IAM and Automation Architect

Position: IAM and Automation Architect

Location: San Jose, CA

Note: US Citizenship Required 

In the role of IAM and Automation Architect, you will lead the design, implementation, and enhancement of our Identity and Access Management solutions throughout our enterprise landscape. We seek a visionary leader with extensive expertise in IAM principles, technologies, and best practices. Your responsibilities will include shaping our IAM strategy, spearheading automation projects, and bolstering our security framework. Success in this role hinges on a strategic outlook, profound technical acumen, and effective leadership to foster innovation and achieve outstanding results.

What You’ll Do:

• Develop and communicate the strategic vision for Identity and Access Management, aligning it with organizational objectives and industry standards.
• Architect IAM Solutions: Design and deploy IAM solutions in accordance with security policies, compliance needs, and business goals.
• Manage Identity Lifecycle: Establish protocols for handling the entire identity lifecycle, covering provisioning, authentication, authorization, and de-provisioning.
• Implement Privileged Access Management (PAM): Create and enforce PAM solutions to safeguard critical systems and regulate access to sensitive resources.
• Introduce automation to optimize identity management procedures, enhancing efficiency and accuracy.
• Lead the planning, execution, and refinement of IAM solutions, encompassing authentication, authorization, single sign-on (SSO), multi-factor authentication (MFA), and identity lifecycle management.
• Drive automation initiatives within the IAM environment, leveraging modern tools to streamline processes and reduce operational burdens.
• Collaborate closely with diverse teams, including Security, IT Operations, Development, and Compliance, to ensure seamless integration and alignment of IAM projects.
• Offer technical leadership and guidance in selecting and implementing IAM technologies and solutions.
• Develop robust architecture solutions that address immediate needs while providing a scalable and adaptable framework for future business growth, maintaining alignment with IAM/CIAM security policies.
• Participate in user access reviews, adhering to the principle of least privilege in access grants.
• Extend IAM capabilities to support diverse infrastructure applications such as Okta, Slack, mobile device management (MDM), and privileged access management (PAM).
• Stay updated on emerging trends, threats, and technologies in IAM and security domains, integrating relevant insights into the IAM roadmap and strategy.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field; Master's degree preferred or equivalent work experience.
• Demonstrated proficiency with over 7 years of experience in designing, implementing, and overseeing Identity and Access Management solutions within enterprise settings.
• Comprehensive understanding of IAM principles, protocols, standards, and frameworks, including OAuth, SAML, OpenID Connect, LDAP, RBAC, and ABAC.
• Proficiency in scripting and automation languages such as Python, PowerShell, and Bash, coupled with hands-on experience using automation tools like Ansible, Terraform, or Chef.
• Hands-on familiarity with IAM platforms and technologies, including Okta, Opal, Lumos, ConductorOne, or analogous solutions.
• Knowledgeable about Infrastructure as Code (IaC) principles and adeptness with configuration management tools like Kubernetes, Docker, or similar technologies.
• Strong grasp of security fundamentals, encryption methodologies, and compliance mandates such as GDPR, HIPAA, and PCI DSS.
• Exceptional communication prowess, capable of conveying intricate technical concepts to diverse audiences and influencing stakeholders across all organizational levels.
• Demonstrated leadership insight, evidenced by a track record of spearheading IAM initiatives, fostering collaboration, and achieving tangible outcomes within dynamic environments.

#LI-YC2

#LI-Remote