Identity Architect

Agensys is seeking an experienced Identity Architect to define and guide an enterprise identity architecture that connects authentication, identity governance, privileged access, secrets management, identity security, and multi-cloud identity into a cohesive operating model.

This role will help evolve Identity and Access Management (IAM) from platform-specific activities into an Identity-as-a-Service capability that enables the business while improving security, auditability, and user experience.

Responsibilities:

• Own and maintain the target-state IAM architecture, reference patterns, principles, standards, and technology roadmap.
• Assess current identity capabilities and recommend improvements across Active Directory, Microsoft Entra ID, hybrid identity, cloud identity, authentication, authorization, identity governance, PAM, secrets management, and identity security.
• Design how identity governance, PAM, MFA, secrets management, directories, applications, and security tooling should work together.
• Establish architecture patterns for human identities, service accounts, application identities, workload identities, privileged identities, and other non-human identities.
• Define identity lifecycle, joiner/mover/leaver, access request, access review, role, entitlement, privileged access, and exception management patterns.
• Guide SSO, MFA, Conditional Access, federation, identity proofing, adaptive access, and application integration decisions.
• Evaluate integration approaches using APIs, SCIM, SAML, OAuth 2.0, OpenID Connect, and related protocols.
• Provide architecture guidance for identity across Microsoft Azure and AWS.
• Translate business, security, regulatory, and operational requirements into architecture decisions, detailed requirements, implementation sequencing, and transition plans.
• Review proposed designs and implementations for least privilege, resiliency, supportability, auditability, and alignment with approved standards.
• Partner with IAM leadership, identity engineers, analysts, application teams, cloud teams, security operations, audit, compliance, and organizational change management.
• Use PowerShell, Python, APIs, data exports, or other techniques when platform limitations require alternate solutions or automation.
• Maintain architecture documentation, decision records, data flows, integration diagrams,