... Enterprise Identity Architect. This role involves leading the design and modernization of ... and cloud environments, providing strategic direction in Identity & Access Management and ...
... Enterprise Identity Architect. This role involves leading the design and modernization of ... and cloud environments, providing strategic direction in Identity & Access Management and ...
Architect cloud identity solutions across Azure, multicloud, and SaaS platforms. * Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity ...
Architect cloud identity solutions across Azure, multicloud, and SaaS platforms. * Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity ...
Architect cloud identity solutions across Azure, multicloud, and SaaS platforms. * Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity ...
Architect cloud identity solutions across Azure, multicloud, and SaaS platforms. * Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity ...
Architect cloud identity solutions across Azure, multicloud, and SaaS platforms. * Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity ...
Architect cloud identity solutions across Azure, multicloud, and SaaS platforms. * Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity ...
Architect cloud identity solutions across Azure, multicloud, and SaaS platforms. * Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity ...
Architect cloud identity solutions across Azure, multicloud, and SaaS platforms. * Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity ...
Agent Identity Architect
Wayne, PA · On-site
Required Skills and Experience - 8+ years in identity and cloud security architecture within ... enterprise environments. - Deep expertise in IAM/security architecture, including directory ...
Agent Identity Architect
Wayne, PA · On-site
Required Skills and Experience - 8+ years in identity and cloud security architecture within ... enterprise environments. - Deep expertise in IAM/security architecture, including directory ...
Cloud Security Architect
Newark, NJ · Remote
$68.50 - $91/hr
... identity boundaries Define cloud security standards, guardrails, and policy-as-code frameworks (e.g ... Evaluate and architect solutions for workload protection, container security, and serverless ...
Quick apply
Cloud Security Architect
Newark, NJ · Remote
$68.50 - $91/hr
... identity boundaries Define cloud security standards, guardrails, and policy-as-code frameworks (e.g ... Evaluate and architect solutions for workload protection, container security, and serverless ...
Agent Identity Architect
Wayne, PA · On-site
Deep technical expertise in identity and cloud security, with a background in IAM Architecture, Cloud Security Architecture, or Identity Platform Architecture. * Experience with enterprise identity ...
Agent Identity Architect
Wayne, PA · On-site
Deep technical expertise in identity and cloud security, with a background in IAM Architecture, Cloud Security Architecture, or Identity Platform Architecture. * Experience with enterprise identity ...
Analyst, Cloud Identity
Chicago, IL · On-site
$88K - $120K/yr
Work collaboratively with Product, Architecture, Engineering, and Security teams by gathering ... Monitor cloud identity services using dashboards and alerting tools, documenting incidents ...
Analyst, Cloud Identity
Chicago, IL · On-site
$88K - $120K/yr
Work collaboratively with Product, Architecture, Engineering, and Security teams by gathering ... Monitor cloud identity services using dashboards and alerting tools, documenting incidents ...
Own and manage the organization's identity architecture, including cloud and hybrid identity models ... Design and implement identity lifecycle management (joiner, mover, leaver) and access governance ...
Own and manage the organization's identity architecture, including cloud and hybrid identity models ... Design and implement identity lifecycle management (joiner, mover, leaver) and access governance ...
Cloud identity adoption * Active Directory and hybrid identity modernization * Zero Trust identity architecture * Establish enterprise architecture standards, design patterns, and best practices ...
Cloud identity adoption * Active Directory and hybrid identity modernization * Zero Trust identity architecture * Establish enterprise architecture standards, design patterns, and best practices ...
Define and maintain global workforce identity architecture using Microsoft Entra ID in hybrid and cloud-mastered environments. * Establish standard patterns for authentication, federation ...
Define and maintain global workforce identity architecture using Microsoft Entra ID in hybrid and cloud-mastered environments. * Establish standard patterns for authentication, federation ...
ForgeRock Identity Architect
Winters, TX · On-site
ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP) * Experience with Okta / Entra / Ping as IDP ... You'll define the identity architecture powering hundreds of future customers--owning critical ...
Quick apply
ForgeRock Identity Architect
Winters, TX · On-site
ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP) * Experience with Okta / Entra / Ping as IDP ... You'll define the identity architecture powering hundreds of future customers--owning critical ...
ForgeRock Identity Architect
Jackson, NJ · On-site
ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP) * Experience with Okta / Entra / Ping as IDP ... You'll define the identity architecture powering hundreds of future customers--owning critical ...
Quick apply
ForgeRock Identity Architect
Jackson, NJ · On-site
ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP) * Experience with Okta / Entra / Ping as IDP ... You'll define the identity architecture powering hundreds of future customers--owning critical ...
ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP) * Experience with Okta / Entra / Ping as IDP ... You'll define the identity architecture powering hundreds of future customers--owning critical ...
Quick apply
ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP) * Experience with Okta / Entra / Ping as IDP ... You'll define the identity architecture powering hundreds of future customers--owning critical ...
ForgeRock Identity Architect
Tampa, FL · On-site
ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP) * Experience with Okta / Entra / Ping as IDP ... You'll define the identity architecture powering hundreds of future customers--owning critical ...
Quick apply
ForgeRock Identity Architect
Tampa, FL · On-site
ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP) * Experience with Okta / Entra / Ping as IDP ... You'll define the identity architecture powering hundreds of future customers--owning critical ...
ForgeRock Identity Architect
Dillon, CO · On-site
ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP) * Experience with Okta / Entra / Ping as IDP ... You'll define the identity architecture powering hundreds of future customers--owning critical ...
Quick apply
ForgeRock Identity Architect
Dillon, CO · On-site
ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP) * Experience with Okta / Entra / Ping as IDP ... You'll define the identity architecture powering hundreds of future customers--owning critical ...
Identity & Access Management (IAM) Engineer III
$150K - $183K/yr
... cloud environments. This role will serve as a technical authority for IAM architecture, leading ... identity federation solutions. • Experience implementing Conditional Access, adaptive ...
Quick apply
Identity & Access Management (IAM) Engineer III
$150K - $183K/yr
... cloud environments. This role will serve as a technical authority for IAM architecture, leading ... identity federation solutions. • Experience implementing Conditional Access, adaptive ...
... cloud environments. This role will serve as a technical authority for IAM architecture, leading ... identity federation solutions. • Experience implementing Conditional Access, adaptive ...
... cloud environments. This role will serve as a technical authority for IAM architecture, leading ... identity federation solutions. • Experience implementing Conditional Access, adaptive ...
... cloud identity models • Extensive hands-on experience with products like CyberArk, PingOne, Ping Davinci, EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido, and Active Directory • Expert-level ...
... cloud identity models • Extensive hands-on experience with products like CyberArk, PingOne, Ping Davinci, EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido, and Active Directory • Expert-level ...
Cloud Identity Architect information
See salary details
$10.58 - $18.05
0% of jobs
$18.05 - $25.52
0% of jobs
$25.52 - $33
0% of jobs
$33 - $40.47
1% of jobs
$40.47 - $47.95
2% of jobs
$47.95 - $55.42
7% of jobs
$62.89 is the 25th percentile. Wages below this are outliers.
$55.42 - $62.89
15% of jobs
$62.89 - $70.37
23% of jobs
The median wage is $70.97 / hr.
$70.37 - $77.84
26% of jobs
$78.26 is the 75th percentile. Wages above this are outliers.
$77.84 - $85.31
19% of jobs
$85.31 - $92.79
7% of jobs
$10
$70
$92
How much do cloud identity architect jobs pay per hour?
As of Jul 20, 2026, the average hourly pay for cloud identity architect in the United States is $70.79, according to ZipRecruiter salary data. Most workers in this role earn between $62.50 and $79.57 per hour, depending on experience, location, and employer.
What cities are hiring for Cloud Identity Architect jobs? Cities with the most Cloud Identity Architect job openings:
What states have the most Cloud Identity Architect jobs? States with the most job openings for Cloud Identity Architect jobs include:
Job description
Job Summary:
KLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem, seeking a highly experienced Sr. Enterprise Identity Architect. This role involves leading the design and modernization of enterprise identity security across on-prem and cloud environments, providing strategic direction in Identity & Access Management and collaborating with cross-functional teams to implement secure identity solutions.
Responsibilities:
• Develop and maintain the enterprise identity architecture blueprint across IAM, IGA, SSO, PIM, and cloud identity services.
• Establish identity standards, patterns, and reference architectures for on-premises and cloud environments.
• Define and drive Zero Trust identity strategy, modern authentication roadmap, and identity lifecycle transformation.
• Assess identity risk posture and recommend controls aligned with business and compliance requirements.
• Architect and implement identity lifecycle and governance solutions including role modeling, access certification, and automated provisioning/deprovisioning.
• Integrate IGA platforms with HR systems, AD/Entra ID, cloud applications, and SaaS platforms.
• Define RBAC/ABAC frameworks and enforce least privilege across the enterprise.
• Design and oversee PIM and privileged access architectures including just‑in‑time access, privileged session management, and secure admin tiering.
• Align privileged access models across AD, Entra ID, cloud workloads, servers, databases, and network systems.
• Provide architectural oversight for privileged access tools and secure credential management.
• Architect SSO integrations using SAML, OAuth, OIDC, WS‑Fed, and modern authentication protocols.
• Define centralized authentication patterns for cloud and on‑prem applications.
• Implement effective MFA, Conditional Access, and continuous authentication strategies.
• Provide architecture direction for Active Directory tiers, domain services, Group Policy structure, and identity security hardening.
• Lead hybrid identity design involving Entra ID, AAD Connect, federation, and modern authentication migration.
• Optimize identity infrastructure for scalability, resilience, and security.
• Architect cloud identity solutions across Azure, multicloud, and SaaS platforms.
• Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity segmentation.
• Integrate cloud identity controls into enterprise identity governance and access workflows.
• Act as the senior subject matter expert (SME) for identity architecture across security, cloud, application, and infrastructure teams.
• Lead evaluation and adoption of new IAM, IGA, SSO, and PIM technologies.
• Provide architecture governance, design reviews, and mentorship to engineering teams.
• Partner with compliance and risk teams to support audits, certification processes, and regulatory reporting.
Qualifications:
Required:
• Minimum eight (8) years of proven experience in large enterprise companies.
• Minimum five (5) years of proven experience architecting and designing enterprise grade solutions.
• Hands on experience in IAM systems like Ping or Okta or Azure EntraID.
• Experience working with IGA tools like Sailpiont, Savyint etc., and PIM tools like CyberArc or BeyondTrust etc.
• Experience with multi‑cloud identity (AWS, GCP).
• Experience driving large-scale identity modernization or cloud transformation programs.
• Knowledge of regulatory frameworks like SOX, HIPAA, PCI, ISO 27001, or NIST.
Preferred:
• Certifications in Identity and Security areas a huge plus.
Company:
Kla creates tools and services that promote innovation in the electronics industry. Founded in 1975, the company is headquartered in Milpitas, USA, with a team of 10001+ employees. The company is currently Late Stage.
KLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem, seeking a highly experienced Sr. Enterprise Identity Architect. This role involves leading the design and modernization of enterprise identity security across on-prem and cloud environments, providing strategic direction in Identity & Access Management and collaborating with cross-functional teams to implement secure identity solutions.
Responsibilities:
• Develop and maintain the enterprise identity architecture blueprint across IAM, IGA, SSO, PIM, and cloud identity services.
• Establish identity standards, patterns, and reference architectures for on-premises and cloud environments.
• Define and drive Zero Trust identity strategy, modern authentication roadmap, and identity lifecycle transformation.
• Assess identity risk posture and recommend controls aligned with business and compliance requirements.
• Architect and implement identity lifecycle and governance solutions including role modeling, access certification, and automated provisioning/deprovisioning.
• Integrate IGA platforms with HR systems, AD/Entra ID, cloud applications, and SaaS platforms.
• Define RBAC/ABAC frameworks and enforce least privilege across the enterprise.
• Design and oversee PIM and privileged access architectures including just‑in‑time access, privileged session management, and secure admin tiering.
• Align privileged access models across AD, Entra ID, cloud workloads, servers, databases, and network systems.
• Provide architectural oversight for privileged access tools and secure credential management.
• Architect SSO integrations using SAML, OAuth, OIDC, WS‑Fed, and modern authentication protocols.
• Define centralized authentication patterns for cloud and on‑prem applications.
• Implement effective MFA, Conditional Access, and continuous authentication strategies.
• Provide architecture direction for Active Directory tiers, domain services, Group Policy structure, and identity security hardening.
• Lead hybrid identity design involving Entra ID, AAD Connect, federation, and modern authentication migration.
• Optimize identity infrastructure for scalability, resilience, and security.
• Architect cloud identity solutions across Azure, multicloud, and SaaS platforms.
• Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity segmentation.
• Integrate cloud identity controls into enterprise identity governance and access workflows.
• Act as the senior subject matter expert (SME) for identity architecture across security, cloud, application, and infrastructure teams.
• Lead evaluation and adoption of new IAM, IGA, SSO, and PIM technologies.
• Provide architecture governance, design reviews, and mentorship to engineering teams.
• Partner with compliance and risk teams to support audits, certification processes, and regulatory reporting.
Qualifications:
Required:
• Minimum eight (8) years of proven experience in large enterprise companies.
• Minimum five (5) years of proven experience architecting and designing enterprise grade solutions.
• Hands on experience in IAM systems like Ping or Okta or Azure EntraID.
• Experience working with IGA tools like Sailpiont, Savyint etc., and PIM tools like CyberArc or BeyondTrust etc.
• Experience with multi‑cloud identity (AWS, GCP).
• Experience driving large-scale identity modernization or cloud transformation programs.
• Knowledge of regulatory frameworks like SOX, HIPAA, PCI, ISO 27001, or NIST.
Preferred:
• Certifications in Identity and Security areas a huge plus.
Company:
Kla creates tools and services that promote innovation in the electronics industry. Founded in 1975, the company is headquartered in Milpitas, USA, with a team of 10001+ employees. The company is currently Late Stage.