# Cybersecurity Architect - IAM

Hiring organization: [CAA](https://career.thegoodapps.co/organizations/caa)

Canonical page: https://career.thegoodapps.co/jobs/4a24ed3e-4ab8-49eb-90ce-0f9fcece4bec

Listed on CAA's own careers site. Applications go to them directly.

- Seniority: Senior
- Location: Nashville, TN
- Salary: 179000 – 208000 USD per year

## Summary

This role leads the design and implementation of identity and access management systems across a modern cloud-first environment, protecting user lifecycle and securing API integrations. It suits experienced security architects who enjoy translating complex identity governance challenges into scalable architectures and want hands-on involvement in both strategic design and incident response.

_Our summary, not CAA's wording._

## Skills named

Active Directory, JavaScript, OAuth, Okta, PowerShell, Python, Role-Based Access Control (RBAC), Security Assertion Markup Language (SAML), Single Sign-On (SSO), Splunk, Workday

## Required

- 7+ years in IT with focus on information security
- 3+ years in identity and access management architecture or engineering
- Bachelor's or Master's degree in relevant field
- Experience architecting IAM projects from design through implementation
- Strong communication and presentation skills for technical and non-technical audiences
- Designed and supported Zero Trust Identity architecture
- Understanding of OAuth, SAML and OpenID frameworks
- Knowledge of servers, operating systems, networks, firewalls, cloud applications and infrastructure
- Knowledge of automation and SaaS application integration
- Knowledge of lifecycle management, provisioning and de-provisioning
- Knowledge of MFA and compensating controls
- Knowledge of privilege identity management, privileged access management, just-in-time provisioning and least privilege
- Scripting experience in PowerShell, Python, or JavaScript

## Nice to have

- Cross-team collaboration and vendor management
- Single Sign-On setup and integrations with SaaS vendors
- SCIM integration experience
- Account setup and access management
- Application development and DevSecOps pipeline experience
- REST API building and usage
- Experience creating and supporting identity framework or IDaaS
- Understanding of NIST framework and continuous improvement
- CIAM, CIMP, Okta, SailPoint, Microsoft Identity, Ping Identity, CISSP, CISM or CompTIA Security+ certifications

Apply on CAA's site: https://caa.wd1.myworkdayjobs.com/en-US/Careers/job/Nashville-TN/Cybersecurity-Architect---IAM_JR8896