Identity and Access Management Architect - SailPoint

Under the general direction and supervision of the Chief Information Security Officer, the Identity and Access Management Architect (IAM) is responsible for the lifecycle planning, design, installation, and support of the corporate security strategy, architecture, and practices.

About the role

Lead the definition and execution of the organization’s IAM strategy, aligning with the overall enterprise security and technology roadmap. Serve as the top-tier authority on all IAM topics, with an emphasis on integrating cloud and on-premises enterprise architectures. Develop implementation plans, coordinate security-related systems, and verify the installation of hardware, software, and security management tools. Translate business objectives and risk management strategies into specific processes enabled by security technologies and services. Oversee the execution of all cybersecurity and compliance requirements for a highly scalable and secure multi-vendor healthcare application landscape. Document and communicate security changes across applications, networks, and platforms according to organizational procedures and standards.

Responsibilities

• Evaluate, architect, and deliver advanced technology solutions with financial awareness and consideration of final objectives.
• Determine requirements, develop, and recommend security solutions, capabilities, and controls aligned with business objectives, technology, and threat drivers.
• Assess and recommend improvements to vendor statements of work and proposals to ensure adequate security protections; report findings to the CISO and vendor management teams.
• Develop and maintain security architecture, design, and roadmap documents.
• Present detailed strategies, designs, and implementation plans to management.
• Deliver complex customized designs and solutions aligned to defense-in-depth strategies, collaborating with peers, vendors, and stakeholders.
• Test, evaluate, and review security technologies, tools, and services; make recommendations based on security, financial, and operational metrics.
• Track developments and changes in the digital business and threat environments to ensure adequate protection of healthcare applications.
• Set technical direction, scope, quality metrics, planning, execution, and closing of technical projects.
• Determine baseline security configuration standards for operating systems, applications, network segmentation, and identity and access management.
• Provide high-level technical expertise to resolve complex security and IAM-related technology problems throughout the project lifecycle.
• Collaborate across technical, customer, and management teams to ensure quality and timely service delivery.
• Perform other job duties and responsibilities as assigned.

Requirements

• Bachelor’s degree in Computer Science or related discipline and/or extensive technical training and experience.
• At least ten (10) years of experience in a technical services function in a complex distributed enterprise network and application environment.
• Hands-on experience managing and designing IAM technologies and services (e.g., SailPoint IdentityIQ, Active Directory/EntraID IAM solutions in a large environment).
• Ability to automate complex access management and authentication policies for on-premises and cloud-hosted applications at an expert level.
• Working knowledge of Microsoft Purview, Azure IaaS security, and data protection controls (e.g., data loss prevention, encryption, conditional access, data classification).
• Experience in security architecture, design, implementation, and integration management for full-stack IT infrastructure (applications, scripting, databases, operating systems, hardware, IP networks, and test planning in a dynamic continuous improvement environment).

Qualifications

• Certified Information Systems Security Professional (CISSP) certification or ability to obtain within 12–24 months in role.
• Microsoft Azure security certifications and SailPoint Identity management experience required; SailPoint IdentityIQ certification desirable.
• In-depth knowledge delivering IAM and cloud security capabilities in a hybrid hosting model.
• Expertise in optimizing RBAC controls, mapping workflows for individuals/groups, and performing certification based on segregation of duties/role.
• Extensive knowledge of IAM technologies and protocols (SSO, MFA, Federation, PAM, OIDC, OAuth, SAML, and SCIM) and ability to automate/streamline identity workflow scenarios.
• Knowledge of NIST CSF, HIPAA/HITECH security concepts, and ability to review/perform security assessments for project solutions.
• Ability to work effectively under pressure in a fast-paced collaborative team setting.
• Demonstrated capacity to acquire new skills efficiently and blend technical expertise with business perspective.
• Strong decision-making skills, guided by precedent and policy, with the ability to coordinate and obtain cooperation tactfully.

Benefits

• Medical, dental, vision, life, and disability insurance plans.
• Employee Stock Purchase Program (ESPP) and 401K program with company match after 12 months of tenure.
• Health Savings Account (HSA) on the HDHP plan.
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program, access to certification prep, and a library of technical and leadership courses/books/seminars after 6+ months of tenure.
• Certification discounts and perks for associations including CompTIA and IIBA.
• Dedicated customer service team and certified Career Coach for consultants.