IAM Architect

Description
IAM Architect
Company Overview
A global consumer products organization is seeking an IAM Architect to help advance enterprise identity security across a complex, rapidly evolving technology environment. Based in Los Angeles, California, the organization supports global operations spanning cloud platforms, enterprise applications, infrastructure, and digital customer experiences. This is an opportunity to provide technical leadership while remaining hands-on with the architecture and implementation of modern identity solutions.
Role Summary
The IAM Architect will own and shape identity architecture across workforce IAM, customer identity, privileged access, identity governance, non-human identities, and third-party access. This role translates business, security, and operational requirements into scalable identity solutions while remaining directly involved in design, integration, testing, implementation, and complex troubleshooting. The ideal candidate combines deep IAM expertise with strong technical leadership and a vendor-agnostic approach to solving identity challenges.
Key Responsibilities

• Own end-to-end architecture for workforce IAM, customer identity, privileged access, identity governance, and non-human identities.
• Lead technical design reviews and provide architecture guidance to application, infrastructure, cloud, security, and engineering teams.
• Design, integrate, test, and troubleshoot enterprise IAM solutions from proof of concept through production implementation.
• Architect identity lifecycle and access controls for employees, contractors, third parties, applications, workloads, and service accounts.
• Advance access governance through role and entitlement design, certifications, approvals, segregation of duties, and policy enforcement.
• Design modern authentication and authorization solutions using Zero Trust, least privilege, adaptive access, and phishing-resistant authentication principles.
• Identify and reduce identity-related risks involving credentials, tokens, sessions, federation, privileged access, and machine identities.
• Develop vendor-neutral integration patterns across identity providers, cloud IAM, privileged access, governance, security, and service management platforms.
• Partner with security operations teams to improve identity telemetry, detection capabilities, investigation workflows, and incident response.
• Automate IAM processes using APIs, scripting, workflow automation, and modern software engineering practices.

Additional Details

• Work model: Hybrid three onsite days
• Hands-on architecture role with significant technical ownership and enterprise-wide influence
• Opportunity to shape modern identity security capabilities across human, privileged, customer, workload, and machine identities
• High-visibility position partnering across cybersecurity, infrastructure, cloud, application, and business teams

Requirements
Required Qualifications

• Extensive experience designing, implementing, integrating, and securing enterprise Identity and Access Management solutions.
• Proven experience as a hands-on IAM Architect, Lead IAM Engineer, Solution Architect, or equivalent technical leader.
• Deep expertise across identity lifecycle management, authentication, authorization, federation, privileged access, identity governance, and non-human identities.
• Strong experience with enterprise identity platforms such as Okta, Ping Identity, Entra ID, or comparable technologies.
• Advanced knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, APIs, federation, tokens, and sessions.
• Strong understanding of Zero Trust, least privilege, adaptive access, identity threat mitigation, and modern authentication controls.
• Experience designing security and governance controls for privileged accounts, service accounts, application identities, workloads, secrets, and machine credentials.
• Strong technical leadership and communication skills with the ability to influence architecture and security decisions across teams.

Preferred Qualifications (Nice-to-Haves)

• Experience supporting global, hybrid, and multi-cloud IAM environments.
• Experience with identity threat detection and response, attack-path analysis, or identity exposure management.
• Hands-on experience automating IAM capabilities using scripting, APIs, Infrastructure as Code, and workflow automation.
• Experience designing customer identity and access management solutions.
• Experience implementing just-in-time privileged access and phishing-resistant authentication.
• Experience integrating identity platforms with security operations and monitoring capabilities.
• Relevant identity, cybersecurity, cloud, or architecture certifications.
• Experience leading complex IAM implementations while mentoring engineers and establishing technical standards.

Compensation & Benefits

• $180,000 - $220,000 annually
• 10% discretionary annual bonus opportunity
• Comprehensive medical, dental, and vision coverage
• Retirement savings benefits
• Paid time off and company holidays
• Employee discounts and wellness programs
• Professional development and certification opportunities

Technology Doesn't Change the World, People Do.
Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.
Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.
Robert Half will consider for employment qualified applicants with arrest or conviction records in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.
2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use and Privacy Notice.