IAM Expert Solution Architect

At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things!  We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation.

We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose:

Honesty, Reliability, Curiosity, Collaboration, and Passion.

About the role and what you'll be doing:

The IAM Solution Architect is a senior role with broad domain expertise responsible for assessing IAM-related needs as they relate to migration and landing zone exits. This role provides end-to-end architecture leadership for IAM integration work in support of large-scale application migrations to AWS, Microsoft Azure, and strategic data centers.

We want all new Associates to succeed in their roles at Ensono. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Required Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply. 

KEY RESPONSIBILITIES

• Stand up an IAM team that accelerates application migrations by delivering standard IAM patterns and implementation across:

  • Authentication and federation

  • Authorization integration

  • Secret management

  • Identity governance and administration

  • Privileged access management (PAM) integration

  • Migration readiness and cutover support for IAM controls

  • Development of accelerators and self-service tools to help in the migration

• Design and govern the technical IAM architecture for migration workloads

• Assess current state IAM landscape and define target state architecture aligned to enterprise standards

• Develop IAM integration patterns that are reusable across multiple application migrations

• Build and deploy common scaffolding services such as logging, monitoring, secrets management, integration services, shared storage, middleware components, and platform utilities

• Ensure these services are production ready, secure, and consumable by application teams

• Document consumption patterns and onboarding procedures

• Define and approve security baselines and minimum compliance standards for IAM controls

• Provide technical guidance and mentorship to IAM Engineers

• Collaborate with infrastructure and platform BAU teams to ensure alignment with enterprise standards

REQUIRED SKILLS & QUALIFICATIONS

• 10+ years of experience in Identity and Access Management

• Deep expertise across IAM domains with hands-on experience in the following platforms:

  • Privileged Access Management: CyberArk (EPV, PSM, PTA, CCP), HashiCorp Vault (secrets engine, dynamic secrets, encryption as a service)

  • Authentication/Identity Providers (IDP): ForgeRock (AM, IDM, DS, IG), RSA (SecurID, Identity Governance & Lifecycle)

  • User Access & Entitlement Management: SailPoint (IdentityIQ, IdentityNow), ESF (Enterprise Security Framework)

• Strong experience with cloud IAM services (AWS IAM, Azure AD/Entra ID, etc.)

• Knowledge of security frameworks and compliance requirements (SOX, GDPR, etc.)

• Experience designing IAM solutions for large-scale enterprise migrations

• Strong understanding of Active Directory, LDAP, SAML, OAuth, OpenID Connect

• Excellent communication skills with ability to translate technical concepts for various audiences

• Experience in financial services or highly regulated industries strongly preferred

• Relevant certifications preferred:

  • CISSP, CISM

  • Cloud certifications (AWS, Azure)

  • CyberArk Certified Delivery Engineer

  • SailPoint Certified IdentityIQ Engineer

Why Ensono?

Ensono is a place to make better happen – for our clients and for your career. You can do great things through innovation or collaboration, by learning or volunteering, or to promote diversity and inclusion. You can do great things for your own health or for a healthier planet. Whatever it means to you to do great things w