IAM Engineering Leader

Senior IAM Platform Engineering Leader

If you are the person people call when identity gets complicated -- when the normal product answer is not enough -- this may be worth a conversation.

Miami-Fort Lauderdale Area | South Florida presence required

Contract-to-Hire | Confidential Search

U.S. Citizen or Green Card holder only | No visa sponsorship

I am supporting a confidential search for a senior, builder-minded identity leader who can help modernize, stabilize, and evolve a complex enterprise identity environment.

This is not an access-governance role.

This is not vendor management.

This is not a “run SailPoint and manage certifications” seat.

The company needs someone who understands identity as a platform: authentication, federation, lifecycle, authorization, privileged access, directories, automation, observability, and controls -- and can help shape how those pieces work together across a large enterprise.

The Need

The IAM Director needs a senior technical partner who can:

• Think across the full identity ecosystem
• Challenge weak architecture before it becomes a production issue
• Guide engineers through complex design and troubleshooting
• Solve problems beyond standard vendor patterns
• Help move IAM from manual, analyst-heavy execution toward durable platform engineering
• Build identity capabilities that are supportable after go-live

The right person has stayed close enough to the work to know how identity actually breaks.

Strong Fit

You may be a strong fit if you have built, modernized, or led engineering work across several of the following:

• Ping, ForgeRock, SiteMinder, or comparable access-management platforms
• Microsoft Entra ID / Azure AD
• Workforce IAM and enterprise directories
• SSO, MFA, federation, SAML, OAuth, OIDC, and SCIM
• Application onboarding and identity integration standards
• REST APIs, schemas, connectors, claims, tokens, and identity correlation
• Joiner, mover, leaver lifecycle automation
• PAM, JIT access, service accounts, privileged automation, and least privilege
• Platform reliability, monitoring, auditability, and operational support
• Identity controls for non-human identities, API clients, service accounts, automation, or AI-enabled workflows

The strongest candidates will have examples of solving identity problems where standard platform configuration, vendor patterns, or “just open a ticket” was not enough.

What You Will Do

• Help shape IAM platform direction and technical priorities
• Partner closely with the IAM Director on architecture, standards, and execution
• Lead through technical judgment, design review, and hands-on problem solving
• Mentor engineers through troubleshooting, implementation, and decision-making
• Improve federation, lifecycle automation, privileged access, and platform reliability
• Establish repeatable application onboarding and integration patterns
• Reduce manual effort, identity risk, and operational friction
• Partner with security, infrastructure, application, HR, compliance, and business teams
• Help the organization prepare for the next wave of identity challenges, including automation, non-human identities, service accounts, and AI-agent access patterns

The Right Background

You do not need to be tied to one product.

What matters is that you understand how identity data, authentication, provisioning, authorization, privileged access, auditability, and controls fit together -- and can guide others through building them correctly.

You may have written code, scripts, connectors, adapters, or integrations earlier in your career.

You may still review code, challenge designs, define standards, troubleshoot failures, or help teams connect identity systems across a complex enterprise.

You may come from an IAM architecture, access management, identity platform engineering, CIAM, federation, or senior IAM engineering background.

This Is Likely Not the Right Role If Your Experience Is Mainly

• SailPoint or Saviynt administration
• Access reviews, certifications, or governance operations
• Vendor-led implementations where you followed an established design
• IAM operations without architecture or engineering depth
• Managing outsourcers or delivery partners
• Narrow SSO work without broader lifecycle and integration experience
• Pure strategy without recent technical implementation ownership
• A people-management role where you are no longer close to technical problem solving

Logistics

• Location: South Florida / Miami-Fort Lauderdale area
• Work arrangement: Remote-to-onsite transition
• Employment type: Contract-to-hire
• Conversion path: Full-time employment
• Level: Flexible for the right senior technical leader
• Work authorization: U.S. Citizen or Green Card holder only; no visa sponsorship

South Florida presence is required. A short transition period may be considered for an exceptional candidate with a credible relocation plan.

Message me directly if your background combines identity platform depth, technical leadership, and the ability to solve beyond the standard playbook.