Identity Architect – Enterprise IAM & Cloud Security

Veteran Firm Seeking a Identity Architect Enterprise IAM and Cloud Security for a Hybrid Assignment in Dallas-Fort Worth, TX

My name is Stephen Hrutka. I lead a Veteran-Owned management consulting firm in Washington, DC. We specialize in Technical and Cleared Recruiting for the Department of Defense (DoD), the Intelligence Community (IC), and other advanced defense agencies.

At HRUCKUS, we support fellow Veteran-Owned businesses by helping them recruit for positions across organizations such as the VA, SBA, HHS, DARPA, and other leading-edge R&D-focused defense agencies.

We seek to fill a Identity Architect Enterprise IAM and Cloud Security role in Dallas-Fort Worth, TX

The ideal candidate is a Dallas-Fort Worth resident with 10+ years of progressive IT or cybersecurity experience, 7+ years of hands-on IAM architecture experience, and deep Microsoft identity expertise, alongside nice-to-have experience in electric utilities or critical infrastructure.

If you’re interested, I'll gladly provide more details about the role and further discuss your qualifications.

Thanks,

Stephen M Hrutka

Principal Consultant

www.hruckus.com

Executive Summary: HRUCKUS is looking for an experienced Identity Architect Enterprise IAM and Cloud Security to lead the design and evolution of enterprise identity and access management (IAM) architecture across hybrid infrastructure, cloud platforms, identity governance, privileged access, and security operations.

Position Description: This individual will establish target-state architecture, integration patterns, technical standards, and roadmaps that connect enterprise identity technologies into a cohesive identity-as-a-service operating model. The ideal candidate combines deep Microsoft identity expertise, hands-on IAM architecture, enterprise identity governance, privileged access management, and AWS and Azure cloud identity with strong communication and architectural leadership skills.

Position Responsibilities:

• Own and maintain enterprise IAM target-state architecture, reference patterns, technical standards, and roadmaps.
• Evaluate current identity capabilities across Active Directory, Entra ID, cloud environments, identity governance, PAM, and security platforms.
• Design integration patterns connecting identity governance, authentication, MFA, privileged access, secrets management, directories, and applications.
• Establish architecture standards for human and non-human identities, including service accounts and workload identities.
• Define joiner mover leaver processes, access requests, certifications, role management, entitlements, and exception management.
• Guide SSO, MFA, Conditional Access, federation, adaptive access, and identity proofing architecture.
• Design application integrations using APIs, SCIM, SAML, OAuth 2.0, and OpenID Connect.
• Provide architecture guidance for identity and permissions across AWS and Azure.
• Translate security, business, compliance, and operational requirements into implementation plans and architecture decisions.
• Review proposed solutions for least privilege, resiliency, auditability, and alignment with enterprise standards.
• Partner with IAM leadership, engineers, cloud teams, application owners, security operations, and compliance teams.
• Support automation using PowerShell, Python, APIs, and other integration techniques.
• Maintain architecture diagrams, decision records, data flows, control mappings, and operational standards.
• Guide remediation of orphaned identities, stale access, excessive permissions, service-account ownership gaps, and privileged-access risks.
• Support identity monitoring, threat detection, and security operations integration.

Required Qualifications:

• 10+ years of progressive experience in identity, cybersecurity, infrastructure, or enterprise architecture.
• 7+ years of hands-on IAM architecture or senior engineering experience in a large enterprise.
• Experience designing enterprise-wide identity architectures, standards, roadmaps, and integration patterns
• Strong hands-on experience with Active Directory and Microsoft Entra ID
• Hybrid identity, directory synchronization, authentication, and authorization
• Conditional Access, MFA, SSO, federation, and privileged identity controls
• Experience designing or integrating at least two enterprise IAM platforms.
• Saviynt or SailPoint experience
• CyberArk or comparable PAM platform experience.
• Experience with secrets management and privileged identity controls.
• Strong understanding of identity governance, lifecycle management, access certifications, RBAC, segregation of duties, and least privilege.
• Practical AWS and Azure identity architecture experience.
• Experience with SAML, OAuth 2.0, OpenID Connect, SCIM, APIs, and federation.
• Human, service, application, workload, and privileged identities
• Secrets management and non-human identity governance
• Strong architecture documentation and stakeholder communication skills.
• Ability to work onsite in Dallas-Fort Worth 2 to 3 days per week.

Desired Qualifications:

• Electric utilities or critical infrastructure experience.
• NERC CIP, SOX, or IT General Controls.
• Identity Threat Detection and Response (ITDR).
• Identity Security Posture Management (ISPM).
• Service-account and non-human identity governance.
• Enterprise IAM operating models and governance forums.
• Experience developing identity architecture roadmaps and standards.
• Preferred Certifications: CISSP, CISM, CISA, CRISC, Microsoft Identity Security, Saviynt, SailPoint, CyberArk, AWS, or Azure.

Details:

Job Title: Identity Architect Enterprise IAM and Cloud Security

Location: Dallas-Fort Worth, TX

Salary Range: $80.00 - $95.00 Hourly W-2