Cybersecurity IAM Architect - Staff Engineer

Required Qualifications

• 7–10 years of experience in cybersecurity, with 3+ years in IAM architecture, security architecture, or a similar solution design role
• Deep working knowledge of NIST frameworks, including CSF, SP 800-53, SP 800-171, and SP 800-207 Zero Trust
• Demonstrated experience designing and reviewing IAM architectures for enterprise systems, cloud environments, SaaS platforms, APIs, and hybrid environments
• Strong understanding of IAM domains including identity lifecycle management, IGA, SSO, MFA, federation, PAM, RBAC, ABAC, PBAC, entitlement management, access reviews, and separation of duties
• Hands-on familiarity with identity platforms and standards such as Okta, Microsoft Entra ID, SCIM, SAML, OAuth, OIDC, LDAP, Kerberos, and privileged access technologies
• Strong understanding of LLMs, AI, and GenAI solutions, including agentic AI, MCP/tool hardening, non-human identity governance, agent-to-tool authorization, delegated access, and auditability of agent actions
• Experience working in a large regulated environment and aligning identity controls to compliance frameworks
• Excellent communication, collaboration, architecture documentation, and executive-facing presentation skills
• Preferred
• Industry certifications such as CISSP, CISM, CISA, CCSP, or identity-focused certifications
• Experience with Zero Trust Architecture, modern identity security models, and enterprise access governance programs
• Experience with policy-as-code, DevSecOps, infrastructure-as-code security, and automated identity control validation
• Experience developing governance models for non-human identities, machine identities, workload identities, AI agents, service accounts, secrets, and API credentials
• OneMain Holdings, Inc. is an Equal Employment Opportunity (EEO) employer. Qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship status, color, creed, culture, disability, ethnicity, gender, gender identity or expression, genetic information or history, marital status, military status, national origin, nationality, pregnancy, race, religion, sex, sexual orientation, socioeconomic status, transgender or on any other basis protected by law.