Identity & Access Management Architect

WHO WE ARE:
Headquartered in Southern California Skechersthe Comfort Technology Companyhas spent over 30 years helping men women and kids everywhere look and feel good. Comfort innovation is at the core of everything we do driving the development of stylish high-quality products at a great value. From our diverse footwear collections to our expanding range of apparel and accessories Skechers is a complete lifestyle brand.

ABOUT THE ROLE:
The Identity & Access Management (IAM) Architect is a key member of the IAM team. This role shapes and delivers the organizations global identity architecture across workforce IAM privileged access identity governance customer identities non-human identities and non-employee and contingent-worker identities.

The architect translates business security threat and operational requirements into resilient identity solutions. The role provides technical direction while remaining directly involved in design integration testing implementation and complex troubleshooting across cloud enterprise application and security environments.

This role requires deep expertise in modern identity threats and defensive controls. The architect must recognize exploitable trust relationships and attack paths understand how adversaries compromise human and nonhuman identities and design preventive detective and responsive controls that materially reduce identity risk.

WHAT YOULL DO:

• Own end-to-end technical architecture for workforce IAM customer identity privileged access identity governance non-human identities and non-employee identities translating business requirements into resilient solutions
• Lead technical design reviews and provide authoritative guidance to IAM application infrastructure cloud cybersecurity and business teams
• Design configure build integrate test and troubleshoot IAM solutions including proofs of concept and production-ready implementations
• Partner with engineers and analysts to implement designs resolve complex issues translate governance requirements and establish effective operational handoffs
• Design identity lifecycle and access controls for employees contractors third parties and other contingent workers including joiner mover and leaver processes
• Design secure customer identity patterns that protect accounts and sessions while supporting appropriate authentication authorization privacy and user experience
• Architect lifecycle privilege credential and monitoring controls for privileged and nonhuman identities including service accounts application identities workloads secrets keys and machine credentials
• Advance access governance capabilities including requests approvals certifications role and entitlement design segregation of duties and policy enforcement
• Threat-model identity architectures and remediate attack paths involving credentials tokens sessions federation trusts privileged roles delegated permissions and nonhuman identities
• Apply Zero Trust principles through phishing-resistant authentication adaptive access device and workload trust token and session protection least privilege continuous evaluation and controls that limit blast radius
• Integrate identity providers cloud IAM access governance privileged access security telemetry zero-trust access and service-management capabilities using vendor-neutral patterns
• Partner with security operations and incident response teams to produce actionable identity telemetry detection logic investigation context containment options and post-incident improvements
• Automate IAM processes remove standing access and prioritize control improvements based on threat likelihood exploitability blast radius and business impact
• Ensure identity solutions are auditable and satisfy applicable privacy financial-control and regulatory obligations without compromising effective security design

WHAT YOULL BRING:

• Deep technical expertise and extensive hands-on experience across identity lifecycle management authentication authorization federation access governance customer identity privileged access cloud IAM and nonhuman identity controls
• Expert-level understanding of Zero Trust architecture least privilege continuous access evaluation authentication assurance trust boundaries and risk-based authorization
• Deep knowledge of SAML OAuth 2.0 OpenID Connect SCIM LDAP APIs tokens sessions federation and modern identity integration patterns
• Demonstrated expertise identifying and mitigating identity threats such as adversary-in-the-middle phishing credential and token theft session hijacking MFA bypass password attacks consent phishing OAuth abuse privilege escalation and nonhuman identity compromise
• Experience implementing phishing-resistant authentication adaptive access device and workload trust token protection session controls and just-in-time privileged access
• Ability to design integrations diagnose complex identity flows analyze attack paths challenge unsafe trust assumptions and select controls that reduce likelihood and blast radius
• Deep understanding of security and governance controls for privileged accounts service accounts application identities workloads secrets and machine credentials
• Experience designing identity telemetry detections investigation workflows and response playbooks in partnership with security operations teams
• Strong communication and collaboration skills including the ability to document architecture explain technical risk and influence outcomes without direct authority

REQUIREMENTS:

To perform this job successfully an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge skill and/or ability required.

• Extensive professional experience designing implementing integrating securing and supporting enterprise identity and access management solutions
• Demonstrated experience serving as a hands-on technical architect solution designer lead engineer or equivalent IAM subject-matter expert responsible for complex troubleshooting
• Relevant identity security cloud or architecture certifications are a plus
• Experience operating IAM capabilities across a global hybrid and multi-cloud environment preferred
• Experience with identity threat detection and response identity attack-path analysis or exposure-management practices preferred
• Experience securing privileged and nonhuman identities at enterprise scale preferred
• Hands-on experience using infrastructure as code scripting APIs workflow automation and software-development practices to automate IAM capabilities preferred

The pay range for this position is $160000-$185000/yr USD.

About Skechers

Skechers a global Fortune 500 company developsand markets a diverse range of lifestyle and performance footwear apparel and accessories. Serving over 180 countries and territories Skechers connects customers to products through department and specialty stores e-commerce and digital stores and through our more than 5300 Skechers retail locations.

Equal Employment Opportunity
Skechers is committed to providing a safe inclusive and respectful work environment. Skechers provides equal employment opportunities for all employees and applicants for employment without regard race color religion gender gender identification and expression national origin marital status age disability genetic information military status sexual orientation or any other protected characteristic established by local state or federal law.

Reasonable Accommodation
Applicants for employment who require a reasonable accommodation to apply for a job should request appropriate accommodation by emailing
To perform this job successfully an individual must be able to perform each job responsibility satisfactorily. The skills abilities and physical demands described are representative of those duties that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities who are otherwise qualified for the job position to perform the essential functions.