About the job

Senior Enterprise Architect – Identity & Access Management (IAM)

Location: [Remote / Hybrid] Department: Enterprise Architecture / Solutions / Product

About OLOID

OLOID is building frictionless, secure passwordless authentication for frontline workers and shared devices. Its platform is designed to modernize cybersecurity and IAM through passwordless login, MFA, onboarding automation, and integrations with SSO, HRIS, and physical access environments.

Role Overview

OLOID is looking for a Senior Enterprise Architect – IAM to lead the design, architecture, and implementation of modern identity solutions for enterprise environments. This is a senior, hands-on role for someone who can work at both the strategic and technical levels—partnering with customers, internal stakeholders, product teams, and engineers while also getting directly involved in IAM configurations, integrations, access policies, and troubleshooting.

The ideal candidate has deep expertise in Identity and Access Management, including SSO, MFA, passwordless authentication, directory services, lifecycle management, federation, access governance, and enterprise IAM platform configuration. This person should be comfortable translating business and security requirements into scalable identity architectures that support secure, seamless access across workforce, application, and device ecosystems.

Key Responsibilities

• Define and drive enterprise IAM architecture for customer and partner environments.
• Design secure, scalable identity solutions covering SSO, MFA, passwordless access, provisioning, deprovisioning, and access governance.
• Lead hands-on configuration and deployment of IAM platforms, policies, connectors, workflows, and federation settings.
• Architect integrations across directories, HR systems, enterprise applications, devices, and access control ecosystems.
• Work closely with Product, Engineering, Security, Customer Success, and enterprise customers to align architecture with business and security goals.
• Create reference architectures, implementation standards, design documentation, and deployment playbooks.
• Guide technical discovery sessions, architecture reviews, workshops, and proof-of-concept activities.
• Troubleshoot complex authentication, authorization, federation, and provisioning issues across production and pre-production environments.
• Drive best practices around Zero Trust, least privilege, identity lifecycle controls, and secure access for enterprise users.
• Mentor technical teams and provide leadership on IAM strategy, design decisions, and implementation quality.

Required Qualifications

• 10+ years of experience in IAM, enterprise architecture, security architecture, or identity engineering.
• Strong hands-on experience configuring and administering enterprise IAM platforms such as Okta, Microsoft Entra ID / Azure AD, Ping Identity, ForgeRock, SailPoint, Saviynt, CyberArk, or similar.
• Deep knowledge of SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, Active Directory, RBAC, ABAC, MFA, and passwordless authentication.
• Proven experience designing and implementing IAM architectures for enterprise-scale environments.
• Strong experience with IAM configuration, including:
• SSO application setup
• federation and trust configuration
• conditional access and policy design
• user provisioning and deprovisioning
• lifecycle workflows
• role and entitlement mapping
• connector and API-based integrations
• Experience integrating IAM with systems such as HRIS, directories, ITSM platforms, endpoint/device platforms, and access management tools.
• Strong troubleshooting skills across authentication flows, certificates, metadata exchange, identity sync, and access-related incidents.
• Experience working directly with enterprise customers, technical stakeholders, and executive leadership.
• Strong communication, documentation, and presentation skills.

Preferred Qualifications

• Experience with passwordless authentication, FIDO2/WebAuthn, biometrics, badge-based authentication, NFC/RFID, or other modern authentication methods.
• Experience supporting environments with shared devices, frontline users, kiosks, tablets, or operational technology use cases.
• Knowledge of identity governance, privileged access management, and compliance-driven access controls.
• Experience building or reviewing API-based identity workflows and automation using Python, PowerShell, or similar tools.
• Familiarity with Zero Trust architecture and security frameworks such as NIST.
• Experience in SaaS, cybersecurity, or high-growth enterprise technology environments. write ma a linkedIn post that promots this job at oloid and Im the lead contact so reach out directly for confidential converation. this is a pivitol role reporting in the key leadership and total ownership of territoty and project/product outcomes.