# IAM Architect

**Company:** [The Voleon Group](https://hotfix.jobs/companies/voleon)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $280k – $310k/yr
**Experience:** 8+ years
**Skills:** IAM, Oauth2, OIDC, SAML, Ldap, Kerberos, Active Directory, Freeipa, Aws Iam, Azure Ad, Google Cloud Iam, Kubernetes, Zero Trust, Pam
**Posted:** 2026-04-21

> Designs and implements identity and access management strategy for hybrid infrastructure including Linux, Kubernetes, Windows, AWS, and Azure. Leads IAM roadmap, privileged access management, zero-trust extensions, and builds/scales IAM team. Requires 8+ years experience with authentication protocols and cloud IAM platforms.

## Job Description

## Responsibilities
- Design and implement IAM strategy across hybrid infrastructure - Linux, Kubernetes, Windows, AWS, Azure, and cloud identity providers
- Architect identity solutions that bridge POSIX-based authentication with modern cloud platforms (OIDC, SAML, federation), migrating from legacy models
- Implement privileged access management - just-in-time access, least privilege, periodic reviews, and accountability for shared service accounts
- Extend zero-trust capabilities beyond current SASE remote access to broader infrastructure
- Partner cross-functionally with Security Engineering, Infrastructure, DevOps, and Corp IT to integrate identity controls without disrupting production
- Define the IAM roadmap — prioritize high-risk areas, translate business requirements into technical solutions, and establish credibility with senior engineering and research leaders
- Build the IAM team - hire, mentor, and lead IAM engineers as the program scales

## Requirements
- 8+ years of experience in identity and access management, security engineering, or infrastructure engineering with focus on authentication/authorization
- Deep expertise in hybrid identity architectures bridging on-premise (LDAP, FreeIPA, Active Directory) and cloud identity platforms (AWS IAM, Azure AD/Entra, Google Workspace)
- Strong understanding of modern authentication protocols: OIDC, SAML, OAuth2, LDAP, Kerberos
- Hands-on experience implementing identity solutions in Linux-heavy environments with POSIX requirements
- Experience with cloud IAM platforms (AWS IAM / Identity Center, Azure AD, GCP IAM) including roles, policies, federation, and service accounts
- Knowledge of privileged access management (PAM) tools and patterns (CyberArk, HashiCorp Vault, AWS Secrets Manager, or similar)
- Understanding of zero-trust architecture principles and implementation patterns
- Demonstrated ability to balance security requirements with operational workflows and production stability
- Proven track record working with senior technical leaders and building organizational trust
- Strong communication skills to explain complex identity concepts to both technical and non-technical stakeholders
- Experience or strong interest in building and leading technical teams

## Preferred Qualifications
- Experience with Kubernetes service account management and pod identity patterns
- Familiarity with infrastructure-as-code (Terraform, Ansible) for identity provisioning
- Experience implementing SCIM for automated user lifecycle management
- Background in financial services, hedge funds, or high-security research environments
- Experience with compliance frameworks (SOC 2, ISO 27001) as they relate to identity
- Certifications such as CISSP, CCSP, or vendor-specific identity certifications
- Bachelor's or Master's degree in Computer Science, Information Security, or related field

## Similar roles

- [Security Lead, Deployment & Ops](https://hotfix.jobs/jobs/99f06473-45a1-40e6-b95d-02ef06d04d0f) - Fluidstack - New York, NY - $280k – $300k/yr
- [Offensive Security Engineer, Agent Security](https://hotfix.jobs/jobs/fbc78d2b-399e-4d4d-b8b0-5da69ed501fe) - OpenAI - Remote - $278k – $490k/yr
- [Secure Manufacturing & Stealth Investigator](https://hotfix.jobs/jobs/05ab75fb-81b8-4563-91db-4250d329a302) - OpenAI - San Francisco, CA - $288k – $425k/yr
- [Security Preparedness Lead, Coding Agents](https://hotfix.jobs/jobs/691cb3e6-25c4-406b-ae48-7a4dbdd63fe8) - OpenAI - San Francisco, CA - $293k – $405k/yr
- [Systems Software Engineer, Security, First Party Hardware](https://hotfix.jobs/jobs/5aa1f4d4-0fc1-457f-b101-6b328345a43a) - OpenAI - San Francisco, CA - $266k – $445k/yr

**Apply:** https://hotfix.jobs/jobs/c8c90a56-2a9c-42be-942d-6faf5f5e7046
**Canonical:** https://hotfix.jobs/jobs/c8c90a56-2a9c-42be-942d-6faf5f5e7046