iam architect

Apple

<p>Apple is a place where extraordinary people gravitate to do their life's best work. Together we craft products and experiences people once couldn&rsquo;t have imagined - and now can&rsquo;t imagine living without. The Apple Services Engineering (ASE) team builds and provides systems and infrastructure that fuel Apple&rsquo;s services (such as Apple TV, App Store, Apple Music, Apple Fitness, iCloud, Siri, and Maps). We are the foundation on which Apple&rsquo;s software developers build the products that our customers love. Our services have to scale globally, stay highly available, and meet the high security expectations for our billions of customers.<br>
<br>
The Security team within ASE is seeking a highly skilled and hands-on IAM Architect to design, implement, and optimize our Identity and Access Management (IAM) systems. This role requires deep technical expertise in IAM frameworks, authentication protocols, and access control mechanisms. The ideal candidate will be able to apply industry-leading security practices, build and execute identity and access management governance program, as well as drive seamless, secure access across the organization.<br>
<br>
<b>Description</b><br>
<br>
Scaling and transforming systems in a safe and secure way requires experience and a deep understanding of how applications are built, deployed, and operated. In this role, you will work closely with stakeholders, engineers, product and program managers, and executives to charter a IAM unification strategy that includes all compute, storage, network, data warehouse, business operations, business applications, and beyond.&quot;,&quot;responsibilities&quot;:&quot;Lead the design and implementation of scalable IAM infrastructure components ranging from hardware root identity, cryptographic chain of trusts, and fine grain access control.<br>
<br>
Architect and integrate authentication and authorization frameworks (ACL, RBAC, ABAC, Zero Trust).<br>
<br>
Collaborate with security, engineering, and product teams to align IAM strategies with business needs.<br>
<br>
Write, present, and communicate to senior executives the principles and benefits of IAM.<br>
<br>
Lead multiple engineering teams to secure and timely solutions.<br>
<br>
Contribute code to demonstrate POCs.<br>
<br>
Apply GenAI to achieve better quality, security, and time to market.<br>
<br>
<b>Preferred Qualifications</b><br>
<br>
Strong knowledge of privileged access management (PAM) and identity governance solutions<br>
<br>
Working knowledge of Kubernetes ecosystem<br>
<br>
Understanding of resource level authorization approaches at scale<br>
<br>
Understanding of networking security controls and techniques for network isolation<br>
<br>
Understanding of TPM, Hardware Root of Trust, PKI, UEFI Secure Boot, Measured Boot and security attestation architecture for hardware and workload identity provisioning<br>
<br>
Understanding of Linux security subsystems (SELinux, BPF, IPC, etc.)<br>
<br>
Experience with security frameworks (NIST, ISO 27001, SOC 2) and regulatory requirements<br>
<br>
Proven experience leveraging GenAI<br>
<br>
<b>Minimum Qualifications</b><br>
<br>
15+ years of experience in Identity and Access Management (IAM) architecture and engineering<br>
<br>
Proven hands on experience building reliable web-scale policy-based Authentication and Authorization solutions<br>
<br>
Proficiency in one or more programming languages (Golang, Java, Swift)<br>
<br>
Experience with cloud-based IAM (AWS IAM, Azure AD, Google Cloud Identity)<br>
<br>
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant .<br>
<br>
<b>Pay &amp; Benefits</b><br>
<br>
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $201,300 and $367,400, and your base pay will depend on your skills, qualifications, experience, and location.<br>
<br>
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits.<br>
<br>
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.</p>

IAM Architect

NTT DATA

<b>Req ID:</b> 366994
<br><br>
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
<br><br>
We are currently seeking a Active Directory/Azure AD Senior Identity Access Management (IAM) Architect - to join our team in Plano, Texas (US-TX), United States (US).
<br><br>
Systems Eng. Sr. Specialist Advisor– Active Directory/Entra ID
<br><br>
Role Overview
<br><br>
The NTT DATA Services Security organization is looking for talented security-oriented Systems SR. Engineering with strong Active Directory, DNS, DHCP, GPO, ADFS/Entra ID, MFA, SSO and related Identity skills. This role will be part of a larger dedicated security team dedicated to supporting, troubleshooting, upgrading Active Directory, Entra ID and related Identity technologies.
<br><br>
<b>Role Responsibilities:</b><br>
<ul>
<li>Active Directory designing, Architecture Solutions, Integration with platforms Applications</li>
<li>Develop an architecture of directory solutions for Windows, Unix, and related platforms</li>
<li>Experience in consolidations of multiple forest and domains and demonstrated understanding on User accounts, machine accounts, GPOs</li>
<li>Understand the requirement and create a migration plan for any services i.e. DNS, DHCP, and Certificate Services (PKI) etc.</li>
<li>Analyzing the requirement and design a solution to fulfil the requirement with zero impact to other platforms</li>
<li>Develop a power shell scripting with AD modules or VB .Net based on the requirements</li>
<li>Manage Azure active directory design, Architect Solutions, Integration with platforms Applications and AD connector to Entra</li>
<li>Auditing the security logs and integrating with SIEM</li>
<li>Conducting POC with multiple vendors for AD solutions and prepare detailed test cases. Create a clear recommendation document with pros and cons for senior management</li>
<li>Vulnerability Assessment and Management related to Active Directory, DNS Windows platforms</li>
<li>Active Directory consolidations including application integration working with application teams</li>
<li>Recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results</li>
</ul>
<b>Required Qualifications:</b><br>
<ul>
<li>Minimum 8 years relevant experience in Architecture and designing, solutions Migrating Active Directory, Entra ID ,Windows End points</li>
<li>Strong Demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains. Hands on experience in successful consolidation of AD Forests and Domains</li>
<li>Must have strong hands-on experience working on Entra ID (Azure Active Directory)</li>
<li>Extensive Experience working as Entra IDmin for enterprise Active Directory setup and maintenance</li>
<li>Strong experience in AD Trusts, two-way Trusts and one-way Trusts and deep knowledge of Active Directory Schemas and meta data</li>
<li>Strong Knowledge on Entra ID Identity Management Integration with on premise</li>
<li>Strong knowledge of Entra ID technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities.</li>
<li>Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices</li>
<li>Strong hands-on experience in coding in PowerShell scripting</li>
<li>Strong Knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk</li>
<li>Good knowledge on ADFS and Entra ID sync connectors</li>
<li>Strong familiarity with DNS Active Directory integrated, partitions and Infoblox DHCP systems and Migration of services from Active Directory any platform</li>
<li>Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc.,</li>
<li>Expertise in Active Directory versions 2003, 2008R2, 2012R2 2016, 2019 and Azure Active Directory</li>
<li>Good knowledge and hands on experience in setting up lab based on the solution requirements</li>
<li>Demonstrated working knowledge and hands on experience in AD disaster recovery, Replication issues and resolution using tools such as repadmin</li>
<li>Demonstrated experience in writing and applying GPOs, especially related to domain consolidations</li>
<li>Good Knowledge on Active Directory windows audit logs and levels and SIEM integration</li>
<li>Good knowledge on Networking, firewalls, including host firewalls, DNS, DHCP, DFS Network load balancers and Secure Global Directory or Secure LDAP</li>
<li>Good knowledge on Cryptography, certificates, PKI, symmetric, asymmetric keys, Encryption hash algorithms</li>
<li>Good knowledge on AD authentication protocols Kerberos, NTLM, LDAP, LDAPS LDAP-Start TLS</li>
<li>Good knowledge on Network log capturing analyzing the network packet captures through the tools Wireshark, Tshark, Microsoft NM etc.,</li>
<li>Good knowledge on application integration with LDAP Kerberos i.e. Keytab, krb5 etc.,</li>
<li>Good knowledge on AD migration tools like ADMT, Quest etc., knowledge on AD trusts, forest, domain tree structures, sites, DNS, GPOs, OU, FRS, DFSR.</li>
<li>Good knowledge on any Identity Access Management tools like FIM, MIM, OIM, Quest etc.,</li>
<li>Exposure to SAML, OAuth, OpenID and other security/IAM related standards</li>
<li>Strong hands-on familiarity with host-based security solutions, Forensic Investigation agents, and Compliance scanning and reporting, Hardening Active Directory</li>
<li>Knowledge of single sign-on, federation, active directory/LDAP, Kerberos/NTLM authentication integrated Windows authentication</li>
<li>Good knowledge on Identity management and Role based access control, attribute-based access control entitlement management</li>
<li>Good knowledge on power shell scripting with AD modules or VB .Net and ability to write scripts based on the requirement</li>
<li>Excellent communication skills, especially verbal and written</li>
<li>Good documentation skills to write a design configuration documents version controls</li>
<li>Excellent Interpersonal skill and ability to work as part of a team</li>
<li>Home office for remote work</li>
<li>Ability to work some weekends and late nights performing approved changes</li>
<li>ITIL V3 or later experience, experience in writing change request and attending Change Advisory Boards (CAB) meeting</li>
<li>Experience with Security Controls and compliance</li>
</ul>
About NTT DATA
<br><br>
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.
<br><br>
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
<br><br>
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

Active Directory/Azure AD Senior Identity & Access Management (IAM) Architect -

Vanguard

<div><div>Vanguard is seeking a Senior Cloud Security Architect &ndash; IAM to drive the design and evolution of cloud identity and access management across AWS, Azure, and GCP. This is a hands-on senior individual contributor role with broad impact across cloud engineering, cybersecurity, and platform teams. The role focuses on enabling secure-by-default cloud adoption, strengthening privileged access, improving developer experience, and supporting emerging use cases, including AI, within a highly regulated environment.</div><div><p><b>
Global Risk and Security</b> (GR&amp;S) at Vanguard enables business strategy, protects client and <b>Vanguard</b> interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.</p><p></p><p><br>
Within GR&amp;S, the <b>Enterprise Security and Fraud</b> (ES&amp;F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape.</p><p></p><p>
Our crew are our greatest resource &ndash; by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.</p><p></p><p><b>
Core Responsibilities</b></p><p></p><ul><li>
Define and evolve cloud IAM architecture across authentication, authorization, federation, and identity governance.</li><li>
Own and drive the enterprise cloud IAM strategy, including modern authentication, non‑human identities, and emerging AI use cases.</li><li>
Lead cloud security architecture reviews and influence engineering roadmaps toward secure, scalable outcomes.</li><li>
Design and implement cloud-native IAM patterns, including least privilege, policy‑as‑code, workload identity, conditional access, and service‑to‑service authentication.</li><li>
Establish and enforce IAM guardrails for Infrastructure as Code (IaC) using automated policy controls.</li><li>
Streamline secure access workflows through standardized roles, self‑service access, and efficient onboarding.</li><li>
Monitor and reduce identity-related risk (excessive permissions, misconfigurations, toxic access paths) and translate insights into architectural improvements.</li><li>
Define and align policy-driven privileged access controls across cloud platforms, applications, and CI/CD pipelines.</li><li>
Partner with cloud engineering, DevSecOps, security, and risk/compliance teams to ensure alignment with enterprise security and regulatory standards.</li></ul><p></p><p><b>
Qualifications</b></p><p></p><ul><li>
8+ years of experience in IAM, Cloud Security, Security Architecture, or related enterprise IT roles, including 3+ years as a technology/security architect</li><li>
Bachelor&rsquo;s degree or equivalent combination of education and experience</li><li>
Experience leading technical initiatives (people or matrix leadership)</li><li>
Multi‑cloud IAM expertise (AWS, Azure, GCP, OCI)</li><li>
Background in regulated environments (financial services preferred) with exposure to SOX, SOC, GDPR, DORA</li><li>
Certifications preferred: CISSP (preferred), GSEC, CISM, CCSP, and/or cloud provider certifications</li></ul><p><b>
Special Factors</b></p><p><b>
Sponsorship</b></p>
Vanguard is offering visa sponsorship for this position.<p></p><p><b>
About Vanguard</b></p><p>
At Vanguard, we don't just have a mission&mdash;we're on a mission.</p><p></p><p>
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.</p><p></p><p><b>
How We Work</b></p><p>
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</p></div></div>

Senior Cloud Security Architect, IAM Cloud

Yale New Haven Health

<div>Overview:
<div>
To be part of our organization, every employee should understand and share in the YNHHS Vision, support our Mission, and live our Values. These values - integrity, patient-centered, respect, accountability, and compassion - must guide what we do, as individuals and professionals, every day.<br>
<br>
Under the general direction and supervision of the Chief Information Security Officer, the Identity and Access Management Architect (IAM) has responsibility for the lifecycle planning, design, installation and support of the corporate security strategy, architecture, and practices. Lead the definition and execution of the organization?s IAM strategy, aligning with the overall enterprise security and technology roadmap and serve as the top-tier authority on all IAM topics, with an emphasis on integrating cloud and on-premises enterprise architectures. Develops implementation plans, coordinates implementation of security related systems verifying the installation of hardware, software, and security management tools. Works at a technical level and maintains effective communication with management teams and across user departments, and other support organizations. The IAM security architect will be required to effectively translate business objectives and risk management strategies into specific processes enabled by security technologies and services. This position is responsible for and has oversite of the execution of all cybersecurity and compliance requirements associated operational tasks required to implement a highly scalable and secure multi-vendor health-care application landscape. Documents and communicates all security changes that take place across the YNHHS applications, network, and platforms according to the established organizational procedures and standards of Yale New Haven Health System Digital &amp; Technology Solutions (DTS).<br>
<br>
EEO/AA/Disability/Veteran</div>
Responsibilities:
<ul><li>Responsible for the evaluation, architecture and delivery of advanced technology solutions while demonstrating a high degree financial awareness and consideration of final objectives.</li><li>
Determine requirements, develop, and recommend security solutions, capabilities, and controls that are aligned with business objectives, technology, and threat drivers.</li><li>
Evaluate, assess, and recommend improvements to statements of work and proposals from vendors to ensure that adequate security protections are in place for security-related deficiencies and required &quot;user controls,&quot; and report any findings to the CISO and vendor management teams.</li><li>
Develop and maintain security architecture, design, and roadmap documents. Develop and present detailed strategies, designs, and implementation plans to management.</li><li>
Deliver complex customized designs and solutions aligned to defense in depth strategies by self and by collaborating with peers, vendors, and stakeholders.</li><li>
Test, evaluate, and review security technologies, tools, and services aligned to business goals and make recommendations to the broader security team for their use based on security, financial and operational metrics.</li><li>
Track developments and changes in the digital business and threat environments to ensure that the YNHHS healthcare applications' landscape is adequately protected by existing security controls.</li><li>
Responsible for setting technical direction, scope, quality metrics, planning, execution and closing of technical projects.</li><li>
Determine baseline security configuration standards for operating systems, applications, network segmentation, and identity and access management.</li><li>
Provide high level of technical skill to enable resolution of complex security and identity and access related technology problems throughout the project lifecycle.</li><li>
Work collaboratively across technical, customer, and management constituencies to ensure a quality and timely service delivery.</li><li>
Perform other job duties and responsibilities as assigned.</li></ul>
Qualifications:
<div><b>
EDUCATION</b></div><div></div><div><br>
Bachelor's degree in Computer Science or related discipline and/or extensive technical training and related experience.</div><div></div><div><b><br>
EXPERIENCE</b></div><div></div><div><br>
At least ten (10) years of experience in a technical services function in a complex distributed enterprise network and application environment. Hands-on experience in managing and designing IAM technologies and services (e.g. SailPoint IdentityIQ, Active Directory / EntraID IAM solutions in a large environment is required. Ability to automate complex access management and authentication policies for on-prem and cloud hosted applications at an expert level required. Skilled at collaborating with peers and socializing IAM governance and strategy with senior leadership and executives. Working knowledge of Microsoft Purview, Azure IaaS security and data protection controls (e.g. data loss, encryption, conditional access, data classification). Experienced in the following areas: security architecture, design, implementation, and integration management for full stack IT infrastructure (applications, scripting, databases, operating systems, hardware, IP network, and test planning in a dynamic continuous improvement environment.</div><div></div><div><b><br>
LICENSURE</b></div><div></div><div><br>
Certified Information Systems Security Professional (CISSP) certification or within 12-24 months in role, Microsoft Azure security certifications technologies and Sailpoint Identity management experience required . Sailpoint IdentityIQ certification is desirable.</div><div></div><div><b><br>
SPECIAL SKILLS</b></div><div></div><div><br>
In depth knowledge delivering IAM and cloud security capabilities in a hybrid hosting model. Optimize RBAC controls and map workflows for individuals / groups and perform certification based on segregation of duties / role. Extensive knowledge of IAM technologies and protocols (SSO, MFA, Federation, PAM, OIDC, OAuth, SAML, and SCIM) and the ability to automate / streamline identity workflow scenarios. Knowledge of NIST CSF, Health Insurance Portability and Accountability Act (HIPAA)/Health Information Technology for Economic and Clinical Health (HITECH) security concepts where capable of reviewing / performing security assessments for project solutions. Ability to work effectively under pressure and function in a fast-paced collaborative team setting. Demonstrated capacity to acquire new skills efficiently and ability to blend technical expertise and business perspective. Able to make logical decisions regarding the best method to accomplish goals or solve a problem and is guided by precedent and general policy in making decisions. Able to coordinate and obtain cooperation of others and to handle controversial issues tactfully.</div><div></div><div><b><br>
PHYSICAL DEMAND</b></div><div></div><div><br>
Work with hand tools requiring dexterity, skillful eye to hand coordination and repeated motion. Must have average to above average eyesight and be able to easily distinguish colors and shading. Must have average to above average hearing required to easily distinguish between various audible alerts emitted from devices. Frequent walking, standing and travel between all YNHHS locations throughout the State CT and Westchester County NY . On call and off hours support required</div></div><div></div>

Identity and Access Management Architect

Wells Fargo

<div><b>About this role:</b><br>
<br>
Wells Fargo is seeking a Lead Systems Architect for Access Provisioning that is responsible for defining, governing, and evolving enterprise access provisioning capabilities within the Identity and Access Management (IAM) domain. This role provides architectural and technical leadership to ensure access is provisioned, modified, and removed in a secure, automated, scalable, and compliant manner across on-premises, cloud, and hybrid environments for both human and non-human identities.<br>
<br>
<b>In this role, you will:</b><ul><li>
Own the end-to-end architecture for access provisioning, including joiner, mover, leaver processes, entitlement lifecycle management, and access de-provisioning.</li><li>
Define and maintain target-state and transition architectures that drive automation, least-privilege enforcement, and reduction of manual access processes.</li><li>
Establish and enforce architectural standards, patterns, and guardrails for access provisioning, entitlement modeling, and application onboarding.</li><li>
Design role-based and attribute-based access models aligned to business functions, risk tolerance, and regulatory requirements.</li><li>
Partner with security engineering, access operations, application teams, and platform owners to ensure consistent implementation of provisioning architectures.</li><li>
Guide integration of identity governance, provisioning, and authorization capabilities with authoritative systems of record and downstream target systems.</li><li>
Ensure access provisioning architectures support segregation of duties, auditability, and regulatory compliance requirements.</li><li>
Lead architecture reviews for new applications, platforms, cloud migrations, and major initiatives impacting access provisioning.</li><li>
Drive remediation strategies for access-related audit findings, control gaps, and technical debt.</li><li>
Influence IAM roadmaps and investment decisions related to provisioning, automation, and access governance.</li><li>
Serve as a technical authority and thought leader within the IAM domain for access provisioning.</li><li>
Mentor senior engineers and architects, promoting consistent architectural practices across teams.</li><li>
Collaborate with governance and policy teams to translate policy and risk requirements into implementable technical controls.</li><li>
Work closely with operations teams to ensure architectures are operationally sustainable and scalable.</li></ul><b>
Required Qualifications:</b><ul><li>
5+ years of Architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education</li><li>
Deep experience designing and leading Identity and Access Management architectures, with strong focus on access provisioning and lifecycle management.</li><li>
Strong knowledge of IAM principles including least privilege, segregation of duties, entitlement governance, and identity lifecycle controls.</li><li>
Hands-on experience with enterprise IAM, identity governance, and access provisioning platforms.</li><li>
Proven ability to design large-scale, automated access solutions across on-prem, cloud, and hybrid environments.</li><li>
Strong stakeholder engagement skills with the ability to influence across security, technology, risk, and business teams.</li><li>
Excellent problem-solving, systems thinking, and written and verbal communication skills.</li></ul><b>
Desired Qualifications:</b><ul><li>
Experience with SailPoint, Active Directory and/or HashiCorp Vault</li><li>
Experience supporting regulatory, audit, and risk management activities related to access controls.</li><li>
Background in modernizing legacy access provisioning models through automation and standardized architectures.</li><li>
Ability to balance security, compliance, operational efficiency, and user experience in architectural decision-making.</li></ul><b>
Job Expectations:</b><ul><li>
This position offers a hybrid work schedule
</li><li>This position is not eligible for Visa sponsorship</li></ul><b>
Salary Ranges:</b><ul><li>
$119,000 - $187,000 - Charlotte, NC</li><li>
$119,000 - $187,000 - Chandler, AZ</li><li>
$119,000 - $187,000 - Irving, TX</li><li>
$131,000 - $206,000 - Minneapolis, MN</li></ul><b>
Pay Range</b><br>
<br>
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.<br>
$119,000.00 - $206,000.00<br>
<b>Benefits
</b><br>
<br>
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.<ul><li>
Health benefits</li><li>
401(k) Plan</li><li>
Paid time off</li><li>
Disability benefits</li><li>
Life insurance, critical illness insurance, and accident insurance</li><li>
Parental leave</li><li>
Critical caregiving leave</li><li>
Discounts and savings</li><li>
Commuter benefits</li><li>
Tuition reimbursement</li><li>
Scholarships for dependent children</li><li>
Adoption reimbursement</li></ul><b>
Posting End Date:</b><br>
23 Apr 2026<br>
<ul><li><b>Job posting may come down early due to volume of applicants.
</b></li></ul><br>
<b>We Value Equal Opportunity</b><br>
<br>
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.<br>
<br>
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.<br>
<br>
<b>Applicants with Disabilities</b><br>
<br>
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .<br>
<br>
<b>Drug and Alcohol Policy</b><br>
<br>
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.<br>
<br>
<b>Wells Fargo Recruitment and Hiring Requirements:</b><br>
<br>
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.<br>
<br>
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.</div>

Lead Systems Architect - IAM

Search 1327+ Iam architect jobs near you this April. New roles added regularly across leading industries. Apply today.

1327 iam architect jobs Near Me

IAM Architect

Active Directory/Azure AD Senior Identity & Access Management (IAM) Architect -

Senior Cloud Security Architect, IAM Cloud

Identity and Access Management Architect

Lead Systems Architect - IAM

Lead Systems Architect - IAM

Lead Systems Architect - IAM