New

IAM Platform Architect

Spectraforce Technologies
United States, Tennessee, Memphis
Oct 29, 2026
Role: IAM Platform Architect Location: McLean, VA, Dallas, TX or Memphis, TN (2-3 days onsite) Duration: 6 Months - Contract to Hire Summary: The IAM Platform Architect will define the strategy, architecture, standards, and governance model for identity and access management capabilities. This role requires a holistic understanding of the identity ecosystem and the ability to translate business, security, risk, and regulatory requirements into durable enterprise designs. The architect will cover both human and non-human / agent identities and will become a key architectural authority across the IAM technology stack, including SailPoint IdentityIQ, Sailpoint ISC, PingFederate, PingAuthorize, Ping Agent IAM Core, PingDirectory, Microsoft Entra, Microsoft Active Directory, ServiceNow, One Identity Safeguard, HashiCorp Vault, and RSA SecureID. The successful candidate will establish an integrated roadmap and guide the implementation of secure, scalable identity services across cloud, on-premises, SaaS, application, and AI environments. HOW YOU WILL MAKE AN IMPACT IAM Strategy, Architecture, and Roadmaps Define enterprise IAM strategy, target-state architectures, and multiyear roadmaps for human, non-human, and agent identities. Create architecture diagrams, architectural principles, decision records, capability models, and transition plans across the identity ecosystem. Assess business requirements, technology constraints, cyber risks, and regulatory obligations to recommend practical and supportable solutions. Identify architectural gaps, technical debt, dependencies, and investment priorities across identity platforms and services. Enterprise Solution Design and Governance Design enterprise identity solutions spanning identity governance and administration, authentication, access requests, access provisioning, directory services, privileged access, secrets, and certificates. Automate, orchestrate, and streamline manual business processes while improving end user experience and strengthening governance. Establish documented standards and design patterns across the IAM technology stack. Lead complex architecture and design reviews; produce clear diagrams, process flows, integration specifications, and implementation guidance. Resolve cross-platform architectural issues and make decisions that balance security, resiliency, scalability, operability, user experience, and cost. Technology Evaluation and Advisory Evaluate IAM products and platform capabilities through market analysis, proofs of concept, and technical assessments. Advise security, infrastructure, application, AI, and business teams on identity requirements and solution options. Guide the implementation of agentic AI identity capabilities, including discovery, ownership, authentication, authorization, governance, lifecycle controls, and auditability. Develop solution recommendations that support enterprise governance and risk management strategy. Drive adoption of standard IAM solutions across hundreds of business applications, such as SAML/OAuth SSO, SCIM or Just-in-Time (JIT) provisioning, role-based access control (RBAC), centralized access requests via ServiceNow, etc. Qualifications: 10 or more years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments. Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions. Proven experience with SailPoint IdentityIQ or Identity Security Cloud, PingFederate, PingDirectory, Microsoft Entra, Active Directory, and ServiceNow. Deep knowledge of IAM principles such as identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles. Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations. Strong communication and influence skills, with the ability to translate between technical, security, risk, and business audiences. Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems. Preferred Qualifications: Hands-on experience with One Identity Safeguard, HashiCorp Vault, RSA, or comparable PAM and MFA technologies. Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on Sailpoint Agentic Fabric/Entro, Ping Agent IAM Core, PingAuthorize, or comparable agentic identity management platforms. Experience with product selection, vendor evaluation, platform modernization, and transition from on-premises to SaaS or cloud delivery models. Relevant security, cloud, or architecture certifications. Contract to Hire Expectations Demonstrate the technical depth, leadership behaviors, collaboration skills, and delivery discipline expected of the target permanent role. Build durable documentation, operating practices, and knowledge transfer so capabilities remain supportable and scalable. Successful conversion is subject to business need, approved headcount, performance, and applicable hiring requirements.