level database systems such as Teradata, Oracle, SQL Server or others. (Preferred)
2-4+ years of experience with data modeling principles in relational and dimensional database structures. (Preferred)
2-4+ years demonstrated SQL knowledge and ability to write and understand complex SQL logic to join multiple tables from multiple sources. (Preferred)
Multi-cloud identity across Azure, AWS, and GCP
Identity Governance and Administration platforms such as SailPoint
Non-human and machine identity — service principals, managed identities
Conditional Access and Privileged Identity Management
AI-driven identity tooling, and hands-on use of AI tools such as Claude or GitHub Copilot
Automation and scripting — PowerShell, Python, Microsoft Graph
Regulated enterprise environments, and frameworks such as SOX or NIST 800-63
Certifications such as SC-300, CISSP, or TOGAF

Responsibilities

Architects and builds enterprise-class identity and access management solutions to meet organizational needs
Collaborates with leadership and technical teams to align solutions and drive new access management architecture with experience at the core.
Analyzes business requirements to ensure solutions effectively address organizational needs
Designs and governs single sign-on, federation, and identity lifecycle across hybrid environments
Designs entitlement and access package frameworks that enforce least privilege
Enhances decision-making and operational efficiency through innovative technology implementations
Evaluates emerging identity technologies and AI-driven tooling
Maintains up-to-date knowledge of information architecture to support solution development
Engages with stakeholders to facilitate the implementation of technological solutions
Also responsible for other duties/projects as assigned by business management as needed