Principal IAM/PAM Security Architect

Principal IAM/PAM Security Architect

Job Locations

US-Remote

ID

2026-20218

Category

Engineering/IT

Position Type

Full-Time

Overview

The Principal IAM/PAM Security Architect defines and evolves security architecture for identity and privileged access across a large, complex, multi-domain environment spanning Active Directory, Microsoft Entra ID, and Okta, as well as cloud-native identities across AWS, Azure, GCP, and OCI.

This role sets security standards for each identity environment, leads the definition of emerging Agentic Identity standards for AI agents and other non-human identities, defines requirements for and drives implementation of the Delinea PAM platform, and owns secrets governance enterprise-wide - including API keys, OAuth/OATH tokens, service account credentials, and certificates. The architect partners closely with identity, cloud, and application teams to keep controls consistent, auditable, and scalable.

Responsibilities

Identity Architecture and Standards: Define and maintain security architecture and standards across Active Directory, Microsoft Entra ID, Okta, and multi-cloud identity (AWS, Azure, GCP, OCI), covering authentication, authorization, and lifecycle controls.

• Serve as the architectural authority for identity security decisions, aligning platform and cloud teams to enterprise standards across a large, complex identity environment.
• Lead architecture reviews and risk assessments for new identity integrations, platform migrations, and MandA activity.
• Agentic Identity Standards: Define enterprise standards for Agentic Identity - governance, lifecycle, authentication, and authorization for AI agents and other non-human identities, including provisioning, scoped entitlements, and deprovisioning.
• Track the evolving agentic AI and non-human identity landscape and advise leadership on emerging risks, standards, and vendor capabilities.
• Privileged Access Management (Delinea): Define security requirements for and lead enterprise-wide implementation of the Delinea PAM platform (Secret Server, Privilege Manager).
• Design privileged access controls - least privilege, JIT/JEA, session monitoring, credential rotation - across on-premises and cloud environments, and oversee onboarding of privileged accounts and systems.
• Produce audit-ready evidence of PAM controls aligned to frameworks such as SOX, HIPAA, PCI, and ISO 27001.
• Secrets Governance: Own enterprise policy and lifecycle standards for all secrets - API keys, OAuth/OATH tokens, service account credentials, and certificates - including vaulting, rotation, and secure distribution.
• Drive detection and remediation of hardcoded, unmanaged, or leaked secrets across source code, configuration, and CI/CD pipelines.
• Establish metrics and reporting to track secrets governance maturity and compliance across the organization.
• Governance and Collaboration: Participate in and help lead architecture review boards, governance forums, and risk committees for identity and privileged access.
• Maintain reference architectures, standards documentation, and roadmaps for identity, PAM, and secrets governance.
• Advise stakeholders on identity risk and control design for new initiatives, and mentor engineers implementing identity, PAM, and secrets solutions.
• Complete all responsibilities as outlined in the annual performance review and/or goal setting.
• Complete all special projects and other duties as assigned.
• Must be able to perform duties with or without reasonable accommodation.

This job description is intended to describ e the general nature and level of work being performed and is not to be construed as an exhaustive list of responsibilities, duties and skills required. This job... For full info follow application link.

Equal Opportunity Employer/Protected Veterans/Individu ls with Disabilities