IAM Implementer / Architect

Job Description Role SummaryWe are seeking a seasoned IAM Implementer / Architect to join a high-impact security and identity initiative. This is a hands-on role for a practitioner who has strong implementation experience and is ready to grow into an architectural leadership capacity. The ideal candidate is comfortable working at both the execution level and the design/strategy level, with deep expertise in Azure Active Directory (Microsoft Entra ID), Okta, AWS IAM, and emerging agentic identity patterns.Must-Have RequirementsAzure Active Directory / Microsoft Entra IDHands-on deployment and configuration experienceAbility to answer architecture-level questions on Azure AD design, federation, and governanceExperience with Conditional Access, PIM, Identity Protection, and Entra ID rolesOkta Identity PlatformProduction deployment and administration experienceNon-Human Identity (NHI) / Machine Identity management via OktaService accounts, API keys, machine-to-machine (M2M) tokens, OAuth client credentials flowLifecycle automation for non-human identitiesAgentic IdentityMust understand what agentic identity is and how to secure AI agents, bots, and automated pipelinesExperience defining identity strategies for agentic workloads (LLM-based agents, RPA bots, etc.)AWS IAMRoles, policies, permission boundaries, SCPs, and IAM best practicesCross-account access, federation with Azure AD / OktaImplementor-to-Architect mindsetWillingness and capability to evolve from hands-on implementation into architectural ownershipAbility to document, present, and defend design decisions to senior stakeholdersKey ResponsibilitiesImplement and configure Azure AD / Microsoft Entra ID solutions including SSO, MFA, SSPR, and RBACDeploy and manage Okta environments, including Workforce Identity and non-human identity (NHI) use casesDesign and implement Okta lifecycle management for machine identities, service accounts, and API credentialsDefine and enforce AWS IAM policies, roles, and permission models aligned to least-privilege principlesArchitect identity solutions for agentic workloads — securing AI agents, automation bots, and service pipelinesLead identity architecture discussions and provide technical guidance to cross-functional teamsPerform IAM assessments, gap analyses, and produce architecture diagrams and documentationCollaborate with security, cloud, and application teams to integrate identity into DevSecOps pipelinesTroubleshoot and resolve identity-related incidents across all IAM platformsStay current with emerging identity standards: SPIFFE/SPIRE, OAuth 2.0, OIDC, SCIM, FIDO2/PasskeysPreferred QualificationsMicrosoft Certified: Identity and Access Administrator Associate (SC-300) or Azure Security Engineer (AZ-500)Okta Certified Professional or Okta Certified AdministratorAWS Certified Security Specialty or Solutions ArchitectExperience with IGA platforms: SailPoint IdentityNow, Saviynt, or Oracle Identity GovernanceFamiliarity with PAM solutions: CyberArk, BeyondTrust, or DelineaExperience implementing Zero Trust Architecture and Identity-centric security modelsExposure to DevSecOps pipelines and IAM as Code (Terraform, Pulumi, ARM/Bicep templates)Prior experience in financial services, healthcare, or regulated industries a plusCalifornia Pay Range$60—$65 USD