Identity And Access Management Iam Jobs
Identity And Access Management Iam jobs are open across financial services, healthcare, government contracting, and enterprise technology, from analyst to architect and director, with specializations in privileged access management, identity governance, and zero-trust implementation. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 73+ Identity And Access Management Iam jobs
Qualifications
- 8+ years in information security, with 4+ years in an architecture or senior engineering role
- Deep expertise in Zero Trust frameworks (NIST SP 800-207, BeyondCorp) and identity-centric security
- Strong understanding of threat modeling methodologies (STRIDE, PASTA, ATT&CK)
- Hands-on experience with enterprise IAM platforms — Microsoft Entra ID, Okta, Ping Identity, or equivalent
- Strong grasp of federation protocols: SAML 2.0, OIDC, OAuth 2.0, SCIM
- Experience with PAM platforms (CyberArk, BeyondTrust, Delinea) and secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
- Familiarity with CIEM tooling and cloud IAM governance across at least two major cloud platforms
- Experience designing and governing identity lifecycle and IGA processes (SailPoint, Saviynt, or equivalent a plus)
- Strong understanding of threat modelling methodologies (STRIDE, ATT&CK) and their application to identity attack surfaces
- Excellent communication skills — able to translate complex architecture into clear guidance for engineers, business stakeholders, and executives
- Provan experience using diplomacy skills
- Certifications (preferred):CISSP, SABSA, TOGAF, Microsoft SC-100, Okta Certified Architect, or equivalent
Certain states and localities require employers to post a reasonable estimate of the salary range. A reasonable estimate of the current base pay range for this position is $150,400 to $188,000 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that are not included in the base pay.
The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:
- Health and Wellbeing:Health, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program
- Financial Benefits:Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement
- Paid Time Off: PTO and Sick Leave (starting at 20 days per year) & Holidays (10 per year), Parental Leave, Military Leave, Bereavement
- Additional Perks:Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program
We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT remains a great place to work for All!
If you have any questions or concerns about this posting, please email taposting@wwt.com.
Requirements:
Why WWT?
At World Wide Technology, we work together to make a new world happen. Our important work benefits our clients and partners as much as it does our people and communities across the globe. WWT is dedicated to achieving its mission of creating a profitable growth company that is also a Great Place to Work for All. We achieve this through our world-class culture, generous benefits, and by delivering cutting-edge technology solutions for our clients.
Founded in 1990, WWT is a global technology solutions provider leading the AI and Digital Revolution. WWT combines the power of strategy, execution, and partnership to accelerate digital transformational outcomes for organizations around the globe. Through its Advanced Technology Center, a collaborative ecosystem of the world's most advanced hardware and software solutions, WWT helps clients and partners conceptualize, test, and validate innovative technology solutions for the best business outcomes and then deploys them at scale through its global warehousing, distribution, and integration capabilities.
With over 12,000 employees across WWT and Softchoice and more than 60 locations around the world, WWT's culture, built on a set of core values and established leadership philosophies, has been recognized 14 years in a row by Fortune and Great Place to Work® for its unique blend of determination, innovation, and creating a great place to work for all.
What is the Internal WWT IT Team, and why join?
The Internal WWT IT team is the backbone of our company's technological infrastructure, ensuring seamless operations and continuous innovation. Our team is dedicated to managing and supporting the company's technology infrastructure, ensuring the smooth operation of hardware, software, networks, and data systems, while providing top-notch technical support to employees.
By joining the Internal WWT IT team, you will play a crucial role in maintaining the efficiency and security of our IT environment, enabling the company to achieve its strategic goals. The Internal IT team offers the opportunity to work in a dynamic and collaborative environment, where your contributions will have a direct impact on the company's success. If you are passionate about technology and eager to take on new challenges, we encourage you to apply and join our team.
Role Summary
WWT Information Security is looking for a Principal Cybersecurity Architect to own the enterprise security architecture across identity, access management, and Zero Trust. This is a senior individual contributor role with significant influence over how people, machines, and workloads authenticate, authorize, and access resources across our environment.
Responsibilities
- Partner with IT, infrastructure, and business stakeholders to integrate security into technology decisions
- Mentor and guide security engineers on architecture standards and design decisions
Zero Trust Architecture
- Design and mature a Zero Trust architecture (ZTNA, MFA, PAM) spanning identity, device trust, network access, and application security — grounded in NIST SP 800-207 and BeyondCorp principles.
- Define reference architectures, security patterns, and guardrails consumed across engineering and infrastructure teams
- Lead threat modeling and security architecture reviews for major platform changes and initiatives
- Evaluate and select security tooling (SASE, SSE, ZTNA, NDR, EDR) aligned to the overall architecture strategy
- Drive continuous improvement of Zero Trust posture through gap assessments and maturity modelling
Identity & Access Management (IAM)
- Own the enterprise IAM architecture — covering workforce identity, B2B federation, machine identities, and cloud entitlements
- Design and govern identity lifecycle management: provisioning, role assignment, access reviews, and deprovisioning — ensuring least privilege is enforced by default and not by exception
- Architect federation and SSO standards across the enterprise: SAML 2.0, OIDC, OAuth 2.0 — including integrations with third-party SaaS, partner tenants, and customer-facing portals
- Define authentication assurance levels by resource sensitivity, aligning MFA requirements to NIST AAL2/AAL3 — with a clear roadmap toward phishing-resistant MFA (FIDO2/WebAuthn) for privileged and high-risk access
- Lead the PAM architecture — credential vaulting, just-in-time privilege, session recording, and endpoint privilege management — in partnership with the security operations team
- Govern cloud entitlements across AWS, Azure, and GCP through a CIEM framework: identify over-permissioned roles, enforce least privilege for service principals and IAM roles, and manage cross-account trust relationships
- Establish and maintain a non-human identity strategy: service accounts, API keys, application credentials, and pipeline secrets — eliminating hardcoded credentials and enforcing dynamic secrets via a secrets management platform
- Drive identity governance processes: access certification campaigns, segregation of duties (SoD) controls, and role-based access control (RBAC) model design
- Partner with HR, IT, and business application owners to ensure joiner/mover/leaver processes are automated and auditable
Governance & Stakeholder Engagement
- Define security architecture standards, policies, and exception management processes
- Mentor security engineers and serve as the escalation point for complex identity and access design decisions
- Produce architecture artefacts — threat models, data flow diagrams, trust zone maps — suitable for both technical and executive audiences
- Contribute to the security roadmap and annual planning, translating risk priorities into architectural investments
Qualifications
- 8+ years in information security, with 4+ years in an architecture or senior engineering role
- Deep expertise in Zero Trust frameworks (NIST SP 800-207, BeyondCorp) and identity-centric security
- Strong understanding of threat modeling methodologies (STRIDE, PASTA, ATT&CK)
- Hands-on experience with enterprise IAM platforms — Microsoft Entra ID, Okta, Ping Identity, or equivalent
- Strong grasp of federation protocols: SAML 2.0, OIDC, OAuth 2.0, SCIM
- Experience with PAM platforms (CyberArk, BeyondTrust, Delinea) and secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
- Familiarity with CIEM tooling and cloud IAM governance across at least two major cloud platforms
- Experience designing and governing identity lifecycle and IGA processes (SailPoint, Saviynt, or equivalent a plus)
- Strong understanding of threat modelling methodologies (STRIDE, ATT&CK) and their application to identity attack surfaces
- Excellent communication skills — able to translate complex architecture into clear guidance for engineers, business stakeholders, and executives
- Provan experience using diplomacy skills
- Certifications (preferred):CISSP, SABSA, TOGAF, Microsoft SC-100, Okta Certified Architect, or equivalent
Certain states and localities require employers to post a reasonable estimate of the salary range. A reasonable estimate of the current base pay range for this position is $150,400 to $188,000 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that are not included in the base pay.
The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:
- Health and Wellbeing:Health, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program
- Financial Benefits:Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement
- Paid Time Off: PTO and Sick Leave (starting at 20 days per year) & Holidays (10 per year), Parental Leave, Military Leave, Bereavement
- Additional Perks:Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program
We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT remains a great place to work for All!
If you have any questions or concerns about this posting, please email taposting@wwt.com.
Requirements:
Why WWT?
At World Wide Technology, we work together to make a new world happen. Our important work benefits our clients and partners as much as it does our people and communities across the globe. WWT is dedicated to achieving its mission of creating a profitable growth company that is also a Great Place to Work for All. We achieve this through our world-class culture, generous benefits, and by delivering cutting-edge technology solutions for our clients.
Founded in 1990, WWT is a global technology solutions provider leading the AI and Digital Revolution. WWT combines the power of strategy, execution, and partnership to accelerate digital transformational outcomes for organizations around the globe. Through its Advanced Technology Center, a collaborative ecosystem of the world's most advanced hardware and software solutions, WWT helps clients and partners conceptualize, test, and validate innovative technology solutions for the best business outcomes and then deploys them at scale through its global warehousing, distribution, and integration capabilities.
With over 12,000 employees across WWT and Softchoice and more than 60 locations around the world, WWT's culture, built on a set of core values and established leadership philosophies, has been recognized 14 years in a row by Fortune and Great Place to Work® for its unique blend of determination, innovation, and creating a great place to work for all.
What is the Internal WWT IT Team, and why join?
The Internal WWT IT team is the backbone of our company's technological infrastructure, ensuring seamless operations and continuous innovation. Our team is dedicated to managing and supporting the company's technology infrastructure, ensuring the smooth operation of hardware, software, networks, and data systems, while providing top-notch technical support to employees.
By joining the Internal WWT IT team, you will play a crucial role in maintaining the efficiency and security of our IT environment, enabling the company to achieve its strategic goals. The Internal IT team offers the opportunity to work in a dynamic and collaborative environment, where your contributions will have a direct impact on the company's success. If you are passionate about technology and eager to take on new challenges, we encourage you to apply and join our team.
Role Summary
WWT Information Security is looking for a Principal Cybersecurity Architect to own the enterprise security architecture across identity, access management, and Zero Trust. This is a senior individual contributor role with significant influence over how people, machines, and workloads authenticate, authorize, and access resources across our environment.
Responsibilities
- Partner with IT, infrastructure, and business stakeholders to integrate security into technology decisions
- Mentor and guide security engineers on architecture standards and design decisions
Zero Trust Architecture
- Design and mature a Zero Trust architecture (ZTNA, MFA, PAM) spanning identity, device trust, network access, and application security — grounded in NIST SP 800-207 and BeyondCorp principles.
- Define reference architectures, security patterns, and guardrails consumed across engineering and infrastructure teams
- Lead threat modeling and security architecture reviews for major platform changes and initiatives
- Evaluate and select security tooling (SASE, SSE, ZTNA, NDR, EDR) aligned to the overall architecture strategy
- Drive continuous improvement of Zero Trust posture through gap assessments and maturity modelling
Identity & Access Management (IAM)
- Own the enterprise IAM architecture — covering workforce identity, B2B federation, machine identities, and cloud entitlements
- Design and govern identity lifecycle management: provisioning, role assignment, access reviews, and deprovisioning — ensuring least privilege is enforced by default and not by exception
- Architect federation and SSO standards across the enterprise: SAML 2.0, OIDC, OAuth 2.0 — including integrations with third-party SaaS, partner tenants, and customer-facing portals
- Define authentication assurance levels by resource sensitivity, aligning MFA requirements to NIST AAL2/AAL3 — with a clear roadmap toward phishing-resistant MFA (FIDO2/WebAuthn) for privileged and high-risk access
- Lead the PAM architecture — credential vaulting, just-in-time privilege, session recording, and endpoint privilege management — in partnership with the security operations team
- Govern cloud entitlements across AWS, Azure, and GCP through a CIEM framework: identify over-permissioned roles, enforce least privilege for service principals and IAM roles, and manage cross-account trust relationships
- Establish and maintain a non-human identity strategy: service accounts, API keys, application credentials, and pipeline secrets — eliminating hardcoded credentials and enforcing dynamic secrets via a secrets management platform
- Drive identity governance processes: access certification campaigns, segregation of duties (SoD) controls, and role-based access control (RBAC) model design
- Partner with HR, IT, and business application owners to ensure joiner/mover/leaver processes are automated and auditable
Governance & Stakeholder Engagement
- Define security architecture standards, policies, and exception management processes
- Mentor security engineers and serve as the escalation point for complex identity and access design decisions
- Produce architecture artefacts — threat models, data flow diagrams, trust zone maps — suitable for both technical and executive audiences
- Contribute to the security roadmap and annual planning, translating risk priorities into architectural investments
Identity And Access Management Iam Jobs by Experience Level
See All 73 Identity And Access Management Iam Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsIdentity And Access Management Iam Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software14
- Investment & Asset Management4
- Banking & Financial Services3
- E-Commerce & Online Marketplaces3
- Retail2
What Employers Look For
The qualifications that appear most often in identity and access management iam jobs.
- Experience with identity governance platforms such as SailPoint, Saviynt, or CyberArk
- Proficiency with directory services including Active Directory and Azure Active Directory
- Familiarity with single sign-on and multi-factor authentication protocols like SAML, OAuth, and OIDC
- Knowledge of least-privilege access principles and role-based access control design
- Experience supporting compliance frameworks such as SOX, HIPAA, FedRAMP, or PCI-DSS
- Bachelor's degree in computer science, information security, or a related technical field
Tips for Your Identity And Access Management Iam Job Search
Certify your IAM credentials before applying
Certifications like CISSP, CIAM, or vendor-specific credentials from CyberArk, SailPoint, or Okta signal hands-on platform experience. Listings at senior levels almost always expect at least one. Add them to your resume header so recruiters see them immediately.
Quantify directory and policy work concretely
Replace vague bullets like 'managed Active Directory' with specifics: how many accounts you governed, what access review cycles you ran, or how many role definitions you cleaned up. Hiring managers for identity roles read between vague lines and downgrade candidates who leave numbers out.
Apply early to roles that fit
Migrate Mate lists identity and access management iam openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter openings by compliance framework exposure
Many identity and access management iam postings are tied to SOX, HIPAA, FedRAMP, or PCI-DSS requirements. Match your application to the compliance environment the employer operates in. Tailoring your resume to the right framework increases relevance and moves you past the initial screen.
Prepare for technical whiteboard scenarios
Interviewers routinely ask you to diagram an access provisioning workflow or describe how you'd handle a privileged account compromise. Practice drawing out authentication flows, least-privilege models, and role-based access control structures before your interview, not during it.
Negotiate scope alongside title and pay
In IAM roles, the systems you own matter as much as compensation. Ask during offer discussions whether the role covers cloud identity, on-premises directory, or both, and whether you'll have authority to deprecate legacy access models. Scope directly shapes your career trajectory from here.
Identity And Access Management Iam Jobs: Frequently Asked Questions
Which companies are hiring the most identity and access management iams?
The companies hiring the most identity and access management iams right now include Amazon Web Services, LPL Financial, and Databricks, with the largest share of openings in California, Washington, and Texas, based on current listings on Migrate Mate as of July 2026. Financial services firms, defense contractors, and large healthcare systems consistently account for the highest volume of postings.
How many identity and access management iam jobs are remote?
About 51% of identity and access management iam openings are fully remote or hybrid as of July 2026, reflecting strong employer flexibility for experienced candidates. Cloud identity engineering and identity governance analyst roles tend to have the highest remote availability, while roles tied to on-premises infrastructure or government clearances are more likely to require onsite presence.
How do you become a identity and access management iam?
Start by building foundational knowledge in directory services, networking, and cybersecurity principles through coursework or self-study. Earn a vendor-neutral certification such as CompTIA Security+ or an IAM-specific credential, then gain hands-on experience administering Active Directory or a cloud identity platform. Progressing to a dedicated IAM role typically follows a stint in IT support, systems administration, or a security operations role where you handle access requests and provisioning regularly.
Can you get an identity and access management iam job with little or no experience?
Entry-level identity and access management iam roles exist, usually titled access analyst, IT security analyst, or identity operations associate, and they prioritize candidates who can demonstrate hands-on lab work with Active Directory or a cloud directory tool. Building a home lab, completing a SailPoint or Okta developer trial, and documenting what you built gives hiring managers something concrete to evaluate even when professional experience is limited.
What does the identity and access management iam interview process look like?
The process typically starts with a recruiter screen focused on your platform experience and background in compliance-driven environments. A technical interview follows, where you walk through access provisioning workflows, explain how you'd handle a role explosion problem, or describe your approach to certifying privileged accounts. Final rounds usually involve a conversation with the security or IT leadership team about how identity governance fits into the broader security program.
Where can I find and apply to identity and access management iam jobs?
You can find and apply to identity and access management iam jobs on Migrate Mate, which lists current openings from across the United States. Search the listings to find roles that match your platform experience, seniority level, and preferred work arrangement, then apply directly to each one that fits.
See All 73 Identity And Access Management Iam Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs