Ethos is hiring an IAM Architect - Access Management / CIAM (Remote in the US)

GuidePoint Security is hiring an IAM Architect - Access Management / CIAM to join our implementation team. In this fully remote role, you will design, deploy, administer, and optimize enterprise-grade Identity and Access Management (IAM) solutions with a primary focus on Okta, Ping Identity, and Microsoft Entra ID.

What You'll Do

• Deploy, configure, manage, and support Okta, Auth0, Ping Identity (PingFederate, PingOne, PingOne AIC), and Microsoft Entra ID environments.
• Manage user lifecycle governance including provisioning, deprovisioning, and access certification workflows.
• Implement and oversee Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Adaptive Authentication.
• Ensure adherence to least-privilege and Zero-Trust principles for all user and application identities.
• Support modern IAM capabilities such as Just-in-Time (JIT) access, Conditional Access, API access management, and Customer Identity and Access Management (CIAM).
• Integrate IAM platforms with AD/LDAP, cloud directories, SIEM, SCIM provisioning, SAML/OIDC applications, and cloud services (AWS/Azure/GCP).
• Develop automation for user provisioning, access reviews, and monitoring using PowerShell, Python, or REST APIs.
• Implement access governance policies, role-based access control (RBAC), and attribute-based access control (ABAC).
• Provide strategic oversight across multiple concurrent projects, ensuring alignment with client objectives and timelines.
• Champion projects from an ownership perspective, taking full accountability for successful delivery and client outcomes.
• Foster strong client relationships through technical excellence and a consultative approach.
• Create and maintain technical documentation, implementation guides, and best practice frameworks.
• Provide technical expertise during the presales process to support new business opportunities.
• Develop Level of Effort (LOE) estimates for proposed IAM implementations and contribute to Statement of Work (SOW) development.

What We're Looking For

• Bachelor's degree in Computer Science, Information Security, or related field — or equivalent work experience.
• 3–5+ years of experience in Identity and Access Management engineering or Consulting.
• Hands-on experience with Okta (Universal Directory, Lifecycle Management, Workflows, API Access Management).
• Experience implementing Microsoft Entra ID including Conditional Access, Identity Protection, and Entra Connect.
• Working knowledge of Ping Identity solutions (PingFederate, PingOne, or PingAccess).
• Strong understanding of identity governance, SSO protocols (SAML, OIDC, OAuth), MFA, and access certification.
• Experience with Windows/Linux server administration and Active Directory.
• Familiarity with scripting (PowerShell, Python) and REST APIs.
• Knowledge of common security frameworks and access control principles.

Nice to Have

• 3-5 years of IT Professional services and consulting experience.
• Professional certifications such as Okta Certified Professional/Administrator/Consultant, Microsoft Certified: Identity and Access Administrator Associate, Ping Identity Certified Professional, CISSP, CISM, Security+, CCSP, or similar.
• Exposure to modern IAM capabilities: Passwordless authentication (FIDO2, WebAuthn, passkeys), Decentralized identity and verifiable credentials, Identity threat detection and response (ITDR), API security and OAuth 2.0 / OpenID Connect.

Technical Stack

• Primary Platforms: Okta, Auth0, Ping Identity (PingFederate, PingOne, PingOne AIC), Microsoft Entra ID.
• Infrastructure & Directories: Active Directory/LDAP, AWS, Azure, GCP.
• Protocols & Standards: SAML, OIDC, OAuth, SCIM.
• Tools: PowerShell, Python, REST APIs.
• Security: SIEM.

Team & Environment

You will be part of the Access Management team, partnering with other engineers and architects. Mentorship at all levels is foundational to our culture.

Benefits & Compensation

• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans).
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.

Work Mode

This is a fully remote position for candidates located within the United States.

GuidePoint Security is an equal opportunity employer.