We are Generac, a leading energy technology company committed to powering a smarter world.

Over the 60 plus years of Generac’s history, we’ve been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.

The Identity & Access Management (IAM) Principal Architect leads the strategic design and implementation of our enterprise identity solutions, drives the consolidation of fragmented Identity Providers (IdPs) into Microsoft Entra ID, ensuring a unified, secure, and scalable identity framework aligned with Zero Trust principles. Focuses on rightsizing authentication and authorization processes to enhance security while optimizing user access and experience.

A key responsibility is architecting and supporting the migration to a Single Identity model across the company’s Customer Identity and Access Management (CIAM) platforms, empowering our Digital Business Office and delivering a seamless, secure, and unified digital identity experience. The IAM Principal Architect ensures compliance with industry standards such as NIST, ISO 27001, and other relevant security frameworks.

You will work closely with security teams, IT leadership, business stakeholders, and external vendors to design and implement scalable IAM solutions that align with organizational goals and regulatory requirements.

Major Responsibilities

Strategy & Architecture

• Define and execute the enterprise IAM strategy, including consolidating fragmented Identity Providers (IdPs) into Microsoft Entra ID.

• Architect and implement a unified identity framework that supports Zero Trust principles, ensuring secure and scalable authentication and authorization.

• Develop IAM roadmaps, policies, and governance models aligned with business objectives, security best practices, and regulatory compliance.

• Drive the adoption of cloud identity security solutions, ensuring seamless integration with hybrid and multi-cloud environments.

Implementation & Operations

• Lead the design, deployment, and management of IAM solutions, including Entra ID, Okta, Auth0, Active Directory, and Privileged Access Management (PAM) platforms.

• Support the migration to a Single Identity framework within Customer Identity and Access Management (CIAM) platforms to enhance digital transformation and user experience.

• Implement IAM automation, AI-driven identity governance, and self-service capabilities to streamline identity lifecycle management.

• Develop and enhance federated identity solutions, adaptive authentication, and multi-factor authentication (MFA) strategies.

Security & Compliance

• Ensure IAM security policies and solutions comply with industry standards such as NIST, ISO 27001, SOC 2, GDPR, and other required frameworks.

• Implement role-based access control (RBAC), least privilege access (LPA), just-in-time (JIT) access, and adaptive authentication strategies.

• Enhance privileged access security through PAM solutions, reducing attack surfaces and securing access to critical infrastructure.

• Integrate identity threat detection and response (ITDR) capabilities to protect against compromised credentials and insider threats.

Collaboration & Leadership

• Partner with security, IT, and business teams to align IAM initiatives with organizational goals and risk management strategies.

• Provide technical leadership, mentorship, and guidance to IAM teams and stakeholders.

• Engage with external vendors, industry leaders, and security communities to stay ahead of emerging IAM threats and best practices.

• Drive continuous improvement and innovation in IAM processes, ensuring the adoption of next-gen identity security solutions.

Minimum Job Requirements

Education

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.

Certification / License

• CISSP

Work Experience

• 6+ years of experience in Identity and Access Management, or in Cybersecurity with heavy emphasis in IAM processes and/or controls.

Knowledge / Skills / Abilities

• Deep expertise in Identity & Access Management (IAM) architecture, Zero Trust principles, and identity governance frameworks.

• Strong understanding of authentication and authorization mechanisms, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Adaptiv