Senior Enterprise Cloud IAM Architect

Job Title: Senior Enterprise Cloud IAM Architect

Job Location: Santa Clara, CA

Job Type: Contract

Pay Range: $55.00hr - $60.00hr

Job Overview:

The candidate will design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS, ensuring secure, scalable, and resilient identity services across the organization s cloud environment.

Job Responsibilities:

• Design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS, ensuring secure, scalable, and resilient identity services.
• Serve as the Subject Matter Expert (SME) for Microsoft Entra ID and Cloud Identity Services, managing identity lifecycle, authentication, authorization, federation, and cloud-native identity integrations.
• Implement modern identity security controls including Multi-Factor Authentication (MFA), Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Entitlement Management, and Single Sign-On (SSO).
• Design and support secure authentication and federation architectures using SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2 standards to enable secure access across cloud and SaaS platforms.
• Manage cloud identity and access controls across AWS and Azure, including IAM roles, policies, federated access, workload identities, managed identities, service principals, cross-account access, and least-privilege enforcement.
• Lead governance of enterprise applications and privileged access, including Azure Enterprise Applications, App Registrations, Service Principals, AWS IAM Roles, Secrets Management, and privileged account controls.
• Drive IAM governance, compliance, and risk management through access certifications, role-based access control (RBAC), segregation of duties (SoD), audit readiness, and regulatory compliance initiatives.
• Manage identity security technologies and supporting infrastructure, including Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, certificate lifecycle management, and machine/workload identities.
• Implement and support cloud-native identity architectures, including Microsoft Entra Workload Identities, Azure Managed Identities, AWS IAM Roles, and federated access patterns to eliminate reliance on long-lived credentials.
• Partner with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust adoption, strengthen identity security posture, remediate IAM-related findings, and support secure cloud transformation initiatives.

Preferred Certifications:

One or more of the following certifications are preferred:

• Microsoft Certified: Identity and Access Administrator Associate (SC-300).
• Microsoft Certified: Azure Security Engineer Associate (AZ-500).
• Microsoft Certified: Cybersecurity Architect Expert (SC-100).
• AWS Certified Security Specialty.
• AWS Certified Advanced Networking Specialty (preferred).
• Certified Identity and Access Manager (CIAM) or equivalent IAM certification.

== ==

• Medical, Dental, and Vision Insurance
• 401(k) Retirement Plan
• Health Savings Account (HSA)
• Disability Insurance (Short-Term and Long-Term)
• Life and AD&D Insurance
• Paid Sick Leave (where required by applicable state or local law)
• Supplemental Insurance Plans
• Identity Theft Protection
• Pet Insurance
• Employee Wellness Programs
• Employee Assistance Program (EAP)
• Career Growth and Professional Development Opportunities