Principal IAM Architect

Job not on LinkedIn

November 21

Apply Now

Receive Emails with Similar Jobs

Granicus

WebsiteLinkedInAll Job Openings

Government • SaaS • Compliance

Granicus is a company focused on transforming the way governments interact with their constituents through digital services and technology solutions. It provides the Government Experience Cloud to improve service delivery, community engagement, and operational efficiency across local, state, and federal governments. Granicus offers tools for agenda and meeting management, digital communication and engagement, public records management, and more, all designed to enhance customer experience and foster transparent and equitable interactions between governments and the people they serve.

501 - 1000 employees

Founded 1999

🏛️ Government

☁️ SaaS

📋 Compliance

📋 Description

• Define and own the target-state architecture, roadmap and technical strategy for identity lifecycle management, access governance, and privileged access within the enterprise. • Lead the implementation of provisioning/deprovisioning workflows, role and entitlement models (RBAC/ABAC), integration with authoritative sources (HR, contractors), and service accounts. • Design and implement identity platforms and toolsets (IGA, PAM, Identity Federation, SSO, SAML/OIDC, SCIM) across cloud (AWS/Azure/GCP) and on-premises environments. • Drive identity governance activities including access certification campaigns, orphan account reconciliation, SoD controls, least-privilege enforcement and continuous improvement. • Collaborate with security operations, compliance, architecture and DevSecOps teams to embed identity controls, monitor identity risk and ensure audit/regulatory readiness (SOC 2, ISO 27001, FedRAMP, GDPR). • Lead hands-on technical delivery: scripting/APIs/infrastructure as code for identity automation, cloud directory services (Azure AD/Entra ID), Okta/SailPoint/ForgeRock or similar platforms. • Serve as subject-matter expert (SME) in identity technologies, keep abreast of trends (Zero Trust, passwordless, CIAM) and translate business needs into identity solutions. • Define and lead the architecture, roadmap and strategy for Identity Management, Governance, and Privileged Access. • Build or re-engineer identity lifecycle capabilities (on-boarding, off-boarding, provisioning/deprovisioning, access reviews, role/entitlement modelling). • Integrate identity systems across cloud/hybrid/on-premises, including directories (AD/Azure AD/Entra ID), federation (SAML/OIDC/OAuth2), provisioning standards (SCIM), PAM (Privileged Access) tools. • Embed identity governance & access review controls (IGA, SoD, least privilege) and support regulatory/compliance frameworks (SOX, PCI, GDPR, NIST, ISO). • Lead technical teams (mentor engineers, lead design reviews) and collaborate with business, security, architecture stakeholders. • Automate identity workflows using scripting/APIs.

🎯 Requirements

• Bachelor’s degree (Computer Science, Information Security, or related field) or equivalent experience. • 7- 15+ years of experience in IAM, identity engineering, security engineering; some years in leading/architecting, ideally with a global organization. • Hands-on expertise with identity platforms (Okta, SailPoint, ForgeRock, Azure AD/Entra ID, CyberArk, etc) + protocols (SAML, OIDC, OAuth2, SCIM, LDAP). • Proven experience building or transforming identity programs (lifecycle, governance, privileged access) from the ground up or major re-architectures. • Experience with hybrid cloud/on-premises identity, multi-cloud (AWS/Azure/GCP) environments. • Strong scripting/automation skills (PowerShell, Python, APIs) • Excellent written and verbal communication skills • Ability to demonstrate cross-functional leadership across all levels. • AI Enablement to enhance speed, automation, and transformation. • Demonstrated ability to integrate, implement, or work with AI technologies, tools, or frameworks. • Experience using AI tools (e.g., GitHub Copilot, etc.,) to improve development productivity. • Stay updated on emerging trends in AI and actively integrate relevant tools or practices into workflows.

🏖️ Benefits

• Flexibility & Balance • Paid Time Off– Take the time you need to rest, recharge, and live your life. • Company-Wide Wellbeing Days – Paid days off to unplug and focus on your mental health. • Work From Home Reimbursement – Support a productive home office environment. • Private healthcare benefits - Comprehensive coverage for you and your family. • On-Demand Mental Health Support – Access to Headspace and other wellness tools. • Fitness Reimbursement & Cycle Program – Stay active, your way. • Critical Illness and Life Insurance Benefits • Paid Parental Leave - For both birthing and non-birthing parents. • Pension plan with employer contributions • Online Learning Platforms – Fuel your professional development. • Competitive Salary & Bonuses – Your contributions are valued and rewarded.