Overview In this role, you will lead the design and modernization of enterprise identity security across on-prem and cloud environments. You will shape the IAM, IGA, SSO, and PIM strategy to enable secure, scalable access while aligning with compliance requirements. You'll drive Zero Trust initiatives and collaborate with cross-functional teams to implement robust identity solutions. This position offers strategic impact across security and cloud domains within a global IT ecosystem.
Compensation / Benefits- medical, dental, vision
- 401(k) with company matching
- employee stock purchase program (ESPP)
- tuition reimbursement
- wellness benefits and EAP
- paid time off and holidays
Responsibilities- Develop and maintain the enterprise identity architecture blueprint for IAM, IGA, SSO, PIM, and cloud identity services
- Define identity standards and reference architectures for on-premises and cloud environments
- Drive Zero Trust identity strategy, modern authentication roadmap, and identity lifecycle transformation
- Assess identity risk posture and recommend controls aligned with business/compliance needs
- Architect and implement identity lifecycle and governance (role modeling, access certification, automated provisioning/deprovisioning)
- Integrate IGA with HR systems, AD/Entra ID, cloud apps, and SaaS platforms
- Define RBAC/ABAC frameworks and enforce least privilege across the enterprise
- Design PIM and privileged access architectures (just-in-time access, session management, secure admin tiering)
- Lead hybrid identity design involving Entra ID, AAD Connect, federation, and migration to modern authentication
- Optimize identity infrastructure for scalability, resilience, and security
- Architect cloud identity solutions across Azure, multicloud, and SaaS platforms
- Guide modern identity adoption (passwordless, FIDO2, device/workload identity)
- Provide architecture governance and mentorship to engineering teams
- Partner with compliance and risk teams to support audits and regulatory reporting
Key requirements- Eight+ years of experience in large enterprise environments
- Five+ years of experience designing enterprise-grade solutions
- Hands-on experience with IAM systems like Ping, Okta, or Azure EntraID
- Experience with IGA tools like Sailpiont or Savyint and PIM tools like CyberArc or BeyondTrust
- Experience with multi-cloud identity (AWS, GCP)
- Experience leading large-scale identity modernization or cloud transformation programs
- Knowledge of regulatory frameworks (SOX, HIPAA, PCI, ISO 27001, NIST)
- Identity/security certifications are a plus
- Strong collaboration across cross-functional teams
- Strategic thinking with risk awareness
- Mentorship and architectural governance
- Identity & Access Management (IAM)
- Identity Governance & Administration (IGA)
- Privileged Identity Management (PIM)
