Identity Access Management (IAM) Lead/Architect
krest global solutionsDallas (TX)
Identity Access Management (IAM) Lead/Architect
Posted yesterday
krest global solutionsDallas (TX)
SENIORITY
Manager
About the role
Job Description:
*Hiring: Identity Access Management (IAM) Lead/Architect – Contract (Onsite/Hybrid, Plano, TX)*Experience: 10–15+ Years (with strong IAM architecture & development background) Core Skills: IAM Architecture & Design (SSO, MFA, Provisioning, Directory Services, PAM), Java, NodeJS, Spring, VueJS, REST APIs, JSON, AWS (Kubernetes, Terraform), CI/CD (Jenkins, GitLab CI), SAML, OAuth2, OIDC, LDAP, IAM Integration & Automation, Application Onboarding, Workflow Creation. Other: Cloud Deployment (AWS Kubernetes), Terraform/Infrastructure as Code, DevOps Support, Risk & Issue Management, Management Reporting (Internal & Client), Stakeholder Communication, Automation of Manual IAM Processes, Architecture Roadmap Development. Soft Skills: Leadership & Stakeholder Engagement, Proactive Risk Management, Clear Communication & Presentation, Strong Collaboration with Application and DevOps Teams, Accountability, Problem Solving Mindset.
Nice to Have:
ForgeRock, Okta, AWS SaaS IAM Implementation, Monitoring Tools (CloudWatch, RockMon, AppDynamics, DataDog, ELK Kibana), Agile/SAFe Environment Experience. DETAILED JOB DESCRIPTION
What we're looking for:
End-to-end ownership of design and architecture for IAM systems including SSO, MFA, provisioning, directory services, and privileged access management (PAM).Strong proficiency in IAMprotocols and integrations — SAML, OAuth2, OIDC, LDAP — and hands-on experience with custom development using Java, NodeJS, Spring, and VueJS.Proven ability to design and develop RESTful APIs, ensuring secure and scalable integration with enterprise applications. Expertise in AWS cloud deployments (Kubernetes) and Terraform scripting for infrastructure automation. Ability to build and enhance CI/CD pipelines, supporting continuous integration and deployment across IAM components. Strong focus on risk identification, mitigation, and stakeholder communication, maintaining alignment with business objectives and IT strategy. Deep understanding of IAM automation workflows — from user provisioning to access revocation — ensuring compliance and efficiency. Commitment to security, maintainability, and governance best practices across IAM lifecycle management.
What you'll be doing:
Lead the end-to-end design, architecture, and implementation of enterprise IAM solutions.
Develop and maintain IAM architecture roadmaps, ensuring alignment with business goals and technology standards.
Design, review, and manage API integrations with target applications and cloud services. Collaborate with application teams, DevOps, and security operations to integrate IAM controls into enterprise workflows.
Implement and automate user onboarding/offboarding, access governance, and role-based access control (RBAC) processes.
Support DevOps with CI/CD automation, including testing, validation, and deployment of IAM components.
Drive incident response, risk management, and escalation processes, ensuring proactive communication with stakeholders.
Conduct performance optimization, monitoring, and audit compliance activities for IAM systems. Prepare management reports and architectural documentation for internal and client stakeholders.
Mentor junior engineers and foster collaboration between teams to enhance IAM maturity across the organization.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.