Identity & Access Management (IAM) Architect
$109,100–$145,400 year
HybridMemphis, Tennessee, United States
Job Summary
Develop and maintain the enterprise IAM strategy, roadmap, and reference architectures for cloud, hybrid, and on-premises environments. Design secure identity solutions supporting Zero Trust principles, including passwordless authentication, adaptive access, and federation. Oversee joiner, mover, and leaver processes, role-based and attribute-based access control models, and access certification programs. Lead implementation of privileged access management capabilities, just-in-time access methodologies, and governance for administrative and machine identities. Collaborate with Infrastructure, Cloud, Application Development, HR, and Compliance teams to align identity services with organizational objectives while reducing cybersecurity risk. Mentor IAM engineers, guide project teams, and participate in security governance boards. Serve as the technical authority for identity governance, access management, and authentication across the organization.
Required Qualifications
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field
- 10+ years of professional experience in cybersecurity
- 5 years as an IAM architect in a complex enterprise environment
- Proven experience collaborating with third-party security vendors or MSPs
- Experience designing and implementing enterprise IAM solutions
- Experience supporting cloud-first environments, particularly Microsoft Azure
- Proven knowledge of security frameworks and standards such as NIST, ISO 27001, CIS, ISA 62443 and MITRE ATT&CK
- Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), ISA 62443, Health Insurance Portability and Accountability Act (HIPAA), and General Data Protection Regulation (GDPR)
- Strong analytical, relationship management, and communication skills (both written and verbal)
- Ability to collaborate across functions and influence stakeholders
- Strong knowledge of: Microsoft Entra ID (Azure AD)
- Strong knowledge of: SailPoint, Saviynt, or comparable IGA platforms
- Strong knowledge of: CyberArk, Delinea, BeyondTrust, or comparable PAM solutions
- Strong knowledge of: Active Directory and Hybrid Identity
- Strong knowledge of: SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP
- Strong knowledge of: MFA and Passwordless Authentication
- Strong knowledge of: Identity Federation and SSO
- Strong knowledge of: RBAC and ABAC models
- Strong knowledge of: Zero Trust Architecture
- Strong knowledge of: Privileged Access Governance
- Strong knowledge of: Cloud Security Architecture
- Memphis (Hybrid) or Remote (For remote positions, Global Cellulose Fibers will consider residents of the following states: Alabama, Arizona, Georgia, Florida, Massachusetts, Mississippi, North Carolina, Ohio, Oklahoma, South Carolina, Tennessee, Texas, Vermont, Virginia and Washington.)
Desired Qualifications
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred
- Certifications such as CISSP, CISA, CIAM, or CISM preferred
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.