ESA - Electronic Security Association logo
ESA - Electronic Security Association

THE voice of the electronic security and life safety industry.

Senior IAM Architect

ArchitectArchitectFull TimeRemoteSeniorTeam 11-50Since 1948H1B No SponsorCompany SiteLinkedIn

Location

Romania

Posted

18 hours ago

Salary

0

Seniority

Senior

Job Description

Senior IAM Architect

ESA - Electronic Security Association

• Own the enterprise IAM architecture strategy, target state, and roadmap across cloud, on-premises, and hybrid environments, aligned to Zero Trust and security standards. • Serve as the IAM technical authority and provide hands-on architectural leadership across infrastructure, cloud, and platform security initiatives. • Design and document end-to-end IAM capabilities across IGA, access management, PAM, secrets, and non-human identities. • Define integration patterns and reference architectures; evaluate build vs. buy and emerging IAM capabilities (e.g., passwordless, AI/agentic identities, decentralised identity) to deliver scalable services across applications, infrastructure, and DevOps tooling. • Architect authentication and authorisation (SSO, MFA, RBAC/ABAC) and standardize protocols (OAuth2/OIDC, SAML, SCIM, LDAP). • Lead IAM platform design and integration across cloud/hybrid (e.g., Microsoft Entra ID, Active Directory, SailPoint, PingFederate/Ping Identity, AWS IAM, CyberArk or equivalent). • Define identity lifecycle controls (joiner/mover/leaver, provisioning, access certifications, and role/entitlement modeling). • Identify IAM risks and architecture gaps; define constraints and mitigations, and drive remediation through roadmap and delivery items. • Ensure IAM controls and integrations meet security and regulatory requirements (e.g., NIST SP 800-63, ISO 27001, SOC 2, GDPR) and support audit activities. • Partner with business stakeholders to align IAM outcomes to enterprise objectives and communicate decisions and tradeoffs to senior leadership.

Job Requirements

  • Strong experience in the identity and access management, preferably at architecture level, however IAM Engineers seeking opportunities to advance to an architecture role will be considered
  • Strong experience across core IAM domains: IGA (lifecycle, certifications), access management (SSO/MFA), Conditional Access, PAM, and non-human identity (workload/service identities), with hands-on-experience with one or more enterprise IAM platforms (e.g., Microsoft Entra ID/Azure AD, Okta, Ping, SailPoint) and integration across cloud/hybrid environments.
  • Deep knowledge of authentication/authorisation patterns and protocols: OAuth 2.0/OIDC, SAML 2.0, SCIM, and LDAP/AD.
  • Solid understanding of cloud IAM (AWS, Azure, and/or GCP), including identity federation and least-privilege design.
  • Experience assessing IAM risks and security controls, defining mitigations, and supporting audits and compliance requirements (e.g., NIST/ISO).
  • Strong analytical, problem-solving, and communication skills, with the ability to engage both technical and non-technical stakeholders effectively
  • Collaborative team player who adapts quickly to changing priorities while maintaining attention to detail

Benefits

  • Funding provided to support your self-development
  • Fully remote working model
  • Meal ticket for each day worked
  • Medical coverage to support your health and wellbeing
  • 26 days of vacation

Related Categories

Related Job Pages

More Architect Jobs

ESA - Electronic Security Association logo

Senior IAM Architect

ESA - Electronic Security Association

THE voice of the electronic security and life safety industry.

Architect18 hours ago
Full TimeRemoteTeam 11-50Since 1948H1B No Sponsor

• Odpowiedzialność za strategię architektury IAM w organizacji. • Pełnienie roli eksperta technicznego IAM oraz zapewnianie praktycznego przywództwa architektonicznego. • Projektowanie i dokumentowanie kompleksowych możliwości IAM. • Definiowanie wzorców integracyjnych i architektur referencyjnych. • Projektowanie mechanizmów uwierzytelniania i autoryzacji (SSO, MFA, RBAC/ABAC). • Prowadzenie projektowania i integracji platform IAM w środowiskach chmurowych i hybrydowych. • Identyfikowanie ryzyk IAM oraz luk architektonicznych.

Poland
zł18.3K - zł30.4K / month
ESA - Electronic Security Association logo

Senior IAM Architect

ESA - Electronic Security Association

THE voice of the electronic security and life safety industry.

Architect18 hours ago
Full TimeRemoteTeam 11-50Since 1948H1B No Sponsor

• Own the enterprise IAM architecture strategy, target state, and roadmap across cloud, on-premises, and hybrid environments, aligned to Zero Trust and security standards. • Serve as the IAM technical authority and provide hands-on architectural leadership across infrastructure, cloud, and platform security initiatives. • Design and document end-to-end IAM capabilities across IGA, access management, PAM, secrets, and non-human identities. • Define integration patterns and reference architectures; evaluate build vs. buy and emerging IAM capabilities (e.g., passwordless, AI/agentic identities, decentralised identity) to deliver scalable services across applications, infrastructure, and DevOps tooling. • Architect authentication and authorisation (SSO, MFA, RBAC/ABAC) and standardize protocols (OAuth2/OIDC, SAML, SCIM, LDAP). • Lead IAM platform design and integration across cloud/hybrid (e.g., Microsoft Entra ID, Active Directory, SailPoint, PingFederate/Ping Identity, AWS IAM, CyberArk or equivalent). • Define identity lifecycle controls (joiner/mover/leaver, provisioning, access certifications, and role/entitlement modeling). • Identify IAM risks and architecture gaps; define constraints and mitigations, and drive remediation through roadmap and delivery items. • Ensure IAM controls and integrations meet security and regulatory requirements (e.g., NIST SP 800-63, ISO 27001, SOC 2, GDPR) and support audit activities. • Partner with business stakeholders to align IAM outcomes to enterprise objectives and communicate decisions and tradeoffs to senior leadership.

Czechia
Full TimeRemoteTeam 501-1,000H1B Sponsor

• Define and evolve the overall system architecture for the platform, ensuring scalability, performance, and resiliency. • Establish architecture standards, design principles, and best practices across engineering teams. • Lead design reviews and technical governance for major initiatives. • Drive adoption of modern architectural patterns (microservices, event-driven systems, API-first design). • Ensure robust security, compliance, and data privacy practices across systems. • Provide technical leadership across multiple teams, mentoring senior engineers. • Act as a go-to expert for complex technical challenges and escalations. • Influence engineering culture by promoting engineering excellence, code quality, and innovation. • Work with engineering leadership on long-term platform strategy and capacity planning. • Collaborate with DevOps and SRE teams to ensure efficient deployment and operational excellence. • Drive initiatives in AI integration, automation, and intelligent workflows. • Continuously improve development velocity and system performance.

United States
$155.9K - $216K / year
Zaelab logo

Digital Consulting Architect, CPQ, Spanish-Speaking

Zaelab

Accelerating business channel growth through digital experiences, modern cloud architectures, and agile methodologies.

Architect18 hours ago
Full TimeRemoteTeam 51-200H1B No Sponsor

• Serve as the primary technical authority for CPQ and Quote-to-Cash initiatives, representing Zaelab in client-facing architectural discussions, solution reviews, and technical decision-making. • Act as a subject matter expert in Quote-to-Cash processes, including product modeling, pricing strategies, discounting, approvals, contracts, and downstream order fulfillment. Lead architecture and functional design of custom product configurators, including technologies such as Logik.ai (ServiceNow). Translate complex revenue models into scalable CPQ architectures aligned with platform best practices. • Design scalable and secure architectures that integrate with commerce platforms, ERP systems, CDPs, middleware, and adjacent enterprise systems. Collaborate with clients and internal teams to create prototypes and proofs of concept to validate requirements and solution approaches. • Conduct business and technical discovery, assessing current-state revenue systems and defining future-state CPQ roadmaps. Lead business process mapping sessions and produce functional and architectural documentation. Perform gap analysis and identify opportunities to optimize business processes through CPQ and commerce capabilities. • Maintain a hands-on approach to solution delivery, contributing to configuration, development, and technical problem-solving alongside the team. Partner closely with developers to ensure designs are implemented accurately and efficiently. Troubleshoot complex functional and technical issues, identifying root causes and driving resolution. • Troubleshoot complex technical issues, ensuring consistent delivery momentum and high-quality outcomes. • Mentor consultants, developers, and analysts on CPQ architecture patterns, platform capabilities, and delivery best practices. Coach teams on balancing functional requirements with technical feasibility and long-term maintainability. Set quality standards for CPQ design, documentation, and delivery execution. • Partner with Solution Engineering and Sales teams to scope engagements, propose architecture approaches, and communicate solution value to B2B clients. Build trusted relationships with client sponsors and stakeholders, guiding strategic decision-making. Clearly articulate CPQ solution value to technical and non-technical audiences. • Contribute to Zaelab accelerators, templates, and repeatable CPQ implementation patterns. Stay current with CPQ, commerce, and platform trends, sharing insights internally and externally. Participate in internal enablement, client workshops, and industry/community forums.

Portugal