Lead - IAM Platform Architecture & Engineering

Job Description

Are You Ready to Make It Happen at Mondelēz International?

Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.

About this Job 

Mondelez International is hiring a Senior Manager – IAM Platform Lead (Privileged Access & Non-Human Identity Security) 

Location:  Fully remote within the United States

Role Overview 

We are seeking a Senior Manager – Lead IAM Architecture & Engineering to define and lead the identity security architecture across workforce, partner, application, and machine identities. This role establishes the technical foundations for identity trust, authentication, authorization, and access governance across enterprise systems, cloud platforms, SaaS services, and operational technology environments. 

The Principal IAM Architect will design scalable identity trust architectures and access control frameworks that secure enterprise access to applications, infrastructure, APIs, and digital platforms. This role defines identity standards, architecture patterns, and integration frameworks enabling secure access while aligning with Zero Trust security architecture and enterprise cybersecurity strategy. 

The architect partners with IAM platform engineering teams to ensure that authentication services, identity governance, privileged access, and machine identity systems operate as a cohesive identity security fabric across the enterprise. 

Key Responsibilities 

Identity Security Architecture & Trust Frameworks 

• Define and evolve the enterprise identity security architecture and identity trust model. 

• Design identity architectures supporting workforce, external, privileged, and machine identities across hybrid and cloud environments. 

• Establish identity trust boundaries, authentication flows, and authorization models across enterprise systems. 

• Define enterprise identity policy enforcement models supporting Zero Trust access architectures. 

• Design identity federation architectures using SAML, OAuth2, OpenID Connect, and token-based identity frameworks. 

• Define identity trust relationships across enterprise identity providers, SaaS platforms, partner ecosystems, and external identity providers. 

• Establish identity session management, token security, and authentication lifecycle standards. 

• Define enterprise access control models including RBAC, ABAC, and policy-based authorization. 

• Design identity policy enforcement patterns using centralized policy engines and identity-aware access controls. 

• Define access policies supporting risk-based authentication and contextual access controls. 

• Design security architecture for non-human identities including service accounts, application identities, API credentials, and workload identities. 

• Define identity models supporting microservices, containers, APIs, and cloud-native workloads. 

• Reduce enterprise identity attack surface through automated identity lifecycle and least-privilege access controls. 

• Design identity architectures supporting multi-cloud environments, SaaS ecosystems, and modern application platforms. 

• Define architecture supporting B2B partner access and B2C external iden