IAM Solutions Architect
- Compensation
- Not disclosed
- Location
- United States
- Work setup
- Remote
- Seniority
- Principal
- Employment
- Contract
- Experience
- 8+ years
- Category
- Security
- Posted
Skills
Nice to have
- Hands-on experience with NHI, machine identity, or secrets platforms (Oasis, Veza, C1, or comparable tools).
- SailPoint IdentityIQ or Identity Security Cloud architecture and delivery experience.
- Secrets management at scale (HashiCorp Vault, cloud-native secret stores) and certificate lifecycle management.
- Cloud identity depth across AWS, Azure, or GCP, including workload identity and federation patterns.
- Experience contributing to proposals, statements of work, and scoping. We would like a few people on the team who can do this, but it is a nice-to-have rather than a requirement for every hire.
- Regulated-industry experience — financial services, healthcare, or federal — and the audit expectations that come with it.
- Zero Trust architecture experience, and familiarity with how NHI and agentic identity fit into it.
Full description
The Role
Palyrian’s immediate need is for IAM Solutions Architects to lead non-human identity (NHI) program builds for enterprise clients. Machine identities, workloads, service accounts, API credentials, and now AI agents have quietly outgrown the controls that were designed for people. Very few organizations have a dedicated NHI program today. That is changing fast, and Palyrian is being pulled into the build.
We are not expecting you to have run an NHI program already. The space is too new for that to be a fair filter. We are looking for strong solutions architects from adjacent identity domains (IGA, PAM, IDP/AuthN) who are already doing this job somewhere else in the identity stack. You would be doing the same work in a newer domain, and Palyrian provides the NHI and platform-specific enablement to get you there.
Alongside the NHI work you will architect on SailPoint engagements (IdentityIQ and Identity Security Cloud), which remain a core part of the practice. Breadth is the point here: we are looking for architects who want to touch more than one platform, not fewer.
About Palyrian
Palyrian is an identity services boutique founded in 2024 by three practitioners who spent years building and running enterprise identity programs together. The firm exists on a simple premise: most IAM programs have the right tools, but few have the right people. Palyrian brings the quality of a large firm with the speed of a small one, and its vision is to be the most trusted identity services boutique in the market: a focused firm clients return to because the work holds up, not because of a contract.
Palyrian works across SailPoint (IdentityIQ and Identity Security Cloud), Oasis, Veza, and C1 (formerly ConductorOne). The team treats identity as a system, not a stack of tools, and favors fixing what a client already owns before recommending something new. It is a boutique that runs like a tech startup: small, fast, and light on process.
What You Will Do
- Discover and inventory the non-human identity estate: what exists across the enterprise, where it lives, what it is used for, who owns it, and how it authenticates.
- Define NHI reference architecture covering the full lifecycle — creation, ownership, credential and secret management, rotation, attestation, and decommissioning.
- Work fluently across the three classes of identity (workforce, customer, non-human) and across the full range of NHI types: workloads, machine identities, service accounts, API credentials, bots, and AI agents.
- Map the control landscape for AI agents: the different agent types, their lifecycles, and where the controls for each one sit. This is where a lot of the client's interest is heading.
- Produce complete artifacts for architecture review boards and cyber security reviews — reference architecture diagrams, data and process flows, and detailed security diagrams.