[Hiring] IAM Solutions Architect @Palyrian

Role Description

Palyrian’s immediate need is for IAM Solutions Architects to lead non-human identity (NHI) program builds for enterprise clients. Machine identities, workloads, service accounts, API credentials, and now AI agents have quietly outgrown the controls that were designed for people. Very few organizations have a dedicated NHI program today. That is changing fast, and Palyrian is being pulled into the build.

We are not expecting you to have run an NHI program already. The space is too new for that to be a fair filter. We are looking for strong solutions architects from adjacent identity domains (IGA, PAM, IDP/AuthN) who are already doing this job somewhere else in the identity stack. You would be doing the same work in a newer domain, and Palyrian provides the NHI and platform-specific enablement to get you there.

Alongside the NHI work you will architect on SailPoint engagements (IdentityIQ and Identity Security Cloud), which remain a core part of the practice. Breadth is the point here: we are looking for architects who want to touch more than one platform, not fewer.

What You Will Do

• Discover and inventory the non-human identity estate: what exists across the enterprise, where it lives, what it is used for, who owns it, and how it authenticates.
• Define NHI reference architecture covering the full lifecycle — creation, ownership, credential and secret management, rotation, attestation, and decommissioning.
• Work fluently across the three classes of identity (workforce, customer, non-human) and across the full range of NHI types: workloads, machine identities, service accounts, API credentials, bots, and AI agents.
• Map the control landscape for AI agents: the different agent types, their lifecycles, and where the controls for each one sit.
• Produce complete artifacts for architecture review boards and cyber security reviews — reference architecture diagrams, data and process flows, and detailed security diagrams.
• Lead program assessments, vendor and tool evaluations, future-state architecture, governance model design, platform architecture reviews, and product health checks.
• Support identity engagements with roadmap, architecture, and executive-level communication.
• Own solution architecture and design authority on NHI platform implementations and SailPoint engagements.
• Lead design sessions and proofs of concept. Make decisions the engineering team builds against and write them down.
• Define integration patterns, data models, access models, and non-functional requirements — security, scale, resiliency, and performance.
• Walk the client through the solution and progress towards design adoption.
• Stay technical enough to unblock hard problems.
• Evolve the NHI program as the estate moves underneath it — new workloads, new agents, new platforms, new regulatory attention.
• Guide certification strategy, configuration and tuning, and program reporting so the program improves rather than decays.
• Lead knowledge transfer and operating-model design so client teams can eventually run it themselves.

Qualifications

• 8+ years in identity and access management, with meaningful time as a solutions architect, technical lead, or principal engineer in at least one identity domain.
• Depth in one or more of: identity governance (SailPoint IdentityIQ or ISC, Saviynt), privileged access (CyberArk, Delinea, BeyondTrust), or identity provider and authentication platforms (Okta, Microsoft Entra ID, Ping).
• Strong command of the IAM service toolset and what each category genuinely does: governance, privileged access, secrets management, certificate management, authentication including MFA and identity providers, and authorization.
• The ability to walk into an enterprise and identify its non-human identities and the characteristics around them.
• A working understanding of the different types of AI agents, their lifecycles, and where the controls for each sit.
• Ability to create and deliver complete artifacts for ARB and cyber review, including detailed security diagrams.
• Genuine client-facing range.
• The ability to tell a client what is wrong, why it is wrong, and how you will fix it.
• Comfort operating on your own.
• Energy and patience.
• Evidence that you build and learn outside your day job.
• U.S. based and authorized to work in the United States.

Requirements

• Direct NHI program experience is not required.
• SailPoint certifications and other credentials are helpful but not mandatory.
• Heavy hands-on-keyboard coding is not needed.
• A previous architect title is not necessary.

Nice to Have

• Hands-on experience with NHI, machine identity, or secrets platforms (Oasis, Veza, C1, or comparable tools).
• SailPoint IdentityIQ or Identity Security Cloud architecture and delivery experience.
• Secrets management at scale (HashiCorp Vault, cloud-native secret stores) and certificate lifecycle management.
• Cloud identity depth across AWS, Azure, or GCP.
• Experience contributing to proposals, statements of work, and scoping.
• Regulated-industry experience — financial services, healthcare, or federal.
• Zero Trust architecture experience.

Benefits

• Remote-first, U.S. based. Flexible hours, with client time zones taking priority.
• 20 days of paid time off, granted as a bucket rather than accrued, plus holidays.
• Medical, dental, and vision coverage through Aetna.
• 401(k) with company match: full match on the first 3% and half match on the next 2%.
• Annual performance-based bonus eligibility.
• Sponsored training and certifications, including platform-specific enablement.
• Direct client work, real ownership, and a seat at a boutique early enough that your work shapes the firm.