IAM Architect

Location: Charlotte, North Carolina or Atlanta, Georgia (Onsite)

About the role

We are seeking a Cyber Security Architect to contribute to the design and implementation of our identity and access management (IAM) solutions. This role involves collaborating with various technology teams to develop and deploy secure, scalable IAM patterns. The position focuses on enhancing security through modern authentication methods and ensuring robust access controls across the enterprise.

Responsibilities

• Collaborate with Cyber and Enterprise architecture teams to select and develop appropriate IAM patterns and translate them into engineering designs.
• Partner with subject matter experts across technology teams, including End User tech and Network services, on IAM design, configuration, and implementation.
• Work with the Project Management team to identify and estimate technical tasks for program deliverables.
• Configure Entra ID identity, trust settings, and entitlement management.
• Implement Conditional Access with phishing-resistant MFA (FIDO2) and risk-based controls.
• Migrate federated applications and validate authentication flows.
• Develop and support processes for procuring and managing FIDO2 keys and passkeys, and support Windows Hello for Business rollouts.
• Enable step-up authentication for sensitive operations and secure privileged access paths.

Requirements

• Identity & Access Management (IAM) Architecture, including designing and implementing enterprise identity patterns and authentication models.
• Microsoft Entra ID Administration & Engineering, including configuration of tenants, trust relationships, and application integrations.
• Zero Trust & Conditional Access Design, with experience in implementing risk-based access controls and adaptive security measures.
• Strong Authentication Technologies such as FIDO2, Passkeys, and Windows Hello for Business (WHfB).
• Identity Federation & Application Migration, including the ability to migrate federated applications and validate SAML/OIDC/OAuth flows.
• Privileged Access Management (PAM) & Secure Administration to secure privileged accounts and implement least-privilege models.
• IAM Program Delivery & Cross-Functional Engineering to collaborate with various teams to deploy IAM solutions at an enterprise scale.

Qualifications

A Bachelor's Degree is not required for this position.

• Experience with Identity Governance & Administration (IGA) tools such as SailPoint, Saviynt, or Entra ID Governance.
• Knowledge of Identity Threat Detection & Incident Response using solutions like Microsoft Defender XDR, Entra Identity Protection, or Sentinel.
• Experience with Identity Governance Automation using PowerShell, Graph API, Logic Apps, or Terraform.

Benefits

• Medical, dental, vision, life, and disability insurance plans.
• Employee Stock Purchase Program (ESPP).
• 401K program with company match after 12 months of tenure.
• Health Savings Account (HSA) on the HDHP plan.
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program and access to certification prep, technical and leadership courses/books/seminars after 6+ months of tenure.
• Certification discounts and perks for associations including CompTIA and IIBA.
• Dedicated customer service team for benefits and resources, and a certified Career Coach.