(IAM) Architect

Minimum Qualifications

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent professional experience.
Relevant certifications such as CISSP, CISM, Okta Certified Professional/Architect, SC-300, or an enterprise architecture credential (e.g., TOGAF).
10+ years of progressive experience in identity and access management, including substantial time as a senior IAM analyst or senior IAM engineer.
3–5 years of experience in a senior IAM architect, IAM Director, or VP of Identity/IAM-level role, with demonstrated ownership of IAM strategy, architecture, or program leadership — not solely hands-on implementation.
Demonstrated experience developing and driving execution of an enterprise-level IAM strategy and roadmap, including tool evaluation, selection, and consolidation decisions.
Deep working knowledge of core IAM/IGA concepts: identity lifecycle management, RBAC/ABAC, SSO and federation (SAML, OIDC), multi-factor authentication, privileged access management, provisioning/deprovisioning, and access certification/recertification.
Demonstrated skill managing both human and machine (service account, API key, workload) identities, including enforcing MFA, defining access permissions on a least-privilege basis, establishing ownership and attribution for machine identities, and driving lifecycle management and decommissioning of stale or under-used accounts of either type.
Direct experience with, or strong working knowledge of, Okta and Workday-driven identity processes; familiarity with the identity and access implications of enterprise AI tools (e.g., Claude Desktop or comparable platforms) is a plus.
Prior experience selecting, implementing, or overseeing the implementation of enterprise IAM, IGA, or PAM platforms.
Demonstrated experience directly managing engineers or analysts, including performance management, mentorship, and workload prioritization.
Excellent written and verbal communication skills, with demonstrated ability to translate technical identity/access risk into business terms for executive and non-technical audiences.
Working knowledge of relevant security and compliance frameworks (e.g., NIST Cybersecurity Framework, SOC 2, applicable regulatory or grant-related requirements) as they pertain to identity and access.
 

Preferred Qualifications

Experience in a research institution, higher education, healthcare, or other complex, decentralized nonprofit environment.
Experience with cloud identity platforms (e.g., Microsoft Entra ID, AWS IAM, Google Cloud IAM) in addition to Okta.
Experience defining governance models for AI/agentic tool access and provisioning within an enterprise identity program.
Experience presenting technology strategy and risk to executive leadership, boards, or governance committees.