Principal IAM Architect

Job Title: Principal IAM Architect

Location: Chevy Chase, MD / Dallas, TX (Hybrid – 3 days onsite)

Duration: Long-Term Contract Visa: Any visa except and OPT Rate:

Job Description:

We are seeking a Principal IAM Architect to lead enterprise Identity and Access Management (IAM) strategy, architecture, and governance. The ideal candidate will assess existing IAM systems, develop multi-year roadmaps, evaluate IAM/IGA/PAM tools, and lead a small team of engineers and analysts.

Key Responsibilities:

Develop and execute enterprise IAM strategy and architecture.

Assess and optimize Okta, Workday identity processes, SSO, MFA, and provisioning.

Manage human and machine identities, least-privilege access, and access governance.

Evaluate IAM/IGA/PAM tools and emerging AI platforms, including Claude Desktop.

Lead and mentor IAM engineers and analysts.

Ensure compliance with security standards, audits, and risk management requirements.

Present IAM roadmaps, risks, and metrics to executive stakeholders.

Required Skills:

10+ years of IAM experience, including 3–5 years in an IAM Architect/Director/VP role.

Strong expertise in Okta, Workday, SSO, MFA, SAML/OIDC, RBAC/ABAC, and PAM.

Experience with IAM strategy, architecture, tool selection, and identity lifecycle management.

Experience managing technical teams and enterprise security governance.

Knowledge of NIST, SOC 2, and compliance frameworks.

Certifications such as CISSP, CISM, Okta, or SC-300 preferred.

Preferred: Experience with Microsoft Entra ID, cloud IAM, and AI identity governance.