Sr. Enterprise Identity Architect at KLA Corporation — CAN | Base Career

Full Job Posting

Job Description And Preferred Qualifications

We are seeking a highly experienced Sr.

Enterprise Identity Architect to lead the design and modernization of enterprise identity security across on‐prem and cloud environments.

This role provides deep technical expertise and strategic direction across Identity & Access Management (IAM), Identity Governance & Administration (IGA), Privileged Identity Management (PIM), Single Sign-On (SSO), Cloud Identity, Active Directory, and Entra ID (Azure AD).

As a senior architect, you will define enterprise identity architecture, drive Zero Trust initiatives, and collaborate with cross‐functional teams to implement scalable, secure, and compliant identity solutions.

Key Responsibilities

Develop and maintain the enterprise identity architecture blueprint across IAM, IGA, SSO, PIM, and cloud identity services.

Establish identity standards, patterns, and reference architectures for on-premises and cloud environments.

Define and drive Zero Trust identity strategy, modern authentication roadmap, and identity lifecycle transformation.

Assess identity risk posture and recommend controls aligned with business and compliance requirements.

Architect and implement identity lifecycle and governance solutions including role modeling, access certification, and automated provisioning/deprovisioning.

Integrate IGA platforms with HR systems, AD/Entra ID, cloud applications, and SaaS platforms.

Define RBAC/ABAC frameworks and enforce least privilege across the enterprise.

Design and oversee PIM and privileged access architectures including just‐in‐time access, privileged session management, and secure admin tiering.

Align privileged access models across AD, Entra ID, cloud workloads, servers, databases, and network systems.

Provide architectural oversight for privileged access tools and secure credential management.Architect SSO integrations using SAML, OAuth, OIDC, WS‐Fed, and modern authentication protocols.

Define centralized authentication patterns for cloud and on‐prem applications.

driving large-scale identity modernization or cloud transformation programs.

Knowledge of regulatory frameworks like SOX, HIPAA, PCI, ISO 27001, or NIST.

Certifications in Identity and Security areas a huge plus.

Interns are eligible for some of the benefits listed.

Our pay ranges are determined by role, level, and location.

The range displayed reflects the pay for this position in the primary location identified in this posting.

Actual pay depends on several factors, including state minimum pay wage rates, location, job-related skills, experience, and relevant education level or training.

We are committed to complying with all applicable federal and state minimum wage requirements where applicable.

If applicable, your recruiter can share more about the specific pay range for your preferred location during the hiring process.

KLA is proud to be an Equal Opportunity Employer.

We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.

Please contact us at talent.acquisition@kla.com or at +1-408-352-2808 to request accommodation.

Be aware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as KLA employees.

KLA never asks for any financial compensation to be considered for an interview, to become an employee, or for equipment.

Further, KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA.

Please ensure that you have searched KLA’s Careers website for legitimate job postings.

KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers.

If you are concerned that a communication, an interview, an offer of employment, or that an employee is not legitimate, please send an email to talent.acquisition@kla.com to confirm the person you are communicating with is an employee.

We take your privacy very seriously and confidentially handle your information.

Sr. Enterprise Identity Architect

Job Fit Check

Key Skills for This Role

Full Job Posting

Job Description And Preferred Qualifications

Key Responsibilities

Apply for this job in 1 click

More jobs at KLA Corporation

Change Management Practitioner/Project Manager

Applications Development Engineer

HPC Engineer for Product Development

Software Engineer

AI Software Engineer - Operations

Regional Development Applications Engineer - MACH

Sr. Financial Analyst

Sales Administrator