Senior IAM Architect

Job not on LinkedIn

🔥 0 minutes ago

Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of ESA - Electronic Security Association

ESA - Electronic Security Association

11 - 50 employees

Founded 1948

🔐 Security

📋 Compliance

Security • Compliance • Advocacy

ESA - Electronic Security Association is the largest trade association in the United States representing the electronic security and life safety industry. Founded in 1948, the association consists of member companies that install, integrate, and monitor intrusion, fire detection, video surveillance, and electronic access control systems for a wide range of clients, including commercial, residential, industrial, and governmental sectors. ESA provides technical and management training, government advocacy, and delivers information, advice, tools, and services that help member businesses grow and succeed. With over 500,000 industry professionals employed by its members, ESA serves over 34 million residential and commercial customers. The association is also actively involved in advocating for school security improvements at federal and state levels.

📋 Description

• Own the enterprise IAM architecture strategy, target state, and roadmap across cloud, on-premises, and hybrid environments, aligned to Zero Trust and security standards. • Serve as the IAM technical authority and provide hands-on architectural leadership across infrastructure, cloud, and platform security initiatives. • Design and document end-to-end IAM capabilities across IGA, access management, PAM, secrets, and non-human identities. • Define integration patterns and reference architectures; evaluate build vs. buy and emerging IAM capabilities (e.g., passwordless, AI/agentic identities, decentralised identity) to deliver scalable services across applications, infrastructure, and DevOps tooling. • Architect authentication and authorisation (SSO, MFA, RBAC/ABAC) and standardize protocols (OAuth2/OIDC, SAML, SCIM, LDAP). • Lead IAM platform design and integration across cloud/hybrid (e.g., Microsoft Entra ID, Active Directory, SailPoint, PingFederate/Ping Identity, AWS IAM, CyberArk or equivalent). • Define identity lifecycle controls (joiner/mover/leaver, provisioning, access certifications, and role/entitlement modeling). • Identify IAM risks and architecture gaps; define constraints and mitigations, and drive remediation through roadmap and delivery items. • Ensure IAM controls and integrations meet security and regulatory requirements (e.g., NIST SP 800-63, ISO 27001, SOC 2, GDPR) and support audit activities. • Partner with business stakeholders to align IAM outcomes to enterprise objectives and communicate decisions and tradeoffs to senior leadership.

🎯 Requirements

• Strong experience in the identity and access management, preferably at architecture level, however IAM Engineers seeking opportunities to advance to an architecture role will be considered • Strong experience across core IAM domains: IGA (lifecycle, certifications), access management (SSO/MFA), Conditional Access, PAM, and non-human identity (workload/service identities), with hands-on-experience with one or more enterprise IAM platforms (e.g., Microsoft Entra ID/Azure AD, Okta, Ping, SailPoint) and integration across cloud/hybrid environments. • Deep knowledge of authentication/authorisation patterns and protocols: OAuth 2.0/OIDC, SAML 2.0, SCIM, and LDAP/AD. • Solid understanding of cloud IAM (AWS, Azure, and/or GCP), including identity federation and least-privilege design. • Experience assessing IAM risks and security controls, defining mitigations, and supporting audits and compliance requirements (e.g., NIST/ISO). • Strong analytical, problem-solving, and communication skills, with the ability to engage both technical and non-technical stakeholders effectively • Collaborative team player who adapts quickly to changing priorities while maintaining attention to detail

🏖️ Benefits

• Funding provided to support your self-development • 5 weeks of paid vacation • Fully remote work model • Flexible working hours • On-site canteen & home office meal vouchers • Pension plan or DIP contributions • Discounted phone plans & company product discounts • Multisport Card & cafeteria program

Apply Now