Identity and Access Management Architect, Global Deloitte Technology
Description
--
What will your typical day look like?
- Partner with Senior IAM leadership team to define and own the enterprise IAM architecture, strategy, reference patterns, and roadmaps across authentication, authorization, identity lifecycle, privileged access, and account protection.
- Engage in executive level leadership conversations, translate business goals into IAM requirements, coordinate with IAM product owners on technical feasibility to ensure solutions scale and interoperate across on-premises, cloud, and hybrid environments.
- Partner with IAM product technical leads to assist with technical design and implementation for authentication (e.g. MFA, SSO, etc), authorization models (e.g. RBAC, ABAC, etc), identity provisioning, lifecycle management, and privileged access controls.
- Champion innovation with Identity and Access Management tools, evaluate and provide recommendations to product owners for consideration and integration with the existing platform, while balancing security, privacy, and usability.
- Architect secure integrations between IAM platforms and applications, directories, cloud services, and CI/CD pipelines; set standards and reusable patterns for developers.
- Partner with IAM Sr. Leadership team and IAM product technical leads to address IAM risk assessments, threat modeling, and remediation strategies; partner with security, risk, and compliance teams to implement controls and measure risk reduction.
- Partner with IAM product technical leads to oversee incident response activities as they relate to identity compromise, and lead post-incident root-cause analysis and remediation.
- Drive adoption: create technical guidance, architecture diagrams, and executive-level briefings; mentor architects and senior engineers on IAM best practices.
- Collaborate with product, engineering, and business leaders to prioritize roadmap items, measure outcomes (security posture, access-related incidents, time-to-provision), and demonstrate business value.
- Ensure compliance with relevant regulations and internal policies; support audits and attestations related to identity and access controls.
About the team
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
Enough about us, let’s talk about you
- 10+ years of IAM experience with progressive technical leadership; experience in a consulting or large enterprise environment preferred.
- Proven track record designing, delivering, and operating enterprise-scale IAM solutions across cloud and on-prem environments.
- Deep technical knowledge of authentication/authorization protocols and standards (OAuth2/OIDC, SAML, SCIM, LDAP) and modern IAM architectures.
- Hands-on experience with at least two major IAM technologies (e.g., Entra ID/Azure AD, Microsoft AD, CyberArk, SailPoint, Ping Identity).
- Strong stakeholder management and communication skills; able to present technical concepts to executive audiences and translate business needs into technical requirements.
- Experience leading vendors, technical teams, and cross-functional workstreams to successful outcomes.
- Advanced degree (MS) or certifications (e.g., CISSP, CISM, SABSA, TOGAF, vendor-specific IAM certs).
- Experience with zero-trust identity models, identity governance, privileged access management, and modern authentication modalities (passwordless, biometrics, adaptive MFA).
- Prior experience building IAM programs or working in high-regulation industries (finance, healthcare, government).
- Balance strategic thinking with the ability to roll up sleeves and deliver technically where needed.
- Identity Providers / Directories: Entra ID/Azure AD, Microsoft AD
- Identity Governance and PAM: SailPoint, CyberArk
- Authentication & Federation: Ping Identity, OAuth2/OIDC, SAML, SCIM
- Cloud & DevOps integration: AWS/Azure/GCP identity services, CI/CD tooling
Total Rewards
The salary range for this position is $104,000 - $215,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver.
Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth. Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. On top of our regular paid vacation days, some examples include: $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, firm-wide closures known as "Deloitte Days", dedicated days of for learning (known as Development and Innovation Days), flexible work arrangements and a hybrid work structure.