Senior IAM Entra Architect
Your Opportunity
Your opportunity
At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).
As a Senior IAM Entra Architect, you will help shape the security, resilience, and future of Schwab’s enterprise identity environment. Serving as a technical design authority, you will define target-state architectures, security guardrails, reference patterns, and modernization roadmaps across Microsoft Entra ID, Active Directory, and hybrid identity services.
You will guide complex architectural decisions involving authentication modernization, identity governance, application migration, privileged access, and Zero Trust principles. Your problem-solving and decision-making skills will help teams balance security, regulatory requirements, operational resilience, scalability, and user experience.
Working across Security Engineering, Cloud Platform Engineering, DevSecOps, Infrastructure, and application teams, you will turn complex identity challenges into actionable solutions. Your collaboration, communication, and adaptability will help accelerate secure modernization while strengthening identity controls across Schwab’s technology environment.
What you have
Required Qualifications
- 10+ years of experience in Identity and Access Management architecture or engineering.
- Deep experience designing enterprise identity solutions using Microsoft Entra ID, Active Directory, and hybrid identity technologies.
- Experience with Conditional Access, Identity Protection, multifactor authentication, passwordless authentication, identity governance, and privileged access.
- Experience designing secure authentication and single sign-on solutions using OAuth 2.0, OpenID Connect, SAML, or WS-Federation.
- Experience securing hybrid identity environments using Entra Connect, federation services, lifecycle automation, and cloud-based identity patterns.
- Experience developing Terraform infrastructure-as-code resources, reusable modules, and automated CI/CD guardrails for identity services.
- Ability to apply Access Control Management, Cybersecurity, Risk Management, and Decision Making skills to produce secure, scalable, auditable identity solutions.
- Demonstrated Problem Solving, Communication, and Cross-Functional Collaboration skills when guiding complex architecture and security decisions.
Preferred Qualifications
- Microsoft SC-300, SC-100, AZ-305, or equivalent certification.
- Experience with Privileged Access Workstations, Microsoft Identity Manager, SailPoint, CyberArk, or Okta.
- Experience supporting enterprise identity consolidation, domain migration, or legacy authentication modernization initiatives.
- Experience with threat modeling, penetration testing, security architecture, regulatory requirements, or identity-related audit controls.
- Experience creating scalable automation through scripting, APIs, low-code/no-code platforms, programming languages, or AI technologies.
- Adaptability and Continuous Learning demonstrated by evaluating emerging identity threats, platform capabilities, and technology changes.
- Strategic Thinking and Stakeholder Management skills used to establish roadmaps, influence technical direction, and convert complex identity concepts into actionable guidance.
- Experience mentoring engineers or establishing identity architecture standards and best practices.
In addition to the salary range, this role is eligible for bonus or incentive opportunities.
What’s in it for you
At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.
We offer a competitive benefits package that takes care of the whole you – both today and in the future:
- 401(k) with company match and Employee stock purchase plan
- Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
- Paid parental leave and family building benefits
- Tuition reimbursement
- Health, dental, and vision insurance
What you are good at
What you have
Required Qualifications
- 10+ years of experience in Identity and Access Management architecture or engineering.
- Deep experience designing enterprise identity solutions using Microsoft Entra ID, Active Directory, and hybrid identity technologies.
- Experience with Conditional Access, Identity Protection, multifactor authentication, passwordless authentication, identity governance, and privileged access.
- Experience designing secure authentication and single sign-on solutions using OAuth 2.0, OpenID Connect, SAML, or WS-Federation.
- Experience securing hybrid identity environments using Entra Connect, federation services, lifecycle automation, and cloud-based identity patterns.
- Experience developing Terraform infrastructure-as-code resources, reusable modules, and automated CI/CD guardrails for identity services.
- Ability to apply Access Control Management, Cybersecurity, Risk Management, and Decision Making skills to produce secure, scalable, auditable identity solutions.
- Demonstrated Problem Solving, Communication, and Cross-Functional Collaboration skills when guiding complex architecture and security decisions.
Preferred Qualifications
- Microsoft SC-300, SC-100, AZ-305, or equivalent certification.
- Experience with Privileged Access Workstations, Microsoft Identity Manager, SailPoint, CyberArk, or Okta.
- Experience supporting enterprise identity consolidation, domain migration, or legacy authentication modernization initiatives.
- Experience with threat modeling, penetration testing, security architecture, regulatory requirements, or identity-related audit controls.
- Experience creating scalable automation through scripting, APIs, low-code/no-code platforms, programming languages, or AI technologies.
- Adaptability and Continuous Learning demonstrated by evaluating emerging identity threats, platform capabilities, and technology changes.
- Strategic Thinking and Stakeholder Management skills used to establish roadmaps, influence technical direction, and convert complex identity concepts into actionable guidance.
- Experience mentoring engineers or establishing identity architecture standards and best practices.
In addition to the salary range, this role is eligible for bonus or incentive opportunities.
Why Schwab?
At Schwab, “Own Your Tomorrow” embodies everything we do! We are committed to helping our employees unleash their potential and achieve their dreams. Our employees get to play a central role in disrupting a multi-trillion-dollar industry, creating a better, more modern way to build and manage wealth. We’re a modern financial services firm that stands apart from the industry, where you can go as far as your ambition takes you.
Hear from employees: What’s it like to work at Schwab!
The benefits of working at Schwab : a package designed to empower your health, wealth, career and life. Schwab is committed to building a diverse and inclusive workplace where everyone feels valued.
As an equal employment opportunity employer, our policy is to provide equal employment opportunities to all employees and applicants without regard to any status that is protected by law. (Please click here to see policy.)
Schwab is also an affirmative action employer, focused on advancing women, minorities, veterans, and individuals with disabilities in the workplace. We believe diversity and inclusion are part of our success as a company and our purpose of serving every client with passion and integrity.