Cybersecurity Architect - IAM

Location: Based in the Nashville, Tennessee office

Annual base salary: $179,000–$208,000, plus benefits and a discretionary bonus.

Company

Global entertainment and sports agency operating across filmed and live entertainment, digital media, publishing, sponsorships, sports, fashion, licensing, and philanthropy.

What you will do

• Design and develop identity and access management capabilities, reference architectures, standards, and secure design principles.
• Maintain IAM architectural diagrams, workflows, lifecycle processes, governance models, audit controls, and documentation.
• Integrate cloud and on-premise applications, SaaS platforms, directories, and third-party services with the IAM platform.
• Design identity governance workflows covering provisioning, de-provisioning, access requests, entitlements, attestations, auditing, reporting, and self-service.
• Design RESTful identity APIs to provide Identity as a Service to downstream services and directory owners.
• Support security incident response by identifying and mitigating information security threats.

Requirements

• Minimum 7 years of experience in information technology, ideally focused on information security.
• Minimum 3 years of experience in IAM architecture or engineering, including projects from design through implementation.
• Bachelor’s or Master’s degree in a relevant field.
• Experience designing and supporting Zero Trust identity architectures.
• Understanding of OAuth, SAML, OpenID, MFA, privileged access management, least privilege, just-in-time provisioning, and identity lifecycle management.
• Knowledge of servers, operating systems, networks, firewalls, cloud infrastructure, SaaS automation, and scripting with PowerShell, Python, or JavaScript.

Nice to have

• Experience with SSO integrations, SCIM, identity frameworks, IDaaS, REST APIs, application development, and DevSecOps pipelines.
• Experience with vendor management and cross-team collaboration.
• Knowledge of the NIST framework and continuous improvement practices.
• Certifications such as CISSP, CISM, CompTIA Security+, Okta, SailPoint, Microsoft Identity, Ping Identity, CIAM, or CIMP.

Culture & Benefits

• Service-oriented and collaborative working environment.
• Benefits eligibility and discretionary bonus.
• Exposure to early adoption of cloud services and modern SaaS-enabled security practices.
• Collaboration with HRIS, IT service owners, service desk teams, end users, and security stakeholders.