IAM Implementer / Architect

Role Summary

We are seeking a seasoned IAM Implementer / Architect to join a high-impact security and identity initiative. This is a hands-on role for a practitioner who has strong implementation experience and is ready to grow into an architectural leadership capacity. The ideal candidate is comfortable working at both the execution level and the design/strategy level, with deep expertise in Azure Active Directory (Microsoft Entra ID), Okta, AWS IAM, and emerging agentic identity patterns.

Must-Have Requirements

• Azure Active Directory / Microsoft Entra ID

• Hands-on deployment and configuration experience
• Ability to answer architecture-level questions on Azure AD design, federation, and governance
• Experience with Conditional Access, PIM, Identity Protection, and Entra ID roles

• Okta Identity Platform

• Production deployment and administration experience
• Non-Human Identity (NHI) / Machine Identity management via Okta
• Service accounts, API keys, machine-to-machine (M2M) tokens, OAuth client credentials flow
• Lifecycle automation for non-human identities

• Agentic Identity

• Must understand what agentic identity is and how to secure AI agents, bots, and automated pipelines
• Experience defining identity strategies for agentic workloads (LLM-based agents, RPA bots, etc.)

• AWS IAM

• Roles, policies, permission boundaries, SCPs, and IAM best practices
• Cross-account access, federation with Azure AD / Okta

• Implementor-to-Architect mindset

• Willingness and capability to evolve from hands-on implementation into architectural ownership
• Ability to document, present, and defend design decisions to senior stakeholders

Key Responsibilities

• Implement and configure Azure AD / Microsoft Entra ID solutions including SSO, MFA, SSPR, and RBAC
• Deploy and manage Okta environments, including Workforce Identity and non-human identity (NHI) use cases
• Design and implement Okta lifecycle management for machine identities, service accounts, and API credentials
• Define and enforce AWS IAM policies, roles, and permission models aligned to least-privilege principles
• Architect identity solutions for agentic workloads — securing AI agents, automation bots, and service pipelines
• Lead identity architecture discussions and provide technical guidance to cross-functional teams
• Perform IAM assessments, gap analyses, and produce architecture diagrams and documentation
• Collaborate with security, cloud, and application teams to integrate identity into DevSecOps pipelines
• Troubleshoot and resolve identity-related incidents across all IAM platforms
• Stay current with emerging identity standards: SPIFFE/SPIRE, OAuth 2.0, OIDC, SCIM, FIDO2/Passkeys

Preferred Qualifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300) or Azure Security Engineer (AZ-500)
• Okta Certified Professional or Okta Certified Administrator
• AWS Certified Security Specialty or Solutions Architect
• Experience with IGA platforms: SailPoint IdentityNow, Saviynt, or Oracle Identity Governance
• Familiarity with PAM solutions: CyberArk, BeyondTrust, or Delinea
• Experience implementing Zero Trust Architecture and Identity-centric security models
• Exposure to DevSecOps pipelines and IAM as Code (Terraform, Pulumi, ARM/Bicep templates)
• Prior experience in financial services, healthcare, or regulated industries a plus