Identity and Access Management (IAM) Solutions Architect

The Identity and Access Management Solutions Architect designs, builds, and owns the architecture for identity and access management across the organization, covering both human identities and non-human identities. This is an individual-contributor, execution-focused role: the architect leads the strategy, design, and governance of identity systems while helping building and configuring solutions in Okta and Auth0, and serves as the technical authority on identity security, lifecycle management, and zero-trust access patterns. Applied experience in deploying non-human identities is required.

• Design, build, and configure the enterprise IAM architecture, including SSO, MFA, adaptive authentication, and federation across Okta and Auth0
• Own and directly implement the strategy for non-human identity: service accounts, workload identities, secrets and credential management, machine-to-machine authentication, and the emerging identity model for AI agents
• Define and enforce identity governance standards, including access reviews, privileged access management, and least-privilege models
• Architect, build, and operate identity lifecycle processes: provisioning, de-provisioning, and role-based or attribute-based access control
• Partner with engineering, security, and infrastructure teams to build and embed identity-first design into new systems and integrations
• Evaluate, select, and implement IAM tooling, and lead migrations or consolidations between identity platforms
• Establish and operate monitoring, auditing, and incident response practices specific to identity and access risk
• Serve as the subject-matter expert on IAM for audits, compliance reviews, and security assessments

• Applied experience securing human and non-human identities at an organizational scale required
• Deep, hands-on architecture experience with Okta and Auth0, including custom policies, connectors, and API-driven configuration
• Experience partnering across security, infrastructure, and application teams on identity-first design
• Strong background in authentication protocols and standards: OAuth 2.0, OIDC, SAML, SCIM
• Experience with privileged access management, secrets management, and workload identity frameworks
• Working knowledge of zero-trust architecture principles as applied to identity
• Strong written and verbal communication skills for translating architecture into practical guidance for engineering teams
• Comfort mentoring engineers on identity best practices, even without formal management responsibility