4 months ago
Base Salary
$145k - $175k/yr
Responsibilities
- Lead architecture and design of CIAM and IAM solutions for customer, partner, and workforce identity use cases.
- Define reference architectures, technical standards, integration patterns, guardrails, roadmaps, and transition plans for identity services.
- Architect authentication, authorization, federation, SSO, adaptive authentication, MFA, delegated administration, identity proofing, registration, recovery, consent, and progressive profiling capabilities.
- Design identity integrations using OAuth 2.0, OpenID Connect, SAML, SCIM, LDAP, REST APIs, webhooks, and event-driven architectures.
- Guide implementation of identity-enabled applications, APIs, portals, workflows, onboarding processes, lifecycle processes, and entitlement models.
- Drive identity data model, directory, attribute governance, role and group strategy, policy, and enterprise platform integration decisions.
- Evaluate existing platforms and integrations to reduce risk, technical debt, and operational friction.
- Ensure identity architectures provide resilience, scalability, observability, auditability, privacy, and compliance by design.
- Produce architecture diagrams, standards, decision records, implementation guidance, and technical governance materials.
- Facilitate design reviews and threat-informed architecture reviews while mentoring engineers and administrators.
- Develop improvements for managing agent and agentic non-human identity risks.
- Collaborate with vendors and internal teams to assess identity capabilities and recommend strategic improvements.
Requirements
- Bachelor’s degree in computer science, information technology, cybersecurity, software engineering, or a related field, or equivalent practical work experience.
- At least 7 years of progressive experience in identity and access management, application security, or enterprise architecture.
- At least 4 years of experience architecting or leading CIAM and/or IAM platform implementations.
- Practical experience integrating identity providers, cloud platforms, customer applications, HR systems, CRM platforms, ITSM systems, and enterprise applications.
- Experience with Okta, Auth0, Microsoft Entra ID, AWS, Azure, Salesforce, ServiceNow, or comparable platforms.
- Experience designing secure APIs, identity-aware applications, and event-driven or service-based integrations.
- Demonstrated ability to balance security, privacy, user experience, scalability, and operational support in production identity architectures.
- Required certification in an identity or cybersecurity discipline such as CISSP, CCSP, IDPro, Okta certification, Microsoft SC-300, AWS Security Specialty, or comparable credentials.
- Strong expertise in CIAM/IAM architecture, identity lifecycle management, provisioning, deprovisioning, delegated administration, and access governance.
- Deep understanding of OAuth 2.0, OpenID Connect, SAML, SCIM, token, session, and federation concepts.
- Experience with customer identity journeys, enterprise access models, least privilege, entitlement management, and segregation of duties.
- Understanding of identity security principles including session security, secrets protection, API security, bot and fraud controls, logging, monitoring, threat modeling, and auditability.
- Ability to define architecture roadmaps, target states, transition plans, and decision frameworks.
- Strong cross-functional communication, problem-solving, and distributed-systems troubleshooting skills.
- Familiarity with software and platform engineering practices, CI/CD, infrastructure as code, automated testing, observability, and secure development.
- Ability or willingness to use AI-assisted engineering tools such as Claude, GitHub Copilot, or Cursor securely.
- Interest in or experience with agentic AI, non-human identities, machine identities, and modern IAM governance.
- Familiarity with Agile delivery practices and Jira.
Benefits
- Medical, dental, and vision insurance.
- 401(k) plan.
- Paid company holidays and paid time off.
- Paid parental and caregiver leave.
- Certification sponsorship and continued learning and development opportunities.
- Additional benefits are available through AHEAD’s USA employment benefits program.
About AHEAD
AHEAD is an IT services and consulting firm that designs, builds, and operates digital platforms for large enterprises across cloud infrastructure, automation, data and analytics, security, and DevOps. It generates revenue through consulting, systems integration, and managed services, including cloud management and operations. Founded in 2007 and headquartered in Chicago, it is privately held and owned by Centerbridge Partners.