Title:  IAM Architect

Job Description

Aramark is modernizing its enterprise identity environment to support scalable, secure access across workforce, non-human, and emerging automation use cases.

We are looking for an Identity Architect who can simplify complex identity challenges, define practical governance and authorization patterns, and help shape the future direction of enterprise identity capabilities.

This role is a senior individual contributor position that partners across architecture, engineering, operations, and security teams to guide identity strategy, federation design, access models, and modernization efforts in a large-scale enterprise environment.

Job Responsibilities

Architecture & Design
•    Develop enterprise authorization patterns across RBAC, ABAC, and policy-driven access models to improve consistency, scalability, and long-term adaptability.
•    Shape identity governance architecture and support modernization efforts across lifecycle management and enterprise access capabilities.
•    Establish governance patterns for non-human identities, including service accounts, APIs, and automation workflows.
•    Lead the architectural direction for enterprise federation and access patterns across PingFederate, PingAccess, Entra ID, and related identity platforms.
•    Define scalable SSO, federation, trust, and access design patterns for application onboarding and modernization efforts.

Program Leadership
•    Partner with IAM leadership, engineering, operations, and security teams to guide long-term identity architecture and modernization decisions.
•    Translate identity strategy into practical design patterns, governance models, and implementation guidance.
•    Produce architecture standards, design artifacts, and decision frameworks that improve consistency across the identity ecosystem.

What Success Looks Like

First 6–12 Months
•    Establish a clear direction for identity architecture and governance evolution.
•    Improve consistency of enterprise authorization and federation patterns.
•    Advance modernization of identity governance and access models.
•    Strengthen internal architectural decision-making and reduce fragmentation across identity capabilities.

Qualifications

•   Strong hands-on experience with Identity and Access Management (IAM), including identity governance, access controls, authentication, authorization, privileged access management, and enterprise IAM architecture. Experience primarily focused on IT audit or compliance is not the primary focus of this role.
•    Strong experience designing identity governance, authorization, federation, and lifecycle management patterns in complex enterprise environments.
•    Experience with SailPoint ISC or IIQ, including governance architecture and enterprise IAM transformation initiatives.
•    Strong understanding of RBAC, ABAC, policy-driven access models, and modern identity governance concepts.
•    Strong experience with federation and enterprise access architecture, including practical design experience with Ping Identity platforms such as PingFederate and PingAccess.
•    Ability to translate complex identity challenges into scalable, pragmatic architectural approaches.
•    Experience working in SOX-controlled or other highly regulated environments.

Preferred
•    Experience with non-human identity governance patterns, including service accounts, APIs, automation identities, or secrets management.
•    Experience contributing to enterprise IAM modernization or identity operating model evolution initiatives.
•    Experience with SailPoint IIQ-to-ISC migration or similar identity governance platform modernization efforts.
•    Experience with Ping Identity platforms such as PingFederate, PingAccess, and PingDirectory in complex enterprise environments.
•    Familiarity with cloud transformation, automation platforms, or identity-centric security models.

Benefits

BENEFITS: Aramark offers comprehensive benefit programs and services for eligible employees including medical, dental, vision, and work/life resources.   Additional benefits may include retirement savings plans like 401(k) and paid days off such as parental leave and disability coverage.  Benefits vary by location and are subject to any legal requirements or limitations, employee eligibility status, and where the employee lives and/or works.  For more information about Aramark benefits, click here Aramark Careers - Benefits & Compensation.  ​

• Generous PTO, Vacation and 9 paid holidays
• Volunteer days, community partnerships, Employee Assistance Program
• Employee discounts on select services and products
• Your choice of three medical plan tiers, two carriers to choose from & My Healthy Changes well-being program
• Adoption Assistance & Paid Parental Leave
• Tuition Funding Sources and Scholarship Programs
• Retirement plan (401K or SIRP for those eligible) with match on annual contributions

#LI-Remote

About Aramark

Our Mission

Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet.

At Aramark, we believe that every employee should enjoy equal employment opportunity and be free to participate in all aspects of the company. We do not discriminate on the basis of race, color, religion, national origin, age, sex, gender, pregnancy, disability, sexual orientation, gender identity, genetic information, military status, protected veteran status or other characteristics protected by applicable law.

About Aramark

The people of Aramark proudly serve millions of guests every day through food and facilities in 15 countries around the world. Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet. We believe a career should develop your talents, fuel your passions, and empower your professional growth. So, no matter what you're pursuing - a new challenge, a sense of belonging, or just a great place to work - our focus is helping you reach your full potential. Learn more about working here at http://www.aramarkcareers.com or connect with us on Facebook, Instagram and Twitter.