Granicus India · 2 months ago
Principal IAM Architect
United States
Full-time
Remote
Senior Level, Lead/Staff
7+ years expGranicus is a company focused on transforming the Govtech industry by building technology that connects governments with their constituents. They are seeking a Principal Identity and Access Management Architect to lead the design and implementation of their enterprise-wide Identity Governance & Access Management program, enhancing lifecycle management and access governance capabilities across global operations.
Computer Software
Responsibilities
Define and own the target-state architecture, roadmap and technical strategy for identity lifecycle management, access governance, and privileged access within the enterprise
Lead the implementation of provisioning/deprovisioning workflows, role and entitlement models (RBAC/ABAC), integration with authoritative sources (HR, contractors), and service accounts
Design and implement identity platforms and toolsets (IGA, PAM, Identity Federation, SSO, SAML/OIDC, SCIM) across cloud (AWS/Azure/GCP) and on-premises environments
Drive identity governance activities including access certification campaigns, orphan account reconciliation, SoD controls, least-privilege enforcement and continuous improvement
Collaborate with security operations, compliance, architecture and DevSecOps teams to embed identity controls, monitor identity risk and ensure audit/regulatory readiness (SOC 2, ISO 27001, FedRAMP, GDPR)
Lead hands-on technical delivery: scripting/APIs/infrastructure as code for identity automation, cloud directory services (Azure AD/Entra ID), Okta/SailPoint/ForgeRock or similar platforms
Serve as subject-matter expert (SME) in identity technologies, keep abreast of trends (Zero Trust, passwordless, CIAM) and translate business needs into identity solutions
Define and lead the architecture, roadmap and strategy for Identity Management, Governance, and Privileged Access
Build or re-engineer identity lifecycle capabilities (on-boarding, off-boarding, provisioning/deprovisioning, access reviews, role/entitlement modelling)
Integrate identity systems across cloud/hybrid/on-premises, including directories (AD/Azure AD/Entra ID), federation (SAML/OIDC/OAuth2), provisioning standards (SCIM), PAM (Privileged Access) tools
Embed identity governance & access review controls (IGA, SoD, least privilege) and support regulatory/compliance frameworks (SOX, PCI, GDPR, NIST, ISO)
Lead technical teams (mentor engineers, lead design reviews) and collaborate with business, security, architecture stakeholders
Automate identity workflows using scripting/APIs
Qualification
Required
Bachelor's degree (Computer Science, Information Security, or related field) or equivalent experience
7-15+ years of experience in IAM, identity engineering, security engineering; some years in leading/architecting, ideally with a global organization
Hands-on expertise with identity platforms (Okta, SailPoint, ForgeRock, Azure AD/Entra ID, CyberArk, etc) + protocols (SAML, OIDC, OAuth2, SCIM, LDAP)
Proven experience building or transforming identity programs (lifecycle, governance, privileged access) from the ground up or major re-architectures
Experience with hybrid cloud/on-premises identity, multi-cloud (AWS/Azure/GCP) environments
Strong scripting/automation skills (PowerShell, Python, APIs)
Excellent written and verbal communication skills
Ability to demonstrate cross-functional leadership across all levels
AI Enablement to enhance speed, automation, and transformation
Demonstrated ability to integrate, implement, or work with AI technologies, tools, or frameworks
Experience using AI tools (e.g., GitHub Copilot, etc.,) to improve development productivity
Stay updated on emerging trends in AI and actively integrate relevant tools or practices into workflows
Benefits
Paid Time Off– Take the time you need to rest, recharge, and live your life.
Company-Wide Wellbeing Days – Paid days off to unplug and focus on your mental health.
Work From Home Reimbursement – Support a productive home office environment.
Private healthcare benefits - Comprehensive coverage for you and your family.
On-Demand Mental Health Support – Access to Headspace and other wellness tools.
Fitness Reimbursement & Cycle Program – Stay active, your way.
Critical Illness and Life Insurance Benefits
Paid Parental Leave - For both birthing and non-birthing parents.
Pension plan with employer contributions
Online Learning Platforms – Fuel your professional development.
Competitive Salary & Bonuses – Your contributions are valued and rewarded.
Company
Granicus India
1001-5000 employees
Funding
Current Stage
Late StageCompany data provided by crunchbase