AHEAD
Senior Identity Application Architect, CIAM/IAM
$145K–$175K
United States · Remote · Senior · Full-time · Posted Jun 30, 2026
- Experience
- Minimum 7 years in identity and access management, application security, or enterprise architecture; minimum 4 years architecting or leading CIAM and/or IAM implementations.
- Education
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field, or equivalent practical work experience.
About the job
Leads the architecture and evolution of CIAM and IAM solutions for secure customer, partner, and workforce access across cloud and enterprise platforms.
What you'll do
- Define identity architectures, standards, integration patterns, and roadmaps for authentication, authorization, federation, and lifecycle management.
- Guide identity integrations and implementation across applications, APIs, cloud platforms, and enterprise systems; review designs and mentor technical teams.
- Develop an improvement plan for managing Agent and Agentic NHI risks while enabling secure business use.
What they ask for
- At least 7 years of progressive experience in IAM, application security, or enterprise architecture, including identity solution design in complex environments.
- At least 4 years architecting or leading CIAM and/or IAM platform implementations.
- Required certification in a relevant identity or cybersecurity discipline, such as CISSP, CCSP, IDPro, or a listed platform credential or comparable certification.
- Strong expertise in CIAM/IAM architecture and identity standards, including OAuth 2.0, OpenID Connect, SAML, and SCIM.
Pay
USD 145,000–175,000 per-year-salary; OTE (includes base salary and any applicable target bonus amount)
Tools
Okta, Auth0, Microsoft Entra ID, AWS, Azure, Salesforce, ServiceNow, OAuth 2.0
AI focus
Authors an improvement plan for Agent and Agentic NHI risk management and is expected to adopt AI-assisted engineering tools such as Claude, GitHub Copilot, or Cursor.
Model-written summary · the original posting is authoritative