Principal Identity Architect

Principal Identity Architect

Boston, MA

Type: Permanent

Category: Security

Industry: Communications

Reference ID: JN -022026-105558

Date Posted: 02/17/2026

Shortcut:

• Description

• Recommended Jobs

Description:

Hybrid Tues, Wed, Thurs onsite in Boston, MA

The organization seeks a Principal Identity Architect to lead enterprise identity strategy and execution across Identity Governance and Administration and Privileged Access Management. The role will design scalable identity architectures, automate lifecycle processes, and implement zero trust controls including MFA, SSO, and conditional access. The Principal will partner across security, IT, and application teams to drive adoption of standards and serve as the subject matter expert for identity, authentication, authorization, and access governance.

This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.

Salary: $150,000 - $180,000/ yr. w2

Responsibilities:

• Lead the design, development, and implementation of the Identity Governance and Administration solution and support the implementation of the Privileged Access Management solution.

• Design integrations between the IGA solution and directory services, HR systems, and business applications.

• Translate business and security requirements into scalable identity architectures, workflows, and automation patterns.

• Architect solutions for joiner, mover, and leaver processes and identity lifecycle automation.

• Collaborate with the Security Operations team on PAM solution implementation.

• Work with Security Operations, Network, and Application teams to ensure consistent adoption of identity patterns.

• Implement zero trust access controls including conditional access, least privilege, and posture-based enforcement.

• Design enterprise-wide authentication and access control frameworks including enhancements to MFA, SSO, passwordless, and risk-adaptive authentication.

• Oversee maintenance of IGA and PAM solutions including configuration of identity policies.

• Partner with GRC to define IAM and PAM standards and execute related policies and entitlement governance standards.

• Provide guidance for third-party and vendor access assessments and IAM controls testing.

• Engage IT and business partners to drive adoption of the IGA solution and zero trust principles.

• Serve as SME for identity-related decisions and technologies, guiding engineers, administrators, and application owners.

• Establish standards for entitlement models, RBAC, segregation of duties, and certification workflows.

• Mentor IAM and PAM engineers, analysts, and administrators.

• Review system designs for alignment with IAM principles and security controls.

• Educate stakeholders on identity-related matters to increase awareness and improve processes.

Experience Requirements:

• 10 years of experience in identity security.

• Deep expertise with modern IAM platforms, with SailPoint preferred.

• Strong understanding of authentication and authorization protocols and directory services.

• Experience designing IAM solutions at enterprise scale.

• Proven ability to lead enterprise-scale identity transformations.

• Ability to convey complex identity concerns in an actionable manner and constructively challenge prevailing processes.

• Demonstrated judgment, urgency, and commitment to ethics, regulatory compliance, customer service, and business integrity.

• Approximately 10% travel.

• Strong organization, planning, and project management skills with the ability to prioritize to meet deadlines.

• Ability to work across functional groups and levels to achieve results professionally.

• Strong leadership skills with the ability to drive and motivate teams.

Education Requirements:

• Bachelor's degree or equivalent work experience.

Recruitment Transparency Notice

Eliassen Group values transparency in our recruitment practices. Please be advised that Eliassen Group utilizes artificial intelligence (AI) tools as part of its initial application screening process. You may receive email and SMS notifications from the Eliassen Virtual Recruiting Team ( [email protected] , 781-808-2924) inviting you to complete a brief voice screening as part of your application process. These tools assist our hiring teams in different ways, including but not limited to, assistance in reviewing application materials to help identify candidates whose qualifications most closely match the requirements of the position. All AI-assisted evaluations and responses are reviewed by human recruiters before any hiring decisions are made. The use of AI in our process is intended to support fairness, efficiency, and consistency, and Eliassen Group takes measures to prevent bias or discrimination in connection with its hiring practices. By proceeding, you acknowledge, agree, and consent to Eliassen Group's use of these tools, including AI tools, as part of the application and hiring process.

Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.

Please be advised- If anyone reaches out to you about an open position connected with Eliassen Group, please confirm that they have an Eliassen.com email address and never provide personal or financial information to anyone who is not clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact [email protected] _.

About Eliassen Group:

Eliassen Group is a leading strategic consulting company for human-powered solutions. For over 30 years, Eliassen has helped thousands of companies reach further and achieve more with their technology solutions, financial, risk & compliance, and advisory solutions, and clinical solutions. With offices from coast to coast and throughout Europe, Eliassen provides a local community presence, balanced with international reach. Eliassen Group strives to positively impact the lives of their employees, clients, consultants, and the communities in which they operate.

Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

Don't miss out on our referral program! If we hire a candidate that you refer us to then you can be eligible for a $1,000 referral check!_