Senior Identity Application Architect, CIAM/IAM

🕒 June 30

🇺🇸 United States – Remote

💵 $145k - $175k / year

⏰ Full Time

🟠 Senior

🏛️ Architect

👻 Ghost score 22%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

AHEAD

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

🤖 Artificial Intelligence

🏢 Enterprise

💰 $5.7M Venture Round - AHEAD on 2024-05

Consulting • Artificial Intelligence • Enterprise

AHEAD is a technology consulting and systems-integration firm that accelerates digital transformation by engineering integrated solutions across infrastructure, applications, data, and security. The company specializes in AI transformation and AI-enabled infrastructure, data platform and platform/workload modernization, secure and resilient architectures, operational excellence, and managed services including IT lifecycle and procurement (AHEAD Hatch) and hardware integration (AHEAD Foundry). AHEAD delivers end-to-end services from strategy and financial consulting to build and run operations, partners with major cloud and infrastructure vendors (AWS, Google Cloud, Microsoft, Cisco, Dell, VMware, NVIDIA, ServiceNow, Palo Alto Networks, Rubrik, etc. ), and serves enterprise clients across industries such as healthcare, financial services, manufacturing, retail, and public sector.

📋 Description

• Lead the architecture and design of CIAM and IAM solutions for customer, partner, and workforce identity use cases • Define reference architectures, technical standards, integration patterns, and guardrails for identity services and lifecycle automation • Architect federation, single sign-on, adaptive authentication, MFA, delegated administration, identity proofing, registration, account recovery, consent, and progressive profiling solutions • Author an improvement plan for securely managing Agent and Agentic NHI risks • Design identity application patterns and integrations using OAuth 2.0, OpenID Connect, SAML, SCIM, LDAP, REST APIs, webhooks, and event-driven architectures • Guide engineering teams implementing identity-enabled applications, APIs, portals, and workflows • Lead solution design for customer and workforce onboarding, joiner-mover-leaver processes, access requests, and entitlement or role models • Drive architecture decisions for identity data models, directory strategy, attribute governance, role and group strategy, policy design, and enterprise integrations • Evaluate and improve identity platforms, custom integrations, and application access patterns • Ensure resilience, scalability, observability, auditability, privacy, and compliance by design • Produce architecture diagrams, standards, roadmaps, decision records, and implementation guidance • Facilitate design reviews, threat-informed architecture reviews, and technical governance • Mentor engineers and administrators • Collaborate with vendors and internal teams to assess capabilities and recommend improvements • Monitor IAM and CIAM trends, standards, threats, and vendor capabilities and turn them into architectural recommendations

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field, or equivalent practical work experience • Minimum 7 years of progressive experience in identity and access management, application security, or enterprise architecture • Minimum 4 years of experience architecting or leading implementations for CIAM and/or IAM platforms • Practical experience designing integrations across identity providers, cloud platforms, customer-facing applications, HR systems, CRM platforms, IT service management systems, and related enterprise applications • Experience with Okta, Auth0, Microsoft Entra ID, AWS, Azure, Salesforce, ServiceNow, or comparable platforms • Experience leading technical design for secure APIs, identity-aware applications, and event-driven or service-based integrations • Demonstrated success balancing security, privacy, user experience, scalability, and operational support requirements • Required certification in at least one relevant identity or cybersecurity discipline, such as CISSP, CCSP, IDPro, Okta Certified Professional or Administrator, Okta Certified Developer, Microsoft SC-300, AWS Security Specialty, or comparable credentials • Strong expertise in CIAM and IAM architecture • Deep understanding of OAuth 2.0, OpenID Connect, SAML, SCIM, and token, session, and federation concepts • Experience designing customer identity journeys, including registration, login, MFA, passwordless options, account recovery, consent, profile management, and user experience • Experience designing enterprise IAM patterns for role-based access, attribute-based access, entitlement management, least privilege, and segregation of duties • Strong understanding of identity-related security principles, including session security, secrets protection, API security, bot and fraud considerations, logging, monitoring, threat modeling, and auditability • Ability to define architecture roadmaps, target states, transition plans, and decision frameworks • Experience working across engineering, infrastructure, security, product, and business teams • Ability to review solution designs and code or configuration patterns for architectural alignment • Familiarity with CI/CD, infrastructure as code, automated testing, observability, and secure development practices • Ability to adopt AI-assisted engineering tools such as Claude, GitHub Copilot, Cursor, or similar technologies securely and effectively • Strong written and verbal communication skills • Strong problem-solving skills • Interest in or experience with agentic AI, non-human identities, machine identities, and modern IAM governance • Familiarity with Agile delivery practices and Jira • Ability to safely and successfully perform essential job functions consistent with applicable standards • Ability to maintain regular, punctual attendance

🏖️ Benefits

• Medical, Dental, and Vision Insurance • 401(k) • Paid company holidays • Paid time off • Paid parental and caregiver leave • Cross department training and development • Sponsoring certifications and credentials for continued learning • Multi-million-dollar technology lab • Diversity and inclusion initiatives through internal groups like Moving Women AHEAD and RISE AHEAD