IAM engineer career path

Identity architect

Step up180 open US jobs$158K-$177K advertised

Designing SSO, provisioning and role models for one platform is identity architecture at small scale. The architect owns it for the whole company, including machine and customer identities.

Usually when

After 5 to 7 years, once other teams are building on a federation or lifecycle pattern you designed

Skills to add

• Entitlement modeling (RBAC, ABAC and policy-based access)
• Workload identity (cloud IAM roles, SPIFFE)
• Customer identity (CIAM) patterns
• Zero trust identity design (NIST SP 800-207)
• IDPro CIDPro or CISSP

Have this on your resume first

An identity pattern you designed that several apps or teams adopted, with the count and the result, such as fewer orphaned accounts.

Cloud security engineer

Sideways move1,140 open US jobs$119K-$148K advertised

Cloud accounts fill up with over-permissioned roles and forgotten service accounts. Cleaning that up takes exactly the least-privilege instincts you use every day.

Usually when

Year 3 or 4, and easier if you've already set up cloud SSO or role federation

Skills to add

• AWS IAM policies, SCPs and permission boundaries
• Microsoft Entra ID roles and Privileged Identity Management
• CIEM tooling for unused-permission analysis
• Terraform
• AWS Certified Security Specialty

Have this on your resume first

A least-privilege cleanup in AWS or Azure with numbers, like standing admin roles removed or unused permissions revoked.

Browse cloud security engineer jobs

IAM manager

Step up201 open US jobs$112K-$169K advertised

Identity work always pulls in HR, app owners and auditors. If you already run those meetings, the manager title mostly adds a roadmap and a budget.

Usually when

Around 6 to 8 years, typically after leading a platform migration or an access certification campaign

Skills to add

• Program roadmapping and stakeholder reporting
• Hiring and team leadership
• Audit and regulator relationship management
• CISM

Have this on your resume first

A cross-team program you led, such as a joiner-mover-leaver automation or PAM rollout, with what shipped and how the next audit went.

GRC analyst

Career change102 open US jobs$108K-$147K advertised

Access reviews and separation of duties make up a big share of the IT controls auditors test. You know how they work under the hood, which most GRC (governance, risk and compliance) hires learn on the job.

Usually when

Year 2 to 4. It suits people who found access reviews and audit evidence more interesting than platform work.

Skills to add

• SOX ITGC testing
• NIST 800-53 and ISO 27001 control frameworks
• Risk assessment and control documentation
• CISA or CRISC

Have this on your resume first

An audit you supported that closed clean, or an access certification or separation-of-duties process you designed and ran.

Solutions architect

Career change9,656 open US jobs$108K-$156K advertised

Identity vendors and integrators want people who've deployed the product somewhere messy. Most customer discovery calls are questions you've already answered for your own company.

Usually when

After 4 to 6 years of hands-on work on one major identity platform

Skills to add

• Discovery calls and requirements gathering with customers
• Demo and proof-of-concept building
• Writing statements of work and solution designs
• Platform certifications such as Okta Certified Professional or CyberArk Defender

Have this on your resume first

Deep implementation history on one platform, with the number of applications you onboarded and at least one integration you designed.

See the solutions architect career path