C
$179,000 – $208,000
Listed on CAA’s own careers site. You apply with them directly — we never stand between you and the employer.
What this role is
This role leads the design and implementation of identity and access management systems across a modern cloud-first environment, protecting user lifecycle and securing API integrations. It suits experienced security architects who enjoy translating complex identity governance challenges into scalable architectures and want hands-on involvement in both strategic design and incident response.
Our summary, not CAA’s wording. The full posting is on their site.
Skills this role names
- Active Directory
- JavaScript
- OAuth
- Okta
- PowerShell
- Python
- Role-Based Access Control (RBAC)
- Security Assertion Markup Language (SAML)
- Single Sign-On (SSO)
- Splunk
- Workday
Log in to see which of these are already on your profile.
What they ask for
Required
- 7+ years in IT with focus on information security
- 3+ years in identity and access management architecture or engineering
- Bachelor's or Master's degree in relevant field
- Experience architecting IAM projects from design through implementation
- Strong communication and presentation skills for technical and non-technical audiences
- Designed and supported Zero Trust Identity architecture
- Understanding of OAuth, SAML and OpenID frameworks
- Knowledge of servers, operating systems, networks, firewalls, cloud applications and infrastructure
- Knowledge of automation and SaaS application integration
- Knowledge of lifecycle management, provisioning and de-provisioning
- Knowledge of MFA and compensating controls
- Knowledge of privilege identity management, privileged access management, just-in-time provisioning and least privilege
- Scripting experience in PowerShell, Python, or JavaScript
Nice to have
- Cross-team collaboration and vendor management
- Single Sign-On setup and integrations with SaaS vendors
- SCIM integration experience
- Account setup and access management
- Application development and DevSecOps pipeline experience
- REST API building and usage
- Experience creating and supporting identity framework or IDaaS
- Understanding of NIST framework and continuous improvement
- CIAM, CIMP, Okta, SailPoint, Microsoft Identity, Ping Identity, CISSP, CISM or CompTIA Security+ certifications