About Compugen Compugen is Canada's largest privately-owned Technology Ally. To innovate industries, transform businesses, connect communities, and drive meaningful change, we must think bigger, reach broader, and act bolder. Through knowledge, curiosity, and collaboration, Compugen helps organizations delivering experience by design. This is what it means to be human-centered and technology-enabled.

Dreaming, designing, and delivering isn't just a mantra for us — it's a way of life. We believe that technology is the conduit, but our people – they are the connection that truly makes the magic happen!

Our Culture We are a human-centered culture where we prioritize your well-being and are invested in helping you reach your fullest potential. We're not only focused on achieving our goals — we're dedicated to helping you achieve yours.

If you're relentlessly curious, driven to make a difference, and collaborative at the core, then you belong with us.

Position Overview

We are seeking an experienced Senior Identity and Access Management (IAM) Security Architect to lead the design and evolution of enterprise identity security solutions, with a particular focus on emerging Agentic AI technologies.

The ideal candidate will bring deep expertise in enterprise IAM architecture, including authentication, authorization, identity federation, privileged access management, identity governance, and workload identities across complex hybrid and cloud environments.

This role requires a strong understanding of modern AI-driven architectures, particularly how autonomous AI agents securely authenticate, access enterprise resources, interact with other agents, and perform actions on behalf of users.

The successful candidate will work closely with enterprise architecture, cybersecurity, cloud, and AI engineering teams to establish scalable, secure, and governed identity frameworks supporting both traditional enterprise systems and emerging AI capabilities.

Key Responsibilities: Enterprise IAM Architecture

- Design, develop, and maintain enterprise IAM architectures supporting on-premises, cloud, and hybrid environments.
- Define secure authentication, authorization, identity federation, and access management patterns.
- Establish identity security standards for users, applications, services, workloads, and non-human identities.
- Provide architectural guidance on Privileged Access Management (PAM), Identity Governance and Administration (IGA), Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
- Design identity lifecycle management,



access provisioning, and least-privilege access models.
- Evaluate existing IAM environments, identify security gaps, and recommend architectural improvements.

Agentic AI &

- Modern Identity Security

- Develop identity and access management architecture patterns supporting autonomous AI agents and AI-enabled enterprise applications.
- Define secure authentication and authorization mechanisms for AI agents, service identities, and machine-to-machine interactions.
- Establish security controls governing how AI agents access enterprise systems, applications, APIs, and sensitive information.
- Design identity propagation, delegated authorization, and access control models for AI agents acting on behalf of human users.
- Evaluate security considerations associated with agent-to-agent communication and emerging protocols, including Model Context Protocol (MCP) and Agent2Agent (A2A).
- Define governance, monitoring, and auditing requirements for AI agent identities and activities.
- Collaborate with AI engineering and cybersecurity teams to mitigate identity-related risks associated with autonomous agents.

Security Architecture &

- Governance

- Ensure IAM architecture aligns with enterprise security standards, Zero Trust principles, and regulatory requirements.
- Conduct architecture reviews, risk assessments, and security design evaluations.
- Develop IAM reference architectures, security patterns, technical standards, and architectural documentation.
- Provide recommendations for securing privileged access, workload identities, API integrations, and cross-platform authentication.
- Collaborate with technical stakeholders to ensure identity security controls are incorporated into new and existing solutions.

Cloud &

- Azure Security (Asset)

- Support secure identity architecture across Microsoft Azure and hybrid cloud environments.
- Provide guidance on Microsoft Entra ID, Managed Identities, Conditional Access, Azure RBAC, and workload identity federation.
- Evaluate cloud-native security capabilities, including Azure Key Vault, monitoring, and compliance services.




- Apply Zero Trust principles to cloud identity and access management designs.

Skills &

Qualifications

- Extensive experience in enterprise Identity and Access Management (IAM) architecture, preferably within large, complex organizations.
- Proven ability to design enterprise authentication, authorization, federation, and identity governance solutions.
- Robust understanding of privileged access management, identity lifecycle management, and least-privilege security principles.
- Experience designing secure identity solutions across hybrid, multi-cloud, or distributed enterprise environments.
- Strong understanding of modern identity standards and protocols, including OAuth 2.0, OpenID Connect (OIDC), and SAML.
- Knowledge of workload identities, service identities, machine-to-machine authentication, and delegated authorization.
- Strong understanding of Agentic AI architectures and the identity security challenges associated with autonomous AI agents.
- Familiarity with AI agent communication and integration patterns, including MCP and A2A.
- Ability to translate complex security requirements into practical enterprise architecture solutions.
- Strong communication, documentation, and stakeholder engagement skills.

Preferred Qualifications

- Hands-on experience with Microsoft Azure security architecture and Microsoft Entra ID.
- Experience with Azure Managed Identities, Conditional Access, RBAC, Key Vault, and workload identity federation.
- Knowledge of Zero Trust architecture and cloud-native security practices.
- Experience with enterprise IAM platforms such as Microsoft Entra ID, Okta, Ping Identity, SailPoint, CyberArk, or similar technologies.
- Exposure to Microsoft Copilot, AI agent frameworks, or enterprise GenAI implementations.
- Relevant certifications in cybersecurity, cloud security, IAM, or enterprise architecture.

Equity Statement At Compugen, we are committed to diversity, equity and inclusion. We actively recruit from all groups, including women, Indigenous people, persons with disabilities and members of visible minorities. We recognize the importance of removing barriers to participation and provide accommodation upon request to all applicants throughout the recruitment process. If you require an accommodation, our People &

- Culture representative will work with you to meet your needs in a confidential and respectful manner. We believe everyone deserves a seat at the table-and we are taking deliberate action to make this a reality.

#ITR

#CompugenITR

📌 Senior IAM Security Architect – Agentic AI - Contract (Arizona)
🏢 Compugen
📍 Arizona