Freeport-McMoRan

Identity & Access Management Architect III

Freeport-McMoRan

full-time

Posted on:

Location Type: Hybrid

Location: Phoenix • Arizona • United States

Visit company website

Explore more

✨ AI Apply
Apply

Job Level

SeniorLead

Tech Stack

CloudCyber Security

About the role

  • Lead the strategy and implementation of enterprise identity architecture across key domains, including Enterprise Identity Fabric, Microsoft Entra, Identity Governance & Administration, Agentic AI Security, Non‑Human Identity Management, and Identity Threat Detection & Response (ITDR).
  • Collaborate with teams across Infrastructure, Enterprise Architecture, Security Operations, Applications, HRIS, and Compliance to develop AI‑secure, scalable patterns, standards, and multi‑year roadmaps that advance Zero Trust principles and support evolving business needs.
  • Lead enterprise identity reference architecture across directories (AD/Entra), authentication and authorization, Conditional Access, federation (SAML/OIDC/OAuth), identity lifecycle management, and IGA.
  • Develop and publish architecture principles, security patterns, and guardrails while ensuring alignment with Zero Trust and enterprise standards.
  • Develop and maintain a 1–3 year Identity Security roadmap, including AD/Entra modernization, role engineering/RBAC, access reviews, workload and machine identity strategy, and ITDR automation.
  • Prioritize initiatives and monitor KPIs to drive risk reduction and audit readiness.
  • Translate business and security requirements into end‑to‑end solution designs spanning AD/Entra, IGA, and ITDR.
  • Produce HLD/LLD documentation, data flow diagrams, trust boundaries, and control mappings.
  • Provide design oversight through build, testing, and deployment, ensuring operational runbooks and SLAs are established.
  • Define identity control objectives, metrics, and testing procedures, including joiner/mover/leaver processes, privileged access boundaries, access certification cycles, and passwordless adoption.
  • Partner with Internal Audit and Compliance to ensure alignment with SOX and NIST CSF and support evidence collection.
  • Facilitate architecture reviews and lead design workshops with Infrastructure, Cloud, Application, SOC, OT, and HRIS teams.
  • Communicate architectural decisions clearly to both technical and executive audiences and advocate for modern identity practices (e.g., passkeys, B2B/external identities).
  • Monitor identity threat landscapes and platform advancements to recommend continuous improvements, deprecations, and optimizations across the enterprise identity ecosystem.
  • Perform additional responsibilities as assigned.

Requirements

  • Associates Degree and ten (10) years of experience in security systems technologies and ISACA, SANS, ISC (2), or CEH Certification or related security certification OR Bachelor's Degree in Information Systems or related field and eight (8) years of experience in security systems technologies OR Bachelor's Degree in Information Systems or related field and six (6) years of experience in security systems technologies and ISACA, SANS, ISC (2), or CEH Certification or related security certification OR Master's Degree in Information Systems or related field and six (6) years of experience in security systems technologies OR Master's Degree in Information Systems or related field and five (5) years of experience in security systems technologies and ISACA, SANS, ISC (2), or CEH Certification or related security certification
  • Hands-on experience in areas: Active Directory; Entra Users, Groups, Policy & Access Management; IGA platform etc.
  • Knowledge of CyberSecurity Zero Trust, least privilege access, and compliance frameworks. (e.g., SOX, NIST CSF).
  • Expertise in identity lifecycle, federation (SAML/OIDC/OAuth), Conditional Access, MFA/passwordless, and access reviews.
  • Understanding of Agentic AI and AI related Security Controls.
  • Understanding of workload/machine identity governance (managed identities, service accounts, certificates/secrets).
  • Ability to create HLD/LLD, threat models, and control mappings; strong documentation and standards writing.
  • Ability to influence architecture decisions across distributed teams and communicate clearly to technical and non-technical stakeholders.
  • Partners with Enterprise Architecture, Infrastructure, Cloud, SOC, Application Owners, Business Solutions Architects, HRIS, Internal Audit, and Compliance; provides architectural guidance to engineering teams and consults with business stakeholders.
Benefits
  • Affordable medical, dental and vision benefits
  • Company-paid life and disability insurance
  • 401(k) plan with employer contribution/match
  • Paid time off, paid sick time, holiday pay, parental leave
  • Tuition Assistance
  • Employee Assistance Program
  • Discounted insurance plans for auto, home and pet
  • Internal progression opportunities
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
Active DirectoryMicrosoft EntraIdentity Governance & Administration (IGA)SAMLOIDCOAuthMulti-Factor Authentication (MFA)Identity Threat Detection & Response (ITDR)Role-Based Access Control (RBAC)Identity lifecycle management
Soft Skills
communicationinfluencecollaborationdocumentationstandards writingleadershipstrategic planningproblem-solvingstakeholder engagementarchitecture review facilitation
Certifications
ISACASANSISC(2)CEH