This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Identity Application Architect based in the United States.
This role sits at the intersection of enterprise architecture, cybersecurity, and modern identity engineering, shaping how customers, partners, and employees securely access digital services at scale. You will define and evolve the target-state architecture for CIAM and IAM solutions, ensuring secure, seamless, and scalable identity experiences across complex enterprise ecosystems. The position involves designing authentication, authorization, federation, and lifecycle management patterns that span cloud and on-prem environments. You will collaborate closely with security, product, engineering, and business stakeholders to translate requirements into robust identity architectures. A key part of the role is driving integration strategies across leading platforms such as Okta, Auth0, Microsoft Entra ID, AWS, and Salesforce. You will also influence identity data models, governance standards, and access policies to ensure compliance, resilience, and usability. This is a high-impact architecture role with direct influence on enterprise security and user experience strategy.
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Identity Application Architect based in the United States.
This role sits at the intersection of enterprise architecture, cybersecurity, and modern identity engineering, shaping how customers, partners, and employees securely access digital services at scale. You will define and evolve the target-state architecture for CIAM and IAM solutions, ensuring secure, seamless, and scalable identity experiences across complex enterprise ecosystems. The position involves designing authentication, authorization, federation, and lifecycle management patterns that span cloud and on-prem environments. You will collaborate closely with security, product, engineering, and business stakeholders to translate requirements into robust identity architectures. A key part of the role is driving integration strategies across leading platforms such as Okta, Auth0, Microsoft Entra ID, AWS, and Salesforce. You will also influence identity data models, governance standards, and access policies to ensure compliance, resilience, and usability. This is a high-impact architecture role with direct influence on enterprise security and user experience strategy.
Accountabilities
- Lead the architecture and design of CIAM and IAM solutions supporting customer, partner, and workforce identity use cases across enterprise and digital platforms.
- Define reference architectures, security standards, and integration patterns using protocols such as OAuth 2.0, OpenID Connect, SAML, SCIM, LDAP, and REST APIs.
- Architect identity-enabled applications and workflows including onboarding, authentication, MFA, account recovery, consent, and lifecycle management processes.
- Design and govern identity data models, directory strategies, role/group structures, and access control policies across enterprise systems.
- Drive integration architecture across platforms such as Okta, Auth0, Microsoft Entra ID, AWS, Azure, Salesforce, and ServiceNow.
- Evaluate and optimize identity systems and workflows to improve scalability, security, compliance, and operational efficiency.
- Produce architecture documentation including diagrams, standards, roadmaps, and design decision records, and lead technical governance reviews.
- Collaborate with cross-functional teams to align identity architecture with business, security, privacy, and user experience requirements.
- Mentor engineering teams and provide guidance on identity architecture best practices and implementation patterns.
- Stay current on IAM/CIAM trends, emerging threats, and evolving identity standards to inform strategic decisions.
- 8+ years of experience in Identity and Access Management, application security, or enterprise architecture roles.
- 5+ years of experience designing or implementing CIAM and/or IAM platforms at scale.
- Strong expertise in identity protocols and standards including OAuth 2.0, OpenID Connect, SAML, and SCIM.
- Hands-on experience with platforms such as Okta, Auth0, Microsoft Entra ID, AWS, Azure, Salesforce, or ServiceNow.
- Proven ability to design secure identity journeys including login, registration, MFA, passwordless authentication, and account recovery.
- Strong understanding of enterprise access models including RBAC, ABAC, least privilege, and entitlement management.
- Experience integrating identity systems across HR, CRM, ITSM, and enterprise application ecosystems.
- Solid background in security principles including API security, session management, threat modeling, and auditability.
- Ability to define target-state architectures, roadmaps, and modernization strategies for identity systems.
- Strong communication skills with experience presenting technical decisions to both engineering and executive audiences.
- Familiarity with modern engineering practices such as CI/CD, IaC, observability, and secure development workflows.
- Relevant certifications (e.g., CISSP, CCSP, SC-300, Okta, AWS Security Specialty) are strongly preferred.
- Experience with AI-assisted development tools and awareness of emerging identity challenges (e.g., machine identities, agentic AI) is a plus.
- Fully remote position within the United States.
- Competitive compensation aligned with experience and market benchmarks.
- High-impact architecture role shaping enterprise identity strategy and security posture.
- Opportunity to work with leading CIAM/IAM platforms and modern cloud ecosystems.
- Exposure to complex, large-scale identity transformations across enterprise systems.
- Comprehensive benefits package including health coverage, retirement plans, and paid time off (where applicable through the partner organization).
- Professional growth in a highly strategic cybersecurity and architecture domain.
- Collaborative environment focused on innovation, security, and continuous improvement.