[Hiring] IAM Expert Solution Architect @Ensono

Role Description

The IAM Solution Architect is a senior role with broad domain expertise responsible for assessing IAM-related needs as they relate to migration and landing zone exits. This role provides end-to-end architecture leadership for IAM integration work in support of large-scale application migrations to AWS, Microsoft Azure, and strategic data centers.

• Stand up an IAM team that accelerates application migrations by delivering standard IAM patterns and implementation across:
• Authentication and federation
• Authorization integration
• Secret management
• Identity governance and administration
• Privileged access management (PAM) integration
• Migration readiness and cutover support for IAM controls
• Development of accelerators and self-service tools to help in the migration
• Design and govern the technical IAM architecture for migration workloads
• Assess current state IAM landscape and define target state architecture aligned to enterprise standards
• Develop IAM integration patterns that are reusable across multiple application migrations
• Build and deploy common scaffolding services such as:
• Logging
• Monitoring
• Secrets management
• Integration services
• Shared storage
• Middleware components
• Platform utilities
• Ensure these services are production ready, secure, and consumable by application teams
• Document consumption patterns and onboarding procedures
• Define and approve security baselines and minimum compliance standards for IAM controls
• Provide technical guidance and mentorship to IAM Engineers
• Collaborate with infrastructure and platform BAU teams to ensure alignment with enterprise standards

Qualifications

• 10+ years of experience in Identity and Access Management
• Deep expertise across IAM domains with hands-on experience in the following platforms:
• Privileged Access Management: CyberArk (EPV, PSM, PTA, CCP), HashiCorp Vault (secrets engine, dynamic secrets, encryption as a service)
• Authentication/Identity Providers (IDP): ForgeRock (AM, IDM, DS, IG), RSA (SecurID, Identity Governance & Lifecycle)
• User Access & Entitlement Management: SailPoint (IdentityIQ, IdentityNow), ESF (Enterprise Security Framework)
• Strong experience with cloud IAM services (AWS IAM, Azure AD/Entra ID, etc.)
• Knowledge of security frameworks and compliance requirements (SOX, GDPR, etc.)
• Experience designing IAM solutions for large-scale enterprise migrations
• Strong understanding of Active Directory, LDAP, SAML, OAuth, OpenID Connect
• Excellent communication skills with ability to translate technical concepts for various audiences
• Experience in financial services or highly regulated industries strongly preferred
• Relevant certifications preferred:
• CISSP, CISM
• Cloud certifications (AWS, Azure)
• CyberArk Certified Delivery Engineer
• SailPoint Certified IdentityIQ Engineer

Benefits

• Unlimited Paid Days Off
• Three health plan options
• 401k with company match
• Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts
• Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement
• Paid childbearing and paternal leave
• Education Reimbursement, Student Loan Assistance or 529 College Funding
• Sabbatical leave
• Wellness program
• Flexible work schedule