Lead architecture and design of a next-generation centralized authentication platform, define target-state credential consolidation, guide vendor-agnostic SDK design, evaluate integrations (Transmit, Ping, passkeys), set standards for MFA/session management/federation, ensure compliance and resilience, document technical debt and ADRs, and mentor engineering teams through a multi-year modernization.
Location: Remote, US-based (must be authorized to work in the United States)
Engagement Type: Independent Contractor
Industry: Enterprise / Financial Services
About the Role
We are looking for an IAM Solutions Architect to join a large, complex enterprise organization on a contract basis. You will serve as a technical lead and strategic advisor on the design of a next-generation, centralized authentication platform intended to replace a complex legacy identity system built over the past decade. This is a high-visibility role that requires both hands-on architectural expertise and the ability to guide engineering teams through a multi-year modernization program. The ideal candidate has designed enterprise-scale login and identity systems at Fortune 150 or global enterprise scale and understands the operational realities of running authentication infrastructure in a high-stakes environment. Experience in financial services or other highly regulated industries is a plus.
Key Responsibilities
• Lead the architecture and design of a centralized next-generation authentication platform, built in parallel with the existing production system
• Define the target-state architecture for credential consolidation across multiple business lines and product platforms
• Provide architectural guidance on the identity Abstraction Layer, a vendor-agnostic SDK library designed to decouple applications from underlying identity vendors
• Evaluate and advise on integration patterns between the Transmit platform, Transmit Mosaic (passkeys), Ping Federation, and other identity components
• Establish standards for authentication journeys, session management, MFA flows, and federation across consumer and commercial products
• Partner with security architects, application teams, and infrastructure engineers to ensure the platform meets compliance and resilience requirements
• Review existing identity journeys and connectors; document technical debt and provide remediation recommendations
• Mentor and provide technical direction to engineering teams responsible for building and maintaining the new platform
• Produce architectural decision records (ADRs), reference architectures, and roadmap documentation
Required Qualifications
• 12+ years of experience in Identity and Access Management architecture
• Demonstrated experience designing and delivering enterprise-scale centralized authentication platforms at Fortune 150 or global enterprise scale; financial services or similarly regulated environments a plus
• Deep knowledge of authentication protocols and standards: OAuth 2.0, OIDC, SAML 2.0, FIDO2/WebAuthn, and LDAP/Active Directory
• Hands-on experience with two or more enterprise identity platforms (Transmit Security, Ping Identity, ForgeRock, Okta, SailPoint, CyberArk, or equivalent)
• Experience architecting systems that consolidate credentials or unify identity across multiple applications or business lines
• Strong understanding of API security, token lifecycle management, and session architecture
• Proven ability to lead architecture decisions in complex, multi-stakeholder environments
• Experience with change management processes and operating within enterprise ITSM frameworks
Preferred Qualifications
• Hands-on experience with the Transmit Security platform
• Experience with passkey or FIDO2 implementations at scale
• Familiarity with SDK abstraction or facade design patterns for identity integrations
• Exposure to multi-product credential federation across large, complex enterprises
• Relevant certifications: CISSP, CIAM, Ping Certified Architect, or equivalent
• Familiarity with SOX, PCI-DSS, or FFIEC compliance frameworks
Contractor Requirements
• Must be based in the United States and authorized to work without sponsorship
• Must be able to pass a background check
Engagement Type: Independent Contractor
Industry: Enterprise / Financial Services
About the Role
We are looking for an IAM Solutions Architect to join a large, complex enterprise organization on a contract basis. You will serve as a technical lead and strategic advisor on the design of a next-generation, centralized authentication platform intended to replace a complex legacy identity system built over the past decade. This is a high-visibility role that requires both hands-on architectural expertise and the ability to guide engineering teams through a multi-year modernization program. The ideal candidate has designed enterprise-scale login and identity systems at Fortune 150 or global enterprise scale and understands the operational realities of running authentication infrastructure in a high-stakes environment. Experience in financial services or other highly regulated industries is a plus.
Key Responsibilities
• Lead the architecture and design of a centralized next-generation authentication platform, built in parallel with the existing production system
• Define the target-state architecture for credential consolidation across multiple business lines and product platforms
• Provide architectural guidance on the identity Abstraction Layer, a vendor-agnostic SDK library designed to decouple applications from underlying identity vendors
• Evaluate and advise on integration patterns between the Transmit platform, Transmit Mosaic (passkeys), Ping Federation, and other identity components
• Establish standards for authentication journeys, session management, MFA flows, and federation across consumer and commercial products
• Partner with security architects, application teams, and infrastructure engineers to ensure the platform meets compliance and resilience requirements
• Review existing identity journeys and connectors; document technical debt and provide remediation recommendations
• Mentor and provide technical direction to engineering teams responsible for building and maintaining the new platform
• Produce architectural decision records (ADRs), reference architectures, and roadmap documentation
Required Qualifications
• 12+ years of experience in Identity and Access Management architecture
• Demonstrated experience designing and delivering enterprise-scale centralized authentication platforms at Fortune 150 or global enterprise scale; financial services or similarly regulated environments a plus
• Deep knowledge of authentication protocols and standards: OAuth 2.0, OIDC, SAML 2.0, FIDO2/WebAuthn, and LDAP/Active Directory
• Hands-on experience with two or more enterprise identity platforms (Transmit Security, Ping Identity, ForgeRock, Okta, SailPoint, CyberArk, or equivalent)
• Experience architecting systems that consolidate credentials or unify identity across multiple applications or business lines
• Strong understanding of API security, token lifecycle management, and session architecture
• Proven ability to lead architecture decisions in complex, multi-stakeholder environments
• Experience with change management processes and operating within enterprise ITSM frameworks
Preferred Qualifications
• Hands-on experience with the Transmit Security platform
• Experience with passkey or FIDO2 implementations at scale
• Familiarity with SDK abstraction or facade design patterns for identity integrations
• Exposure to multi-product credential federation across large, complex enterprises
• Relevant certifications: CISSP, CIAM, Ping Certified Architect, or equivalent
• Familiarity with SOX, PCI-DSS, or FFIEC compliance frameworks
Contractor Requirements
• Must be based in the United States and authorized to work without sponsorship
• Must be able to pass a background check
Similar Jobs
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handle inbound/warm insurance leads, consult customers on Property & Casualty needs, convert leads to policyholders. Complete paid licensing and 16–18 week training, work assigned shifts (including one weekend day), and meet performance and customer service expectations while working remotely under W@H requirements.
Aerospace • Artificial Intelligence • Computer Vision • Software • Analytics • Defense • Big Data Analytics
Lead feature-data engineering for basemaps: own technical roadmap, provide architecture for scalable geospatial/vector processing, remain hands-on in development and production support, mentor engineers, evaluate open-source geospatial tools, monitor AWS system health, coordinate cross-team dependencies, and promote AI-assisted development to improve productivity and quality.
Top Skills:
AWSCi/CdCloud Optimized GeotiffCoordinate Reference SystemsDockerDuckdb (Spatial)FlatgeobufGdal/OgrGeopackageGeoparquetJenkinsPostgisPostgresSpatial IndexingVector Tiles
.png)
Cloud • Insurance • Payments • Software • Business Intelligence • App development • Big Data Analytics
Lead design and governance of enterprise-scale data architecture (warehouses, lakehouses, streaming). Define standards for data quality, lineage, observability, and AI-enabled workflows. Mentor engineers, serve as technical escalation, and translate business needs into long-term data architecture and governance strategies.
Top Skills:
Data CatalogData PipelinesData WarehouseDbtFeature StoreGcp BigqueryLakehouseObservability/AlertingStreaming PlatformsVector Stores
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
