Senior Identity Application Architect, CIAM/IAM

Duties/Responsibilities

• • Lead the architecture and design of CIAM and IAM solutions that support secure customer, partner, and workforce identity use cases across digital and enterprise environments. 

  • Define reference architectures, technical standards, integration patterns, and guardrails for identity services, authentication flows, authorization models, and lifecycle automation. 

  • Architect solutions for federation, single sign-on, adaptive authentication, MFA, delegated administration, identity proofing, registration, account recovery, consent, and progressive profiling. 

  • Author an improvement plan to transform the way Agent and Agentic NHI risks are handled, enabling the business to continue rapid Agent creation in a secure manner. 

  • Design identity application patterns and integrations using standards and protocols such as OAuth 2.0, OpenID Connect, SAML, SCIM, LDAP, REST APIs, webhooks, and event-driven architectures. 

  • Partner with engineering teams to guide implementation of identity-enabled applications, APIs, portals, and workflows while ensuring alignment to architecture principles and security requirements. 

  • Lead solution design for customer onboarding, workforce onboarding, joiner-mover-leaver processes, access request workflows, and fine-grained entitlement or role models where applicable. 

  • Drive architecture decisions for identity data models, directory strategy, attribute governance, role and group strategy, policy design, and integration with HR, CRM, ITSM, and other enterprise platforms. 

  • Evaluate and improve existing identity platforms, custom integrations, and application access patterns to reduce risk, technical debt, and operational friction. 

  • Ensure identity solutions are designed for resilience, scalability, observability, auditability, privacy, and compliance by design. 

  • Produce and maintain architecture diagrams, standards, roadmaps, decision records, and implementation guidance for technical and non-technical stakeholders. 

  • Facilitate design reviews, threat-informed architecture reviews, and technical governance activities for identity-related initiatives. 

  • Mentor engineers and administrators, providing architectural direction, implementation guidance, and best practices for secure identity application development and integration. 

  • Collaborate with vendors and internal teams to assess new capabilities, validate patterns, and recommend improvements aligned to strategic identity goals. 

  • Stay current on IAM and CIAM trends, standards, threats, and vendor capabilities, and translate that knowledge into actionable architectural recommendations. 

Education and Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field, or equivalent practical work experience. 

• Minimum 7 years of progressive experience in identity and access management, application security, or enterprise architecture, including significant experience designing identity solutions in complex environments. 

• Minimum 4 years of experience architecting or leading implementations for CIAM and/or IAM platforms, including authentication, federation, authorization, and lifecycle orchestration use cases. 

• Practical experience designing integrations across identity providers, cloud platforms, customer-facing applications, HR systems, CRM platforms, IT service management systems, and related enterprise applications. 

• Experience with platforms and services such as Okta, Auth0, Microsoft Entra ID, AWS, Azure, Salesforce, ServiceNow, or comparable identity and business platforms. 

• Experience leading technical design for secure APIs, identity-aware applications, and event-driven or service-based integrations. 

• Demonstrated success in balancing security, privacy, user experience, scalability, and operational support requirements in production identity architectures. 

• Required certification in at least one relevant identity or cybersecurity discipline, such as CISSP, CCSP, IDPro, Okta Certified Professional or Administrator, Okta Certified Developer, Microsoft SC-300, AWS Security Specialty, or comparable credentials. 

Required Knowledge, Skills, Abilities

• • Strong expertise in CIAM and IAM architecture, including authentication, authorization, federation, identity lifecycle management, provisioning and deprovisioning, delegated administration, and access governance concepts. 

  • Deep understanding of identity standards and protocols, including OAuth 2.0, OpenID Connect, SAML, SCIM, and related token, session, and federation concepts. 

  • Experience designing customer identity journeys with attention to registration, login, MFA, passwordless options, account recovery, consent, profile management, and user experience. 

  • Experience designing enterprise IAM patterns for role-based access, attribute-based access, entitlement management, least privilege, and segregation of duties. 

  • Strong understanding of identity-related security principles, including session security, secrets protection, API security, bot and fraud considerations, logging, monitoring, threat modeling, and auditability. 

  • Ability to define architecture roadmaps, target states, transition plans, and decision frameworks for identity modernization initiatives. 

  • Experience working across engineering, infrastructure, security, product, and business teams to align requirements and drive implementation outcomes. 

  • Ability to review solution designs and code or configuration patterns at the right level to ensure architectural alignment without owning every implementation detail. 

  • Familiarity with modern software and platform engineering practices, including CI/CD, infrastructure as code, automated testing, observability, and secure development practices. 

  • Demonstrated willingness and ability to adopt AI-assisted engineering tools for code generation, code review, test creation, and developer productivity, using tools such as Claude, GitHub Copilot, Cursor, or similar technologies in a secure and effective manner. 

  • Strong written and verbal communication skills, including the ability to present architecture decisions, tradeoffs, and recommendations to technical and executive stakeholders. 

  • Strong problem-solving skills and the ability to diagnose complex identity, integration, and access issues across distributed systems. 

  • Interest in or experience addressing emerging identity control challenges related to agentic AI, non-human identities, machine identities, and modern IAM governance patterns. 

  • Familiarity with Agile delivery practices and tools such as Jira. 

Physical Requirements

• Ability to safely and successfully perform the essential job functions consistent with the ADA, FMLA, and other federal, state, and local standards, including meeting qualitative and/or quantitative productivity standards. 

• Ability to maintain regular, punctual attendance consistent with the ADA, FMLA, and other federal, state, and local standards.