IAM Architect

A client of Insight Global is hiring an IAM Architect to help shape and modernize enterprise identity strategy across a large, complex environment. This is a highly visible role where you’ll define identity governance, access models, and federation architecture while partnering closely with security, engineering, and leadership teams.

What You’ll Do
Lead design of enterprise IAM architecture across governance, lifecycle management, and access models
Build scalable authorization frameworks (RBAC, ABAC, policy-based access)
Drive SSO/federation design across platforms like Ping and Entra ID
Establish standards for application onboarding and identity integrations
Define strategy for non-human identities (APIs, service accounts, automation)
Partner across teams to translate identity strategy into practical solutions

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

8+ years in IAM, security architecture, or related space
Strong experience designing enterprise identity governance and access models
Experience with SailPoint (ISC or IIQ)
Hands-on experience with federation/SSO (Ping preferred)
Deep understanding of modern access models (RBAC, ABAC)

Experience with IAM modernization or large-scale transformation
Exposure to non-human identity governance
Experience with additional Ping tools or cloud identity

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.