# Senior Principal Enterprise Identity & Access Management (IAM) Architect

**Company**: The Cigna Group
**Location**: Bloomfield, CT
**Experience**: senior
**Job type**: full-time
**Salary**: 174,800 - 291,300 USD
**Category**: Security
**Industry**: Healthcare

**Apply**: https://cigna.wd5.myworkdayjobs.com/en-US/cignacareers/job/Bloomfield-CT/Senior-Principal--Enterprise-Identity---Access-Management-Architect_26011671?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_bb531670-151

## Description

The Senior Principal Enterprise Identity & Access Management (IAM) Architect leads the strategy, design, and governance of identity and access security across the organization.

This role sets the long-term IAM vision and ensures identity solutions support business goals, cybersecurity standards, risk management, and regulatory requirements.

The Senior Principal IAM Architect serves as a trusted advisor to executives and technology leaders, guiding large IAM modernization efforts across cloud and on-premises environments.

**Responsibilities:**

- Define and lead the enterprise IAM strategy, architecture, standards, and multi-year roadmap.

- Create standards for identity governance, authentication, authorization, privileged access, and access controls.

- Serve as a senior technical advisor for complex IAM and identity security programs.

- Partner with cybersecurity, technology, risk, compliance, and business leaders to align IAM solutions with business needs.

- Explain complex identity and security risks in clear business terms to support leadership decisions.

- Guide technology investments and recommend IAM platforms and solutions based on business and security needs.

- Establish and maintain IAM policies, security controls, and governance standards.

- Support compliance with requirements such as HIPAA, SOX, GDPR, NIST, ISO, and other cybersecurity standards.

- Lead identity risk assessments and strategies to reduce security risks.

- Strengthen identity governance, role-based access, access reviews, segregation of duties, and privileged access management.

- Lead the evaluation and adoption of new IAM technologies and platforms.

- Advance cloud identity, Zero Trust, passwordless authentication, adaptive access, privileged access management, and AI-enabled security.

- Define identity integration strategies across applications, APIs, cloud services, data platforms, and digital channels.

- Provide technical direction for large IAM implementations, migrations, and transformation programs.

- Guide architecture, engineering, security, and operations teams through complex identity challenges.

- Ensure IAM solutions are secure, reliable, scalable, and able to support future growth.

- Mentor architects, engineers, and technical leaders while encouraging knowledge sharing and continuous learning.

- Provide IAM guidance during mergers, acquisitions, business changes, and technology modernization efforts.

**Qualifications:**

- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field. Master's degree preferred.

- 12+ years of experience in cybersecurity, identity management, enterprise architecture, or a related area.

- 8+ years of experience leading enterprise IAM architecture, strategy, or large transformation programs.

- Experience leading complex technology initiatives and influencing senior and executive leaders.

- Experience working in large, highly regulated organizations.

- Deep knowledge of IAM, Identity Governance & Administration (IGA), Privileged Access Management (PAM), Customer IAM (CIAM), and Zero Trust.

- Experience with technologies such as CyberArk, Okta, Ping Identity, SailPoint, and Microsoft Entra ID (Azure AD).

- Strong knowledge of SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, Kerberos, FIDO2, and modern authentication methods.

- Experience designing identity solutions across AWS, Azure, GCP, hybrid-cloud, and multi-cloud environments.

- Strong knowledge of API security, directory services, identity federation, automation, and enterprise integrations.

- Experience using automation and AI-enabled capabilities to improve identity governance, security, and access processes.

- Experience with PowerShell, Python, and infrastructure-as-code methods.

- Strong communication skills with the ability to explain technical topics to both technical and business leaders.

- Ability to lead through complex business and technology changes and build agreement across teams.

**Benefits:**

- Comprehensive range of benefits, including medical, vision, dental, and well-being and behavioral health programs.

- 401(k), company-paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year, paid holidays, and leaves of absence.

**Salary:**

- Anticipated annual salary of 174,800 - 291,300 USD, depending on relevant factors, including experience and geographic location.

- Eligible to participate in an annual bonus and long-term incentive plan.

## Skills

### Required
- IAM
- Identity Governance & Administration (IGA)
- Privileged Access Management (PAM)
- Customer IAM (CIAM)
- Zero Trust
- CyberArk
- Okta
- Ping Identity
- SailPoint
- Microsoft Entra ID (Azure AD)
- SAML
- OAuth 2.0
- OpenID Connect (OIDC)
- SCIM
- LDAP
- Kerberos
- FIDO2
- PowerShell
- Python

---

Source: [Apply at cigna.wd5.myworkdayjobs.com](https://cigna.wd5.myworkdayjobs.com/en-US/cignacareers/job/Bloomfield-CT/Senior-Principal--Enterprise-Identity---Access-Management-Architect_26011671?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)