{"id":885172,"url":"https://alion.io/job/skechers-identity-access-management-architect","title":"Identity & Access Management Architect","company":{"id":715105,"name":"Skechers","domain":"skechers.com","url":"https://alion.io/company/skechers-3","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":457,"ghost_share":0,"stale_share":0.937,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Manhattan Beach, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":160000,"max":185000,"currency":"USD","period":"year","gross":null,"usd_annual":185000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-18T00:00:00Z","employer_posted_date":"2026-08-18","last_verified_at":"2026-11-05T09:08:04Z","board_verified":true,"closed_at":null,"days_open":79,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":79},"description":"WHO WE ARE:Headquartered in Southern California, Skechers-the Comfort Technology Company®-has spent over 30 years helping men, women, and kids everywhere look and feel good. Comfort innovation is at the core of everything we do, driving the development of stylish, high-quality products at a great value. From our diverse footwear collections to our expanding range of apparel and accessories, Skechers is a complete lifestyle brand.\nABOUT THE ROLE:\nThe Identity & Access Management (IAM) Architect is a key member of the IAM team. This role shapes and delivers the organization’s global identity architecture across workforce IAM, privileged access, identity governance, customer identities, non-human identities, and non-employee and contingent-worker identities.\nThe architect translates business, security, threat, and operational requirements into resilient identity solutions. The role provides technical direction while remaining directly involved in design, integration, testing, implementation, and complex troubleshooting across cloud, enterprise, application, and security environments.\nThis role requires deep expertise in modern identity threats and defensive controls. The architect must recognize exploitable trust relationships and attack paths, understand how adversaries compromise human and nonhuman identities, and design preventive, detective, and responsive controls that materially reduce identity risk.\nWHAT YOU'LL DO:\nOwn end-to-end technical architecture for workforce IAM, customer identity, privileged access, identity governance, non-human identities, and non-employee identities, translating business requirements into resilient solutions\nLead technical design reviews and provide authoritative guidance to IAM, application, infrastructure, cloud, cybersecurity, and business teams\nDesign, configure, build, integrate, test, and troubleshoot IAM solutions, including proofs of concept and production-ready implementations\nPartner with engineers and analysts to implement designs, resolve complex issues, translate governance requirements, and establish effective operational handoffs\nDesign identity lifecycle and access controls for employees, contractors, third parties, and other contingent workers, including joiner, mover, and leaver processes\nDesign secure customer identity patterns that protect accounts and sessions while supporting appropriate authentication, authorization, privacy, and user experience\nArchitect lifecycle, privilege, credential, and monitoring controls for privileged and nonhuman identities, including service accounts, application identities, workloads, secrets, keys, and machine credentials\nAdvance access governance capabilities including requests, approvals, certifications, role and entitlement design, segregation of duties, and policy enforcement\nThreat-model identity architectures and remediate attack paths involving credentials, tokens, sessions, federation trusts, privileged roles, delegated permissions, and nonhuman identities\nApply Zero Trust principles through phishing-resistant authentication, adaptive access, device and workload trust, token and session protection, least privilege, continuous evaluation, and controls that limit blast radius\nIntegrate identity providers, cloud IAM, access governance, privileged access, security telemetry, zero-trust access, and service-management capabilities using vendor-neutral patterns\nPartner with security operations and incident response teams to produce actionable identity telemetry, detection logic, investigation context, containment options, and post-incident improvements\nAutomate IAM processes, remove standing access, and prioritize control improvements based on threat likelihood, exploitability, blast radius, and business impact\nEnsure identity solutions are auditable and satisfy applicable privacy, financial-control, and regulatory obligations without compromising effective security design\nWHAT YOU'LL BRING:\nDeep technical expertise and extensive hands-on experience across identity lifecycle management, authentication, authorization, federation, access governance, customer identity, privileged access, cloud IAM, and nonhuman identity controls\nExpert-level understanding of Zero Trust architecture, least privilege, continuous access evaluation, authentication assurance, trust boundaries, and risk-based authorization\nDeep knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, APIs, tokens, sessions, federation, and modern identity integration patterns\nDemonstrated expertise identifying and mitigating identity threats such as adversary-in-the-middle phishing, credential and token theft, session hijacking, MFA bypass, password attacks, consent phishing, OAuth abuse, privilege escalation, and nonhuman identity compromise\nExperience implementing phishing-resistant authentication, adaptive access, device and workload trust, token protection, session controls, and just-in-time privileged access\nAbility to design integrations, diagnose complex identity flows, analyze attack paths, challenge unsafe trust assumptions, and select controls that reduce likelihood and blast radius\nDeep understanding of security and governance controls for privileged accounts, service accounts, application identities, workloads, secrets, and machine credentials\nExperience designing identity telemetry, detections, investigation workflows, and response playbooks in partnership with security operations teams\nStrong communication and collaboration skills, including the ability to document architecture, explain technical risk, and influence outcomes without direct authority\nREQUIREMENTS:\nTo perform this job successfully, an individual must be able to perform each essential duty satisfactorily.The requirements listed below are representative of the knowledge, skill, and/or ability required.\nExtensive professional experience designing, implementing, integrating, securing, and supporting enterprise identity and access management solutions\nDemonstrated experience serving as a hands-on technical architect, solution designer, lead engineer, or equivalent IAM subject-matter expert responsible for complex troubleshooting\nRelevant identity, security, cloud, or architecture certifications are a plus\nExperience operating IAM capabilities across a global, hybrid, and multi-cloud environment preferred\nExperience with identity threat detection and response, identity attack-path analysis, or exposure-management practices preferred\nExperience securing privileged and nonhuman identities at enterprise scale preferred\nHands-on experience using infrastructure as code, scripting, APIs, workflow automation, and software-development practices to automate IAM capabilities preferred\nThe pay range for this position is $160,000-$185,000/yr USD.\nAbout Skechers\nSkechers, a global Fortune 500® company, develops and markets a diverse range of lifestyle and performance footwear, apparel, and accessories. Serving over 180 countries and territories, Skechers connects customers to products through department and specialty stores, e-commerce and digital stores, and through our more than 5,300 Skechers retail locations.\nEqual Employment Opportunity\nSkechers is committed to providing a safe, inclusive, and respectful work environment. Skechers provides equal employment opportunities for all employees and applicants for employment without regard race, color, religion, gender, gender identification and expression, national origin, marital status, age, disability, genetic information, military status, sexual orientation, or any other protected characteristic established by local, state or federal law.\n Reasonable Accommodation\nApplicants for employment who require a reasonable accommodation to apply for a job should request appropriate accommodation by emailing .\nTo perform this job successfully, an individual must be able to perform each job responsibility satisfactorily. The skills, abilities and physical demands described are representative of those duties that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities, who are otherwise qualified for the job position, to perform the essential functions.","description_format":"text","description_chars":8282,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Footwear","Apparel & Fashion Brands"],"lifecycle":[{"event":"open","at":"2026-09-14T03:33:14Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 17 · green card filings: 5","filings_12m":17,"filings_prev_12m":8,"green_card_filings_12m":5,"median_offered_wage_usd":152500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.477,"p_room":0.28,"age_days":79,"expected_fill_days":29,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":185000,"is_top_pay":false},"html_url":"https://alion.io/job/skechers-identity-access-management-architect","json_url":"https://alion.io/job/skechers-identity-access-management-architect.json","meta":{"generated_at":"2026-11-05T16:30:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21740,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":715105},"rest":"https://alion.io/mcp/rest/get_company?id=715105"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fskechers-identity-access-management-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fskechers-identity-access-management-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fskechers-identity-access-management-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/skechers-identity-access-management-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fskechers-identity-access-management-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":885172}},{"tool":"search_jobs","arguments":{"company":"skechers.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":885172},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}