IAM Solutions Architect (Contract)

Location: Remote, US-based (must be authorized to work in the United States)
Engagement Type: Independent Contractor
Industry: Enterprise / Financial Services
About the Role
We are looking for an IAM Solutions Architect to join a large, complex enterprise organization on a contract basis. You will serve as a technical lead and strategic advisor on the design of a next-generation, centralized authentication platform intended to replace a complex legacy identity system built over the past decade. This is a high-visibility role that requires both hands-on architectural expertise and the ability to guide engineering teams through a multi-year modernization program. The ideal candidate has designed enterprise-scale login and identity systems at Fortune 150 or global enterprise scale and understands the operational realities of running authentication infrastructure in a high-stakes environment. Experience in financial services or other highly regulated industries is a plus.
Key Responsibilities
•    Lead the architecture and design of a centralized next-generation authentication platform, built in parallel with the existing production system
•    Define the target-state architecture for credential consolidation across multiple business lines and product platforms
•    Provide architectural guidance on the identity Abstraction Layer, a vendor-agnostic SDK library designed to decouple applications from underlying identity vendors
•    Evaluate and advise on integration patterns between the Transmit platform, Transmit Mosaic (passkeys), Ping Federation, and other identity components
•    Establish standards for authentication journeys, session management, MFA flows, and federation across consumer and commercial products
•    Partner with security architects, application teams, and infrastructure engineers to ensure the platform meets compliance and resilience requirements
•    Review existing identity journeys and connectors; document technical debt and provide remediation recommendations
•    Mentor and provide technical direction to engineering teams responsible for building and maintaining the new platform
•    Produce architectural decision records (ADRs), reference architectures, and roadmap documentation
Required Qualifications
•    12+ years of experience in Identity and Access Management architecture
•    Demonstrated experience designing and delivering enterprise-scale centralized authentication platforms at Fortune 150 or global enterprise scale; financial services or similarly regulated environments a plus
•    Deep knowledge of authentication protocols and standards: OAuth 2.0, OIDC, SAML 2.0, FIDO2/WebAuthn, and LDAP/Active Directory
•    Hands-on experience with two or more enterprise identity platforms (Transmit Security, Ping Identity, ForgeRock, Okta, SailPoint, CyberArk, or equivalent)
•    Experience architecting systems that consolidate credentials or unify identity across multiple applications or business lines
•    Strong understanding of API security, token lifecycle management, and session architecture
•    Proven ability to lead architecture decisions in complex, multi-stakeholder environments
•    Experience with change management processes and operating within enterprise ITSM frameworks
Preferred Qualifications
•    Hands-on experience with the Transmit Security platform
•    Experience with passkey or FIDO2 implementations at scale
•    Familiarity with SDK abstraction or facade design patterns for identity integrations
•    Exposure to multi-product credential federation across large, complex enterprises
•    Relevant certifications: CISSP, CIAM, Ping Certified Architect, or equivalent
•    Familiarity with SOX, PCI-DSS, or FFIEC compliance frameworks
Contractor Requirements
•    Must be based in the United States and authorized to work without sponsorship
•    Must be able to pass a background check