Senior Identity & Access Architect- Atlanta, GA, Austin, TX or Cleveland, OH

About the role

OEC provides software solutions to the automotive parts and repair industry. Our solutions help professionals manage buying and selling parts, conducting research and planning repairs, optimizing estimates, and managing the parts supply chain.

Responsibilities

• Design, implement, and evolve enterprise-scale identity platforms that are secure, resilient, and intuitive to use.
• Play a critical role in enabling secure access across on-premises, hybrid, and cloud environments.
• Collaborate with security engineering, infrastructure, cloud, application teams, HR, and compliance to deliver identity solutions that balance strong security controls with usability and operational efficiency.
• Design and implement hybrid AD / Entra ID architectures, including directory synchronization.
• Apply least-privilege access models using RBAC, ABAC, and role lifecycle management aligned to business functions.
• Enable and automate joiner/mover/leaver (JML) processes and identity lifecycle workflows.
• Integrate IAM platforms with HR systems, directories, and SaaS applications.
• Support identity-related incident response, including investigation and remediation of access misuse, authentication failures, and identity compromise.
• Create clear architecture diagrams, standards, runbooks, and implementation documentation.
• Provide architectural guidance, design reviews, and best-practice recommendations to application and infrastructure teams.

Requirements

Candidates must personally complete all interviews and technical assessments. The use of proxies or third-party representatives during any stage of the hiring process is prohibited and will result in disqualification. Final candidates will be required to participate in at least one in-person interview. Some travel for this role is expected. Reasonable accommodations will be provided in accordance with applicable laws.

Qualifications

• 7+ years of experience in security or identity architecture with deep, hands-on expertise in enterprise IAM platforms.
• Advanced experience with Active Directory, Microsoft Entra ID, and Okta.
• Proven experience designing and operating hybrid AD / Entra ID architectures, including directory synchronization.
• Strong background in identity lifecycle automation and role modeling, Okta application integrations, federation, and lifecycle rules, risk-based access design, and Zero Trust identity strategies.
• Experience with privileged identity and access management (PIM, PAM, break-glass accounts), identity governance, access reviews, and certification at enterprise scale.
• Large-scale directory transformations and cloud migrations, cloud-first and hybrid identity architecture design.

Skills

• Deep understanding of identity and access protocols, including Kerberos, LDAP, SAML, OAuth 2.0, and OpenID Connect.
• Strong knowledge of Zero Trust principles and identity-centric security models.
• Ability to communicate complex technical concepts clearly to both technical and non-technical stakeholders.
• Highly organized with strong prioritization and time-management skills.
• Flexible, adaptable, and comfortable navigating shifting priorities.
• Effective in a remote or hybrid environment with limited in-person interaction.

Benefits

• Full benefits starting Day 1: Medical, Dental, and Vision
• 401(k) with company match
• Unlimited Flex Time Off plus 10 company-paid holidays
• Professional development programs, tuition assistance, and quarterly book program
• Free wellness coaching and pet insurance
• Home office equipment stipend

Pay

Details TBD

Schedule

Details TBD

OEConnection

We provide equal employment opportunities to all qualified employees and applicants for employment without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, veteran status, disability or any other legally protected status. We prohibit discrimination in decisions concerning recruitment, hiring, compensation, benefits, training, termination, promotions, or any other condition of employment or career development. OEConnection is an Equal Opportunity/ Affirmative Action employer. We provide equal employment opportunities to all qualified employees and applicants for employment without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, veteran status, disability or any other legally protected status. We prohibit discrimination in decisions concerning recruitment, hiring, compensation, benefits, training, termination, promotions, or any other condition of employment or career development.