IAM Solutions Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the development of non-human identity programs for enterprise clients.

• Design and implement SailPoint IdentityIQ and Identity Security Cloud initiatives.

• Identify and catalog enterprise non-human identities, along with their ownership, usage, authentication, and locations.

• Establish a reference architecture for NHI that encompasses creation, ownership, credential and secret management, rotation, attestation, and decommissioning.

• Outline AI-agent control landscapes, including their lifecycles and control locations.

• Generate architecture review board and cybersecurity review materials, such as architecture diagrams, data and process flows, and detailed security diagrams.

• Conduct program assessments, vendor and tool evaluations, future-state architecture, governance model design, platform architecture reviews, and product health checks.

• Assist in identity engagements by providing roadmaps, architecture, and high-level communications.

• Assume responsibility for solution architecture and design authority in NHI platform implementations and SailPoint projects.

• Facilitate design sessions and proofs of concept; document and make engineering decisions.

• Specify integration patterns, data models, access models, and non-functional requirements for security, scalability, resiliency, and performance.

• Advise clients on solutions and guide them towards the adoption of designs.

• Maintain enough technical acumen to resolve complex issues.

• Adapt NHI programs as workloads, agents, platforms, and regulatory requirements evolve.

• Lead certification strategies, configuration and tuning, and program reporting.

• Direct knowledge transfer and design operating models to ensure client self-sufficiency.

⛳️ Requirements

• Over 8 years of experience in identity and access management, with significant time spent as a solutions architect, technical lead, or principal engineer in at least one identity domain.

• Expertise in one or more areas of identity governance (SailPoint IdentityIQ or ISC, Saviynt), privileged access (CyberArk, Delinea, BeyondTrust), or identity provider and authentication platforms (Okta, Microsoft Entra ID, Ping).

• Strong understanding of IAM service categories: governance, privileged access, secrets management, certificate management, authentication including MFA and identity providers, and authorization.

• Knowledge of workforce, customer, and non-human identities, covering workloads, machine identities, service accounts, API credentials, bots, and AI agents.

• Capacity to identify enterprise non-human identities and comprehend tools that provide NHI lifecycle visibility.

• Familiarity with different types of AI agents, their lifecycles, and associated controls.

• Proficiency in producing comprehensive artifacts for architecture review boards and cybersecurity evaluations, including detailed security diagrams.

• Strong client-facing aptitude, capable of communicating both technically and in layman's terms.

• Ability to diagnose client challenges and articulate solutions with diplomacy.

• Capability to work independently on smaller projects.

• Demonstrated initiative in learning or building beyond daily responsibilities, such as maintaining a home lab or engaging in side projects.

• Must be U.S.-based and authorized to work in the United States.

🏝️ Benefits

• Remote-first work environment, based in the U.S.

• Flexible working hours, prioritizing client time zones when necessary.

• 20 days of paid time off provided as a lump sum rather than accrued, in addition to holidays.

• Medical, dental, and vision insurance through Aetna.

• 401(k) plan with company matching: full match on the first 3% and a half match on the next 2%.

• Eligibility for an annual performance-based bonus.

• Sponsored training and certifications, including platform-specific enablement.

• Engage in direct client work, take ownership, and play a vital role in shaping the firm at an early stage.

• Participate in a structured internal enablement program before engaging in client-facing NHI projects.

• Palyrian supports training and certification across SailPoint and NHI platforms, including Oasis enablement.