Identity Application Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the architecture and design of CIAM and IAM solutions that facilitate secure identity usage for customers, partners, and the workforce across both digital and enterprise environments, covering aspects like authentication, authorization, federation, lifecycle automation, and secure access methodologies.

• Establish reference architectures, technical standards, guidelines, and integration patterns for identity services and applications utilizing protocols and technologies such as OAuth 2.0, OpenID Connect, SAML, SCIM, LDAP, REST APIs, webhooks, and event-driven architectures.

• Design and direct the implementation of identity-enabled applications, APIs, portals, and workflows, which include customer onboarding, workforce onboarding, joiner-mover-leaver processes, access requests, delegated administration, MFA, identity proofing, registration, account recovery, consent, and progressive profiling.

• Lead architectural decisions regarding identity data models, directory strategies, attribute governance, role and group design, policy creation, and integrations across HR, CRM, ITSM, cloud, and other enterprise platforms.

• Assess and enhance identity platforms, integrations, and access patterns to minimize risk, technical debt, and operational friction, while ensuring resilience, scalability, observability, auditability, privacy, and compliance are integrated by design.

• Create architecture diagrams, standards, roadmaps, decision records, and implementation guidance, along with leading design reviews, governance activities, and stakeholder communications to ensure alignment with security requirements and strategic goals.

• Mentor engineers and administrators, collaborate with vendors and internal teams, and keep updated on IAM and CIAM trends, threats, standards, and capabilities to foster continuous improvement and informed architectural recommendations.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field, or equivalent practical experience.

• Over 8 years of progressive experience in identity and access management, application security, or enterprise architecture, with significant experience in designing identity solutions within complex environments.

• More than 5 years of experience in architecting or leading implementations for CIAM and/or IAM platforms, including use cases for authentication, federation, authorization, and lifecycle orchestration.

• Hands-on experience in designing integrations across identity providers, cloud platforms, customer-facing applications, HR systems, CRM platforms, IT service management systems, and other related enterprise applications.

• Proficiency in platforms and services such as Okta, Auth0, Microsoft Entra ID, AWS, Azure, Salesforce, ServiceNow, or similar identity and business platforms.

• Proven success in leading technical design for secure APIs, identity-aware applications, and event-driven or service-based integrations.

• Required certification in at least one relevant identity or cybersecurity discipline, such as CISSP, CCSP, IDPro, Okta Certified Administrator or Developer, Microsoft SC-300, AWS Security Specialty, or similar credentials.

🏝️ Benefits

• Medical, Dental, and Vision Insurance

• 401(k)

• Paid company holidays

• Paid time off

• Paid parental and caregiver leave

• Plus more! See benefits https://www.aheadbenefits.com/ for additional details.