identity access management architect

Yale New Haven Health

<div>Overview:
<div>
To be part of our organization, every employee should understand and share in the YNHHS Vision, support our Mission, and live our Values. These values - integrity, patient-centered, respect, accountability, and compassion - must guide what we do, as individuals and professionals, every day. 
 
Under the general direction and supervision of the Chief Information Security Officer, the Identity and Access Management Architect (IAM) has responsibility for the lifecycle planning, design, installation and support of the corporate security strategy, architecture, and practices. Lead the definition and execution of the organization?s IAM strategy, aligning with the overall enterprise security and technology roadmap and serve as the top-tier authority on all IAM topics, with an emphasis on integrating cloud and on-premises enterprise architectures. Develops implementation plans, coordinates implementation of security related systems verifying the installation of hardware, software, and security management tools. Works at a technical level and maintains effective communication with management teams and across user departments, and other support organizations. The IAM security architect will be required to effectively translate business objectives and risk management strategies into specific processes enabled by security technologies and services. This position is responsible for and has oversite of the execution of all cybersecurity and compliance requirements associated operational tasks required to implement a highly scalable and secure multi-vendor health-care application landscape. Documents and communicates all security changes that take place across the YNHHS applications, network, and platforms according to the established organizational procedures and standards of Yale New Haven Health System Digital &amp; Technology Solutions (DTS). 
 
EEO/AA/Disability/Veteran</div>
Responsibilities:
<ul><li>Responsible for the evaluation, architecture and delivery of advanced technology solutions while demonstrating a high degree financial awareness and consideration of final objectives.</li><li>
Determine requirements, develop, and recommend security solutions, capabilities, and controls that are aligned with business objectives, technology, and threat drivers.</li><li>
Evaluate, assess, and recommend improvements to statements of work and proposals from vendors to ensure that adequate security protections are in place for security-related deficiencies and required &quot;user controls,&quot; and report any findings to the CISO and vendor management teams.</li><li>
Develop and maintain security architecture, design, and roadmap documents. Develop and present detailed strategies, designs, and implementation plans to management.</li><li>
Deliver complex customized designs and solutions aligned to defense in depth strategies by self and by collaborating with peers, vendors, and stakeholders.</li><li>
Test, evaluate, and review security technologies, tools, and services aligned to business goals and make recommendations to the broader security team for their use based on security, financial and operational metrics.</li><li>
Track developments and changes in the digital business and threat environments to ensure that the YNHHS healthcare applications' landscape is adequately protected by existing security controls.</li><li>
Responsible for setting technical direction, scope, quality metrics, planning, execution and closing of technical projects.</li><li>
Determine baseline security configuration standards for operating systems, applications, network segmentation, and identity and access management.</li><li>
Provide high level of technical skill to enable resolution of complex security and identity and access related technology problems throughout the project lifecycle.</li><li>
Work collaboratively across technical, customer, and management constituencies to ensure a quality and timely service delivery.</li><li>
Perform other job duties and responsibilities as assigned.</li></ul>
Qualifications:
<div>
EDUCATION</div><div></div><div> 
Bachelor's degree in Computer Science or related discipline and/or extensive technical training and related experience.</div><div></div><div> 
EXPERIENCE</div><div></div><div> 
At least ten (10) years of experience in a technical services function in a complex distributed enterprise network and application environment. Hands-on experience in managing and designing IAM technologies and services (e.g. SailPoint IdentityIQ, Active Directory / EntraID IAM solutions in a large environment is required. Ability to automate complex access management and authentication policies for on-prem and cloud hosted applications at an expert level required. Skilled at collaborating with peers and socializing IAM governance and strategy with senior leadership and executives. Working knowledge of Microsoft Purview, Azure IaaS security and data protection controls (e.g. data loss, encryption, conditional access, data classification). Experienced in the following areas: security architecture, design, implementation, and integration management for full stack IT infrastructure (applications, scripting, databases, operating systems, hardware, IP network, and test planning in a dynamic continuous improvement environment.</div><div></div><div> 
LICENSURE</div><div></div><div> 
Certified Information Systems Security Professional (CISSP) certification or within 12-24 months in role, Microsoft Azure security certifications technologies and Sailpoint Identity management experience required . Sailpoint IdentityIQ certification is desirable.</div><div></div><div> 
SPECIAL SKILLS</div><div></div><div> 
In depth knowledge delivering IAM and cloud security capabilities in a hybrid hosting model. Optimize RBAC controls and map workflows for individuals / groups and perform certification based on segregation of duties / role. Extensive knowledge of IAM technologies and protocols (SSO, MFA, Federation, PAM, OIDC, OAuth, SAML, and SCIM) and the ability to automate / streamline identity workflow scenarios. Knowledge of NIST CSF, Health Insurance Portability and Accountability Act (HIPAA)/Health Information Technology for Economic and Clinical Health (HITECH) security concepts where capable of reviewing / performing security assessments for project solutions. Ability to work effectively under pressure and function in a fast-paced collaborative team setting. Demonstrated capacity to acquire new skills efficiently and ability to blend technical expertise and business perspective. Able to make logical decisions regarding the best method to accomplish goals or solve a problem and is guided by precedent and general policy in making decisions. Able to coordinate and obtain cooperation of others and to handle controversial issues tactfully.</div><div></div><div> 
PHYSICAL DEMAND</div><div></div><div> 
Work with hand tools requiring dexterity, skillful eye to hand coordination and repeated motion. Must have average to above average eyesight and be able to easily distinguish colors and shading. Must have average to above average hearing required to easily distinguish between various audible alerts emitted from devices. Frequent walking, standing and travel between all YNHHS locations throughout the State CT and Westchester County NY . On call and off hours support required</div></div><div></div>

Identity and Access Management Architect

NTT DATA

Req ID: 366994
 
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
 
We are currently seeking a Active Directory/Azure AD Senior Identity Access Management (IAM) Architect - to join our team in Plano, Texas (US-TX), United States (US).
 
Systems Eng. Sr. Specialist Advisor– Active Directory/Entra ID
 
Role Overview
 
The NTT DATA Services Security organization is looking for talented security-oriented Systems SR. Engineering with strong Active Directory, DNS, DHCP, GPO, ADFS/Entra ID, MFA, SSO and related Identity skills. This role will be part of a larger dedicated security team dedicated to supporting, troubleshooting, upgrading Active Directory, Entra ID and related Identity technologies.
 
Role Responsibilities: 
<ul>
<li>Active Directory designing, Architecture Solutions, Integration with platforms Applications</li>
<li>Develop an architecture of directory solutions for Windows, Unix, and related platforms</li>
<li>Experience in consolidations of multiple forest and domains and demonstrated understanding on User accounts, machine accounts, GPOs</li>
<li>Understand the requirement and create a migration plan for any services i.e. DNS, DHCP, and Certificate Services (PKI) etc.</li>
<li>Analyzing the requirement and design a solution to fulfil the requirement with zero impact to other platforms</li>
<li>Develop a power shell scripting with AD modules or VB .Net based on the requirements</li>
<li>Manage Azure active directory design, Architect Solutions, Integration with platforms Applications and AD connector to Entra</li>
<li>Auditing the security logs and integrating with SIEM</li>
<li>Conducting POC with multiple vendors for AD solutions and prepare detailed test cases. Create a clear recommendation document with pros and cons for senior management</li>
<li>Vulnerability Assessment and Management related to Active Directory, DNS Windows platforms</li>
<li>Active Directory consolidations including application integration working with application teams</li>
<li>Recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results</li>
</ul>
Required Qualifications: 
<ul>
<li>Minimum 8 years relevant experience in Architecture and designing, solutions Migrating Active Directory, Entra ID ,Windows End points</li>
<li>Strong Demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains. Hands on experience in successful consolidation of AD Forests and Domains</li>
<li>Must have strong hands-on experience working on Entra ID (Azure Active Directory)</li>
<li>Extensive Experience working as Entra IDmin for enterprise Active Directory setup and maintenance</li>
<li>Strong experience in AD Trusts, two-way Trusts and one-way Trusts and deep knowledge of Active Directory Schemas and meta data</li>
<li>Strong Knowledge on Entra ID Identity Management Integration with on premise</li>
<li>Strong knowledge of Entra ID technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities.</li>
<li>Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices</li>
<li>Strong hands-on experience in coding in PowerShell scripting</li>
<li>Strong Knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk</li>
<li>Good knowledge on ADFS and Entra ID sync connectors</li>
<li>Strong familiarity with DNS Active Directory integrated, partitions and Infoblox DHCP systems and Migration of services from Active Directory any platform</li>
<li>Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc.,</li>
<li>Expertise in Active Directory versions 2003, 2008R2, 2012R2 2016, 2019 and Azure Active Directory</li>
<li>Good knowledge and hands on experience in setting up lab based on the solution requirements</li>
<li>Demonstrated working knowledge and hands on experience in AD disaster recovery, Replication issues and resolution using tools such as repadmin</li>
<li>Demonstrated experience in writing and applying GPOs, especially related to domain consolidations</li>
<li>Good Knowledge on Active Directory windows audit logs and levels and SIEM integration</li>
<li>Good knowledge on Networking, firewalls, including host firewalls, DNS, DHCP, DFS Network load balancers and Secure Global Directory or Secure LDAP</li>
<li>Good knowledge on Cryptography, certificates, PKI, symmetric, asymmetric keys, Encryption hash algorithms</li>
<li>Good knowledge on AD authentication protocols Kerberos, NTLM, LDAP, LDAPS LDAP-Start TLS</li>
<li>Good knowledge on Network log capturing analyzing the network packet captures through the tools Wireshark, Tshark, Microsoft NM etc.,</li>
<li>Good knowledge on application integration with LDAP Kerberos i.e. Keytab, krb5 etc.,</li>
<li>Good knowledge on AD migration tools like ADMT, Quest etc., knowledge on AD trusts, forest, domain tree structures, sites, DNS, GPOs, OU, FRS, DFSR.</li>
<li>Good knowledge on any Identity Access Management tools like FIM, MIM, OIM, Quest etc.,</li>
<li>Exposure to SAML, OAuth, OpenID and other security/IAM related standards</li>
<li>Strong hands-on familiarity with host-based security solutions, Forensic Investigation agents, and Compliance scanning and reporting, Hardening Active Directory</li>
<li>Knowledge of single sign-on, federation, active directory/LDAP, Kerberos/NTLM authentication integrated Windows authentication</li>
<li>Good knowledge on Identity management and Role based access control, attribute-based access control entitlement management</li>
<li>Good knowledge on power shell scripting with AD modules or VB .Net and ability to write scripts based on the requirement</li>
<li>Excellent communication skills, especially verbal and written</li>
<li>Good documentation skills to write a design configuration documents version controls</li>
<li>Excellent Interpersonal skill and ability to work as part of a team</li>
<li>Home office for remote work</li>
<li>Ability to work some weekends and late nights performing approved changes</li>
<li>ITIL V3 or later experience, experience in writing change request and attending Change Advisory Boards (CAB) meeting</li>
<li>Experience with Security Controls and compliance</li>
</ul>
About NTT DATA
 
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.
 
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
 
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

Active Directory/Azure AD Senior Identity & Access Management (IAM) Architect -

<div>Title:
Lead Architect &ndash; Identity, Credential, and Access Management (ICAM)
Belong. Connect. Grow. with KBR!
KBR is seeking a Lead Architect for Identity, Credential, and Access Management (ICAM) to lead the design, integration, and modernization of enterprise identity solutions supporting mission-critical systems within NASIC. This role serves as the technical lead for AFISRE and drives Zero Trust identity capabilities across NASIC and the AF enterprise in support of Air Force Digital Transformation initiatives. The ideal candidate will bring deep expertise in identity security, cloud-native architectures, and DevSecOps, with the ability to lead both technical teams and customer engagements. 
 
Key Responsibilities: 
Serve as the enterprise technical lead for ICAM architecture, engineering, and integration 
Design and Execute the ICAM strategy, roadmap, and modernization initiatives 
Architect and implement Zero Trust identity and access management solutions 
Design authentication, authorization, federation, and identity governance capabilities 
Integrate ICAM solutions across multi-domain, cloud, and mission system environments 
Provide subject matter expertise in privileged access management (PAM) and identity governance 
Ensure compliance with DoD, NIST, and Intelligence Community standards and frameworks 
Lead and mentor engineering teams, architects, and developers 
Engage directly with government stakeholders and mission partners 
Support secure identity integration across data platforms, applications, and enterprise services 
Lead customer engagement 
Any other tasks closely associated with the performance of duties listed above
Required Qualifications:
Active Top Secret/SCI (TS/SCI) clearance 
Bachelor&rsquo;s degree in a STEM field with 15+ years of relevant experience 
Deep understanding of Zero Trust, Identity-as-a-Service (IDaaS), and modern access control models 
Extensive experience designing and implementing enterprise ICAM solutions and PKI 
Strong knowledge of Active Directory and enterprise identity services 
Experience with authentication and federation protocols (SAML, OAuth 2.0, OpenID Connect) 
Proven experience architecting cloud-based environments (AWS, Azure) 
Hands-on experience with containerization and orchestration (Docker, Kubernetes) 
Experience implementing DevSecOps practices and CI/CD pipelines 
Proficiency in Linux/Unix operating systems 
Development experience in Golang and Python 
Experience with relational databases and SQL (MariaDB, PostgreSQL) 
Experience working in Agile development environments 
Strong written and verbal communication skills 
Ability to operate effectively in a secure, in-person/closed-area environment
Desired Qualifications:
Experience with service mesh and identity platforms (Istio, Keycloak) 
Demonstrated expertise in cloud-native and DevSecOps ecosystems, including Helm, YAML, GitLab, and ArgoCD 
Strong knowledge of Active Directory 
Experience with SAML, OAuth 2.0, OpenID Connect 
Experience implementing observability and monitoring solutions (Grafana, Prometheus) 
Familiarity with Open Policy Agent (OPA) and policy-as-code frameworks 
Web development experience using React, TypeScript, Angular, with a focus on UI/UX 
Experience architecting and developing ICAM / Identity Security systems and software 
Familiarity with cross-domain solutions and secure data transfer in classified environments 
Deep knowledge of Zero Trust frameworks, including: 
NIST SP 800-207 
NIST SP 800-63-4 
DoD Zero Trust Reference Architecture (v2.0) 
Relevant certifications such as CISSP, CISM, CASP+, Security+ 
Agile certifications (CSM, CSPO, SAFe) 
Experience supporting large IDIQ contracts and federal acquisition processes 
Experience supporting DoD and/or Intelligence Community (IC) programs
Belong, Connect and Grow at KBR 
 
At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team&rsquo;s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver &ndash; Together.
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.</div>

Lead Architect – Identity, Credential, and Access Management (ICAM)

Apple

Get ready to do something great when you join the Apple Identity Management team that&rsquo;s responsible for all of Apple&rsquo;s identity and access management. The people who work here have re-invented and defined the security standards for protecting customer data with innovative software solutions. The same dedication to innovation is also applied to our business practices - leaving the world a more secure place than we found it. Do you want to help deliver the next innovation in security and user experience for Apple ? 
 
Our teams foster a collaborative environment with creative, smart &amp; fun people using state of the art technologies. Come and join us in building solutions that have a worldwide impact. 
 
Description 
 
We are seeking an exceptional Senior Engineering Manager with deep expertise in Access Management, Authorization and Identity Governance specifically focused on authorization frameworks and access control models. This is a highly technical leadership role requiring someone who can both architect strategic solutions and actively contribute to hands-on implementation using Java &amp; Spring framework. 
 
The candidate should demonstrate the ability to continuously raise the performance bar for self and team while serving as a strong change leader who drives positive organizational and technical transformation. Proven track record of building highly scalable, resilient platforms with strong customer obsession, proactive production monitoring, and uncompromising quality. 
 
The candidate should bring an innovative, out-of-the-box mindset to solve complex enterprise challenges and deep AI expertise to modernize engineering processes and architect AI-native solutions (agents, MCPs) across hybrid SaaS, cloud, and custom enterprise ecosystems.&quot;,&quot;responsibilities&quot;:&quot;Develop and execute a comprehensive Access Management and Governance strategy centered on authorization, access control models (RBAC, PBAC, ABAC, ReBAC), and policy enforcement 
 
Lead the design, implementation, and optimization of identity governance platforms and authorization solutions with hands-on contributions to architecture, coding, and database schema design 
 
Design and implement authorization flows using OAuth 2.0, OpenID Connect, and policy decision frameworks (OPA, XACML, Cedar) 
 
Ensure compliance with regulatory requirements (GDPR, CCPA, SOX, HIPAA, PCI-DSS) through robust access controls 
 
Evaluate and integrate AI/ML capabilities for intelligent access decisions and policy recommendations 
 
Build, lead, and mentor a high-performing engineering team fostering technical excellence and continuous improvement 
 
Preferred Qualifications 
 
Experience with cloud-based identity solutions (AWS IAM, Azure AD PIM, GCP IAM, Okta) and multi-cloud governance 
 
Experience applying AI/ML for intelligent access decisions, anomaly detection, and behavioral analytics 
 
Understanding of zero trust architecture, continuous authorization, and DevSecOps practices 
 
Knowledge of containerization (Docker, Kubernetes) authorization models and API gateway security 
 
Minimum Qualifications 
 
Minimum of 10 years in Identity and Access Management domains, with at least 5 years in engineering leadership roles 
 
Expert-level programming skills in Java and Spring Framework (required) with ability to contribute to production code 
 
Deep expertise in data modeling, database schema design, and relational database design for identity and access management systems 
 
Strong expertise in implementing and optimizing RBAC, PBAC, ABAC, and ReBAC (Relationship-Based Access Control) models 
 
Hands-on experience with OAuth 2.0, OpenID Connect, and policy engines (OPA, XACML, Cedar) 
 
Demonstrated ability to lead technical teams and deliver complex projects on time 
 
Excellent communication skills to convey technical concepts to business and executive stakeholders 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $198,300 and $342,800, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Engineering Manager - Access Management, Authorization & Identity Governance

We are seeking an Identity Architect to lead the charge in safeguarding our platforms and products with world-class security solutions. In this high-impact role, you will be a leader with vision and technical authority, collaborating across teams to design, implement, and drive adoption of identity frameworks that protect our critical infrastructure. This is an opportunity to set the standard in security engineering, influencing a diverse range of projects and ensure our platforms remain resilient against emerging threats. 
 
Description 
 
Take on a role where your contributions will have a direct and important impact on the security of our products and our customers. Work in a dynamic environment where you can push the boundaries of security technology and standard processes. Join a team committed to continuous learning, professional development, and the pursuit of technical excellence. Be part of a collaborative, innovative, and purposeful organization that values diverse perspectives and a security-first attitude. In this role, you will act as the senior security technical leader, defining and implementing identity standards and practices that align with company goals, regulatory requirements, and industry standards. 
 
&quot;,&quot;responsibilities&quot;:&quot;You will serve as the go-to authority on identity and authentication. 
 
You will drive the design and deployment of secure and scalable identity architectures, delivering an identity-first approach to security throughout our platforms and applications. 
 
You will collaborate with partners and customers adopting identity solutions, and will collaborate with engineering and product teams to help the organization deliver the identity solutions that customers and partners truly need. 
 
You will mentor and guide engineers across the organization, building a culture of identity-first security. 
 
You will provide thought leadership setting the direction of identity for years to come and will develop pragmatic practices that can adopted here and now. 
 
Preferred Qualifications 
 
Visionary: Capable of anticipating future challenges and crafting security strategies that prepare us to meet them. 
 
Problem Solver: Analytical mentality with an aim to solve sophisticated security challenges and deliver balanced solutions. 
 
Security: Experience with network security, application security, or DevSecOps practices 
 
Cloud: Experience with infrastructure-as-code (IaC) and cloud-stack application development 
 
Minimum Qualifications 
 
Education: Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Information Security, or a related field (or equivalent experience). 
 
Experience: 10+ years of hands-on experience in identity and access management. 
 
Leadership: Proven ability to lead identity strategy and mentor teams across functions using outstanding communication skills, driving a security-focused culture across large organizations. 
 
Development: Strong coding ability in complied language (eg. Go, Java) and software engineering best practices 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $201,300 and $367,400, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Identity Architect

DailyPay Inc

<div>About Us: 
DailyPay is transforming the way people get paid. As a worktech company and the industry&rsquo;s leading on demand pay solution, DailyPay uses an award-winning technology platform to help America&rsquo;s top employers build stronger relationships with their employees. This voluntary employee benefit enables workers everywhere to feel more motivated to work harder and stay longer on the job while supporting their financial well-being outside of the workplace. 
DailyPay is headquartered in New York City, with operations throughout the United States as well as in Belfast. For more information, visit DailyPay's Press Center.<h2 class="jobSectionHeader">
The Role:</h2>
We are seeking an experienced Identity and Access Management (IAM) Engineer to join our growing IT team. This full-time position is critical in ensuring the security and integrity of our systems by designing, implementing, and maintaining robust access control solutions. The ideal candidate will have deep expertise in IAM principles, infrastructure provisioning, and enforcing the principle of least privilege across a Cloud and SaaS enterprise environment.
If this opportunity excites you, we encourage you to apply even if you do not meet all of the qualifications.
<h2 class="jobSectionHeader">How You Will Make an Impact:</h2><ul><li>
Access Architecture and Design: Design, implement, and manage the IAM infrastructure, including identity provisioning, authentication, and authorization systems. Develop and maintain the overall IAM roadmap and architecture, ensuring alignment with organizational security policies and business objectives</li><li>
Access Role Design and Management: Design and document granular access roles and policies based on the principle of least privilege. Collaborate with business units to define and manage role-based access control (RBAC) and attribute-based access control (ABAC) models. Conduct regular reviews and clean-up of access roles to maintain security posture and compliance</li><li>
Infrastructure Provisioning and Least Privilege Enforcement: Design and implement secure infrastructure provisioning mechanisms using tools like Terraform or equivalent, ensuring all resources are provisioned with security best practices. Implement and enforce least privilege principles across cloud environments and on-premises systems. Automate the enforcement of security controls and access policies for infrastructure components</li><li>
Support Business Growth and Scalability: Ensure the IAM solutions are scalable and resilient to support rapid business growth and expansion into new markets or services. Integrate new applications and services into the centralized IAM platform, focusing on seamless and secure user experience. Provide technical guidance and support for IAM-related projects and initiatives</li><li>
Operations and Compliance: Monitor and troubleshoot IAM system performance and availability. Ensure all IAM processes and systems comply with regulatory requirements (e.g., SOC 2, ISO 27001, SOX). Develop and maintain comprehensive documentation for all IAM systems and processes, including the IAM Design Document File</li></ul><h2 class="jobSectionHeader">
What You Bring to The Team:</h2><ul><li>
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience</li><li>
4 years of experience working directly in an Identity and Access Management role</li><li>
Expertise in designing and implementing IAM solutions (e.g., Okta, Access Governance systems)</li><li>
Strong understanding of identity protocols (SAML, OAuth 2.0, OpenID Connect)</li><li>
Experience with infrastructure-as-code (IaC) tools, such as Terraform, to manage infrastructure provisioning securely</li><li>
Proven ability to enforce the principle of least privilege in complex, distributed systems</li></ul><h2 class="jobSectionHeader">
Nice to Haves:</h2><ul><li>
Experience with Privilege Access Management (PAM) solutions (e.g., CyberArk, AWS KMS)</li><li>
Relevant industry certifications (e.g., CISSP, CISM, Certified Identity and Access Manager)</li><li>
Experience in environments preparing for SOX compliance.</li></ul><h2 class="jobSectionHeader">
What We Offer:</h2><ul><li>
Exceptional health, vision, and dental care</li><li>
Opportunity for equity ownership</li><li>
Life and AD&amp;D, short- and long-term disability</li><li>
Employee Assistance Program</li><li>
Employee Resource Groups</li><li>
Fun company outings and events</li><li>
Unlimited PTO</li><li>
401K with company match</li></ul> 
Compensation Range: $136K - $209K</div>

Identity and Access Management (IAM) Engineer

Datamatics Technologies

<div>
 
 Job Title:
 
 Ping Identity IAM Administrator
 
 
 Experience:
 
 5&ndash;8 Years
 
 
 Location:
 
 Onsite- Riyadh
 
 
 Department:
 
 Information Security / IAM
 
 
 
 
 
 Note: Please share CV as per JD, Read the JD carefully.
 
 
 
 
 
 Job Summary
 
 
 We are seeking an experienced
 
 Ping Identity IAM Administrator
 
 to manage, implement, and optimize identity and access management solutions across enterprise environments. The ideal candidate will have hands-on expertise in Ping Identity suite products and will be responsible for ensuring secure, seamless, and compliant access to organizational systems through advanced authentication and authorization mechanisms.
 
 
 
 Key Responsibilities
 
 
 Identity &amp; Access Management
 
 <ul>
 <li>
 Administer and support centralized identity management, including user lifecycle (onboarding, offboarding, role changes)
 </li>
 <li>
 Maintain a &ldquo;single pane of glass&rdquo; for identity governance and user access visibility
 </li>
 <li>
 Ensure high availability, scalability, and performance of IAM solutions
 </li>
 </ul>
 
 Authentication &amp; Security
 
 <ul>
 <li>
 Implement and manage
 
 Single Sign-On (SSO)
 
 across enterprise applications
 </li>
 <li>
 Design and deploy
 
 Multi-Factor Authentication (MFA)
 
 and passwordless authentication strategies
 </li>
 <li>
 Configure and maintain
 
 adaptive authentication
 
 policies based on risk signals and user behavior
 </li>
 </ul>
 
 Access Control &amp; Governance
 
 <ul>
 <li>
 Define and enforce
 
 policy-based access control
 
 (RBAC/ABAC)
 </li>
 <li>
 Ensure least privilege access principles are applied across systems
 </li>
 <li>
 Manage access certifications, reviews, and approvals
 </li>
 </ul>
 
 Compliance &amp; Auditing
 
 <ul>
 <li>
 Generate and analyze logs, reports, and audit trails for authentication and access activities
 </li>
 <li>
 Support compliance requirements (e.g., regulatory audits, internal security policies)
 </li>
 <li>
 Investigate and respond to identity-related security incidents
 </li>
 </ul>
 
 Orchestration &amp; Automation
 
 <ul>
 <li>
 Design authentication workflows using
 
 no-code/low-code orchestration tools
 
 </li>
 <li>
 Automate identity processes to improve efficiency and reduce manual effort
 
 </li>
 </ul>
 
 Core Technologies / Key Components
 
 <ul>
 <li>
 
 
 PingOne
 
 (Cloud Identity Platform)
 
 </li>
 <li>
 
 
 PingFederate
 
 (Federation &amp; SSO)
 
 </li>
 <li>
 
 
 PingID
 
 (MFA Solution)
 
 </li>
 <li>
 
 
 PingAccess
 
 (Access Management &amp; API Security)
 
 </li>
 <li>
 
 
 PingDirectory
 
 (User Data Store)
 
 </li>
 <li>
 
 
 PingOne DaVinci
 
 (No-code orchestration)
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience
 
 <ul>
 <li>
 5&ndash;8 years of experience in Identity &amp; Access Management (IAM)
 </li>
 <li>
 Strong hands-on experience with
 
 Ping Identity Suite
 
 </li>
 <li>
 Expertise in SSO protocols (SAML, OAuth, OpenID Connect)
 </li>
 <li>
 Experience implementing MFA and passwordless authentication
 </li>
 <li>
 Strong understanding of adaptive/risk-based authentication
 </li>
 <li>
 Familiarity with directory services (LDAP, Active Directory)
 </li>
 <li>
 Experience in access control models (RBAC, ABAC)
 </li>
 <li>
 Knowledge of security best practices and IAM frameworks
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 <ul>
 <li>
 Relevant certifications in IAM or Ping Identity solutions
 </li>
 <li>
 Experience with cloud platforms (AWS, Azure, GCP)
 </li>
 <li>
 Knowledge of API security and Zero Trust architecture
 </li>
 <li>
 Exposure to DevOps and automation tools
 
 </li>
 </ul>
 
 Soft Skills
 
 <ul>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Excellent communication and stakeholder management
 </li>
 <li>
 Ability to work in a fast-paced, collaborative environment
 
 </li>
 </ul>
 
 Key Outcomes
 
 <ul>
 <li>
 Secure and seamless user authentication experience
 </li>
 <li>
 Strong governance and compliance posture
 </li>
 <li>
 Efficient identity lifecycle management
 </li>
 <li>
 Reduced security risks through robust IAM controls
 </li>
 </ul>
</div>

Ping Identity IAM Administrator

Search 10000+ Identity access management architect jobs near you this April. New roles added regularly across leading industries. Apply today.