Infrastructure & Access Management Architect

9:30 a.m. – 5:30 p.m. with flexibility as needed.

Given the global nature of this role, there may be a need for off-hours (e.g., late evening and/or early morning) conference calls or video conferences

Stay current with emerging IAM technologies such as passwordless authentication, decentralized identity frameworks, and adaptive access controls.

Collaborate with the Senior Architect Information Security and lead the implementation of identity governance automation, leveraging machine learning for anomaly detection and remediation.

Ensure seamless integration of multi-factor authentication (MFA) with biometric and mobile device capabilities to improve both security and user experience.

Champion the adoption of identity threat detection and response (ITDR) solutions to proactively identify and mitigate identity-based attacks.

Develop and maintain the firm’s IAM architecture, including identity lifecycle, access governance, and privileged access controls.

Design secure authentication and authorization patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP) and in conjunction with the Platform Engineering team, Conditional Access policies aligned with Microsoft best practices.

Embed zero trust and least privilege principles across all privileged roles and enterprise applications

Responsible for global firewall design and architecture.

Architect and enhance privileged access management (PAM) capabilities, including approval workflows and continuous monitoring.

Collaborate with Security to design Azure Policies and guardrails, supporting audit readiness and remediation (e.g., ISO 27001, ISO 22301).

Integrate IAM with HR, IT, and engineering systems to ensure policy-driven access throughout the user lifecycle.

Oversee Conditional Access deployment, risk-based authentication, and device/state signals.

Guide the operation and hardening of multi-site Active Directory domains/forests and cloud identity components (Entra/Azure AD).