IAM Solutions Architect

Accountabilities:: Lead non-human identity program architecture covering discovery, inventory, lifecycle management, ownership, credential and secret management, rotation, attestation, and decommissioning. Design reference architectures for workforce, customer, and non-human identity environments, including workloads, machine identities, service accounts, API credentials, bots, and AI agents. Assess AI agent identity models, lifecycles, and control requirements as organizations adopt increasingly autonomous technologies. Develop architecture review and cybersecurity artifacts, including reference architecture diagrams, data and process flows, detailed security diagrams, and technical documentation. Lead program assessments, vendor and technology evaluations, future-state architecture, governance model design, platform architecture reviews, and product health checks. Own solution architecture and design authority across non-human identity implementations and SailPoint engagements. Lead design workshops and proofs of concept, establish technical decisions, and provide clear direction for engineering teams. Define integration patterns, data models, access models, and non-functional requirements covering security, scalability, resiliency, and performance. Communicate architecture decisions and implementation progress to technical and non-technical client stakeholders, supporting successful adoption of proposed solutions. Provide technical guidance to resolve complex identity challenges while remaining engaged enough to understand implementation realities. Support roadmap development, certification strategy, configuration and tuning, and program reporting. Lead knowledge transfer and operating-model design to enable client teams to independently operate and evolve their identity programs. Contribute to proposals, statements of work, and solution scoping when appropriate. Requirements: 8+ years of experience in identity and access management, including significant experience as a solutions architect, technical lead, principal engineer, or similar senior technical role. Strong expertise in at least one identity domain, such as identity governance, privileged access management, or identity provider and authentication platforms. Experience with technologies such as SailPoint IdentityIQ or Identity Security Cloud, Saviynt, CyberArk, Delinea, BeyondTrust, Okta, Microsoft Entra ID, or Ping is highly relevant. Broad understanding of IAM capabilities, including governance, privileged access, secrets management, certificate management, authentication, MFA, identity providers, and authorization. Strong understanding of workforce, customer, and non-human identities, with the ability to identify and assess different NHI types and their lifecycle characteristics. Ability to assess enterprise environments and identify non-human identities, ownership models, authentication methods, and lifecycle requirements. Working knowledge of AI agent types, lifecycles, and associated identity and security controls; direct experience governing agent fleets is not required. Ability to create detailed technical and security artifacts suitable for architecture review boards and cybersecurity reviews. Strong client-facing communication skills, with the ability to engage technical architects and clearly explain complex decisions to non-technical stakeholders. Ability to challenge client assumptions constructively, explain technical risks, and recommend practical solutions. Comfortable working independently on smaller engagements and taking ownership of the client relationship and technical outcome. Demonstrated curiosity and continuous learning, including evidence of self-directed technical development such as home labs, side projects, or independently acquired skills. U.S.-based and authorized to work in the United States. Experience with NHI, machine identity, secrets management, certificate lifecycle management, cloud identity, Zero Trust, or regulated industries is a plus. SailPoint, CyberArk, Okta, Microsoft Entra, CISSP, or similar certifications are helpful but are not required. Prior experience with a formal architect title is not required when equivalent technical depth and architecture experience can be demonstrated. Benefits: Remote-first position for U.S.-based professionals. Flexible working hours, with client time zones taking priority when required. 20 days of paid time off, provided as an annual bucket. Paid holidays. Medical, dental, and vision coverage through Aetna. 401(k) with company match, including a full match on the first 3% and half match on the next 2%. Annual performance-based bonus eligibility. Sponsored training and professional certifications across relevant identity platforms. Structured enablement for emerging non-human identity technologies. Direct client exposure and meaningful ownership of complex identity architecture initiatives. Opportunity to contribute to the development of a growing identity services practice.