Identity and Access Management Architect

4 days ago

Atlanta, GA, United States Acrisure LLC Full time
About Acrisure

A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services - and more.

In the last twelve years, Acrisure has grown in revenue from $38 million to almost $5 billion and employs over 19,000 colleagues in more than 20 countries. Acrisure was built on entrepreneurial spirit. Prioritizing leadership, accountability, and collaboration, we equip our teams to work at the highest levels possible.

Job Summary:

We are seeking an experienced Identity and Access Management Architect to join our IAM initiatives within the Zero Trust Security framework. The ideal candidate will have a strong understanding of IAM principles, identity governance, automation, access controls and IAM tools. This role requires hands-on experience with Identity Governance and Administration (IGA) platforms, Privilege Access Management (PAM) solutions, Zero Trust Architecture, identity federation, RBAC, Just-In-Time Access, SOX compliance, and scripting/automation for process efficiency and security enhancements.

Responsibilities:
  • Design, implement, and support IAM solutions with a focus on Identity Governance and Administration (IGA).
  • Support PAM program to administer, control, and monitor privileged access.
  • Ownership of defining and maintaining the enterprise-wide IAM architecture and roadmap, ensuring alignment with Zero Trust and broader security strategy.
  • Responsibility for leading IAM governance and policy development, including access standards, SoD enforcement, and role design frameworks.
  • Configure, implement, and support IGA platforms (e.g., Veza, SailPoint, Saviynt) for lifecycle management, access reviews, and role-based access controls.
  • Develop/evaluate/optimize scripts (e.g., PowerShell, Python, Bash, Rest API, MS Graph, Docker CLI) to automate user provisioning, de-provisioning, job mover, reporting tasks, and other identity related activities.
  • Experience designing advanced authentication and access models (passwordless, adaptive access, FIDO2/WebAuthn).
  • Mentor and guide IAM engineers and project teams, providing architectural oversight and technical leadership.
  • Define IAM metrics, reporting, and KPIs to measure access risk, compliance, and operational performance.
  • Integrate IAM systems with HR, ITSM, directory services (e.g., Active Directory, LDAP), and cloud platforms (e.g., AWS, Azure AD).
  • Collaborate with security, compliance, and application teams to align IAM strategies with business needs.
  • Maintain documentation, runbooks, and system diagrams for IAM processes and tools.
  • Stay current with IAM trends, tools, and security threats.
Requirements
  • Strong knowledge of Zero Trust security principles and frameworks.
  • Familiarity with IAM technologies (e.g., Identity Governance, Single Sign-On, Multi-Factor Authentication, PAM, etc.).
  • In-depth knowledge of protocols like SAML, OAuth 2.0, OIDC, LDAP, and SCIM.
  • Proficient in scripting languages such as PowerShell, Python, or Bash for automation tasks.
  • Strong analytical skills for proactive problem solving with minimal oversight or direction.
  • Excellent communication skills, with the ability to articulate complex security concepts to both technical and non-technical stakeholders.
Education and Experience:
  • 7+ years of hands-on experience in Identity and Access Management with 3+ years in a senior architecture role.
  • Experience with compliance standards such as NYDFS, SOX, HIPAA, and NIST.
  • Experience in designing and implementing cloud IAM services (e.g., AWS IAM, Azure AD).
  • Relevant certifications such as CISSP, CISM, or vendor-specific IAM certs (e.g., SailPoint Certified IdentityNow Engineer, CyberArk Defender).
#LI-CH1

Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership.

Why Join Us:

At Acrisure, we're building more than a business, we're building a community where people can grow, thrive, and make an impact. Our benefits are designed to support every dimension of your life, from your health and finances to your family and future.

Making a lasting impact on the communities it serves, Acrisure has pledged more than $22 million through its partnerships with Corewell Health Helen DeVos Children's Hospital in Grand Rapids, Michigan, UPMC Children's Hospital in Pittsburgh, Pennsylvania and Blythedale Children's Hospital in Valhalla, New York.

Employee Benefits

We also offer our employees a comprehensive suite of benefits and perks, including:
  • Physical Wellness: Comprehensive medical insurance, dental insurance, and vision insurance; life and disability insurance; fertility benefits; wellness resources; and paid sick time.
  • Mental Wellness: Generous paid time off and holidays; Employee Assistance Program (EAP); and a complimentary Calm app subscription.
  • Financial Wellness: Immediate vesting in a 401(k) plan; Health Savings Account (HSA) and Flexible Spending Account (FSA) options; commuter benefits; and employee discount programs.
  • Family Care: Paid maternity leave and paid paternity leave (including for adoptive parents); legal plan options; and pet insurance coverage.
  • ... and so much more

This list is not exhaustive of all available benefits. Eligibility and waiting periods may apply to certain offerings. Benefits may vary based on subsidiary entity and geographic location.

Acrisure is an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, religion, sex, national origin, disability, or protected veteran status. Applicants may request reasonable accommodation by contacting leaves@acrisure.com.

California Residents: Learn more about our privacy practices for applicants by visiting the Acrisure California Applicant Privacy Policy.

Recruitment Fraud: Please visit here to learn more about our Recruitment Fraud Notice.

Welcome, your new opportunity awaits you.

  • Customer Identity

    1 week ago

    Atlanta, GA, United States IHG Hotels & Resorts Full time

    Job DescriptionRole Summary: IHG is seeking an experienced CIAM (Customer Identity & Access Management) Technical Advisor to play a key role in securing guest identity and preventing fraud within the CIAM landscape. This role focuses on advising strategy, security, and implementation of CIAM solutions, ensuring compliance with industry standards, and...

  • Customer Identity

    2 weeks ago

    Atlanta, GA, United States IHG Full time

    Role Summary: IHG is seeking an experienced CIAM (Customer Identity & Access Management) Technical Advisor to play a key role in securing guest identity and preventing fraud within the CIAM landscape. This role focuses on advising strategy, security, and implementation of CIAM solutions, ensuring compliance with industry standards, and enhancing fraud...

  • Manager, Cybersecurity

    51 minutes ago

    Atlanta, GA, United States KPMG Full time

    KPMG Advisory practice is currently our fastest growing practice. We are seeing tremendous client demand, and looking forward we do not anticipate that slowing down. In this ever-changing market environment, our professionals must be adaptable and thrive in a collaborative, team-driven culture. At KPMG, our people are our number one priority. With a wealth...

  • Senior Specialist, Identity and Access Management Engineer

    2 weeks ago

    Atlanta, GA, United States KPMG US Full time

    Senior Specialist, Identity and Access Management Engineer (Saviynt) 2 weeks ago Be among the first 25 applicants Get AI-powered advice on this job and more exclusive features. KPMG Advisory practice is currently our fastest growing practice. We are seeing tremendous client demand, and looking forward we do not anticipate that slowing down. In this...

  • Microsoft Identity and Security Architect

    2 weeks ago

    Atlanta, GA, United States Quisitive Full time

    Passionate team members, challenging projects and a great place to work! This is what you can expect if you join the Quisitive team. Founded in 2016, Quisitive is a global Microsoft services and solutions partner. We are a team of professionals with a strong reputation for successfully delivering award-winning Microsoft solutions, including being named...

  • Microsoft Identity and Security Architect

    6 days ago

    Atlanta, GA, United States Quisitive Full time

    Passionate team members, challenging projects and a great place to work! This is what you can expect if you join the Quisitive team. Founded in 2016, Quisitive is a global Microsoft services and solutions partner. We are a team of professionals with a strong reputation for successfully delivering award-winning Microsoft solutions, including being named...

  • Microsoft Identity and Security Architect

    6 days ago

    Atlanta, GA, United States Quisitive Full time

    Passionate team members, challenging projects and a great place to work! This is what you can expect if you join the Quisitive team. Founded in 2016, Quisitive is a global Microsoft services and solutions partner. We are a team of professionals with a strong reputation for successfully delivering award-winning Microsoft solutions, including being named...

  • Microsoft Identity and Security Architect

    2 weeks ago

    Atlanta, GA, United States Quisitive Full time

    Passionate team members, challenging projects and a great place to work! This is what you can expect if you join the Quisitive team. Founded in 2016, Quisitive is a global Microsoft services and solutions partner. We are a team of professionals with a strong reputation for successfully delivering award-winning Microsoft solutions, including being named...

  • Senior Consultant- Identity Access Management

    2 weeks ago

    Atlanta, GA, United States Slalom Full time

    Overview Senior Consultant - Identity Access Management (IAM). We are seeking a Senior IAM Consultant with deep expertise in Identity Governance & Administration (IGA) solutionsprimarily SailPoint and/or Saviynt. This role will partner with clients to design, implement, and optimize enterprise identity programs that balance security, compliance, and user...

  • Senior Consultant- Identity Access Management

    2 weeks ago

    Atlanta, GA, United States Slalom Full time

    Overview Senior Consultant - Identity Access Management (IAM). We are seeking a Senior IAM Consultant with deep expertise in Identity Governance & Administration (IGA) solutionsprimarily SailPoint and/or Saviynt. This role will partner with clients to design, implement, and optimize enterprise identity programs that balance security, compliance, and user...