🔐 Security Titles

Identity and Access Management Professional Titles


This page provides standardized job titles, responsibilities, and expectations for IAM professionals. These roles ensure secure identity lifecycle management, authentication, privileged access control, and identity threat detection across the enterprise.
How to use these tables:

IGA Analyst

Professionals who manage identity lifecycle and governance processes including joiner-mover-leaver workflows, provisioning/de-provisioning, role management (RBAC/ABAC), access certification and attestation, Separation of Duties (SoD) policy enforcement, and identity data quality. Focus on ensuring the right people have the right access at the right time while maintaining compliance and reducing identity-related risk.

Attribute Analyst 1 / Entry Analyst 2 / Junior Analyst 3 / Mid Analyst 4 / Senior / Lead Analyst 5 / Staff Analyst 6 / Senior Staff Analyst 7 / Principal
General Description Entry-level IGA analyst learning identity governance fundamentals and lifecycle management processes. Assists with access requests, certification campaigns, and identity data maintenance. Develops foundational understanding of provisioning workflows, role-based access control, and governance concepts. Junior IGA analyst capable of independently managing access requests and supporting governance processes. Demonstrates proficiency in IGA platform operations and can conduct access certifications. Begins participating in role engineering and SoD policy analysis. Experienced IGA analyst who independently manages comprehensive governance programs. Expert in role engineering, certification campaigns, and SoD policy management. Leads governance initiatives and works with business stakeholders to design access models. Mentors junior analysts and shapes governance methodology. Senior IGA analyst and team leader who defines enterprise identity governance strategy. Expert in complex role models, governance automation, and compliance integration. Leads governance transformation initiatives and advises executive leadership on identity governance matters. Builds programs that balance security, compliance, and business enablement. Distinguished IGA professional who shapes organizational and industry approaches to identity governance. Recognized externally as thought leader in governance frameworks, role engineering, or compliance integration. Elite IGA professional with industry-defining influence. Shapes governance standards and regulatory approaches to identity management. Legendary practitioner at the pinnacle of identity governance expertise. Globally recognized authority who shapes governance frameworks and compliance approaches worldwide.
Primary Responsibilities
  • Process routine access requests and approvals
  • Assist with access certification campaigns
  • Help maintain identity data quality
  • Learn IGA platform operations
  • Document joiner-mover-leaver processes
  • Support role catalog maintenance
  • Track access request SLAs
  • Shadow senior analysts on governance activities
  • Assist with access reviews and attestation
  • Manage access requests and provisioning independently
  • Conduct access certification campaigns
  • Perform identity data quality analysis
  • Support role engineering activities
  • Analyze SoD conflicts and violations
  • Develop governance reports and metrics
  • Coordinate with HR on lifecycle events
  • Troubleshoot provisioning issues
  • Support audit evidence collection
  • Maintain role catalog documentation
  • Lead access certification program
  • Design and maintain enterprise role model
  • Develop and enforce SoD policies
  • Manage complex provisioning workflows
  • Lead identity data quality initiatives
  • Mentor junior IGA analysts
  • Present governance metrics to leadership
  • Coordinate with audit on identity controls
  • Drive birthright access optimization
  • Lead role mining and engineering projects
  • Develop governance automation requirements
  • Define enterprise IGA strategy
  • Lead governance transformation initiatives
  • Design enterprise role model architecture
  • Build governance automation frameworks
  • Mentor and develop IGA analyst team
  • Present governance posture to executives
  • Coordinate with legal and compliance on regulations
  • Evaluate and select IGA platforms
  • Lead M&A identity governance integration
  • Drive cloud and SaaS governance adoption
  • Shape industry governance practices
  • Define multi-year IGA vision
  • Lead industry-impacting governance initiatives
  • Build strategic vendor partnerships
  • Develop next-generation governance capabilities
  • Represent organization at highest levels
  • Shape industry governance standards
  • Advise executive leadership on governance strategy
  • Set multi-year vision for enterprise identity governance
  • Lead transformational governance initiatives
  • Influence regulatory and standards frameworks
  • Guide organizational strategy
  • Represent organization as premier governance authority
  • Define industry direction for identity governance
  • Lead transformational initiatives
  • Shape regulatory frameworks globally
  • Represent organization at highest levels globally
Required Skills
  • Understanding of identity lifecycle concepts
  • Basic knowledge of RBAC principles
  • Familiarity with access request workflows
  • Documentation and organization skills
  • Attention to detail
  • Basic understanding of HR systems integration
  • Communication skills
  • IGA platform proficiency
  • Access certification management
  • Role-based access control implementation
  • SoD concept understanding
  • Identity data analysis
  • Governance reporting
  • HR system integration understanding
  • Stakeholder communication
  • Advanced role engineering (RBAC/ABAC)
  • SoD policy design and enforcement
  • Certification program management
  • Governance metrics and reporting
  • Stakeholder management
  • Process optimization
  • Audit coordination
  • Cross-functional collaboration
  • Enterprise IGA strategy
  • Governance program leadership
  • Executive communication
  • Team leadership and development
  • Vendor evaluation and management
  • Regulatory compliance expertise
  • Cloud identity governance
  • Change management
  • World-class IGA expertise
  • Strategic practice leadership
  • Executive and board presence
  • Industry-wide recognition
  • Innovation leadership
  • Elite IGA expertise
  • Transformational leadership
  • Board-level communication
  • Industry-shaping influence
  • Globally recognized expertise
  • Transformational vision
  • Industry-defining thought leadership
Preferred Skills
  • Exposure to IGA platforms (SailPoint, Saviynt, Oracle)
  • Basic SQL or reporting skills
  • ITIL awareness
  • HR process understanding
  • Audit or compliance exposure
  • Multiple IGA platform exposure
  • SQL and data analysis
  • ABAC concepts
  • Compliance framework knowledge
  • Scripting basics
  • Role mining tools and techniques
  • Identity analytics
  • Machine identity governance
  • Cloud entitlement management
  • SaaS access governance
  • Machine identity governance
  • Identity analytics integration
  • Published governance frameworks
  • Industry working group participation
  • Governance automation development
  • Published governance frameworks
  • Standards body participation
  • Vendor advisory roles
  • Major framework contributions
  • Regulatory advisory roles
  • Created major governance frameworks
  • Regulatory advisory at highest levels
Mentorship Requirements Receives direct mentorship from Senior IGA analysts. Shadows on certification campaigns and governance processes. Expected to complete IGA platform training within first year. Learns how governance enables business while managing risk. Receives guidance from Senior analysts on complex governance matters. Expected to begin mentoring Entry-level analysts. Contributes to process documentation. Should be developing expertise in specific governance domains. Primary mentor for Junior and Entry analysts. Leads training on governance processes. Expected to develop team standards. Establishes reputation as governance expert. Primary mentor for Mid and Junior analysts. Responsible for team career development. Creates governance training programs. Industry mentorship through community engagement. Mentors Senior analysts and emerging leaders. Shapes organizational IGA talent strategy. Develops thought leaders in governance. Develops organizational leadership pipeline. Legacy-building through lasting contributions. Develops organizational and industry leadership. Legacy-building through generational impact.
Impact Scope Individual contributor on assigned access management tasks. Impact limited to supporting governance activities. Work is reviewed before implementation. Supports overall identity governance coverage. Directly contributes to governance effectiveness. Responsible for accurate provisioning and certification. Beginning to influence governance practices and role design. Shapes organizational access governance. Role model impacts provisioning accuracy and efficiency. SoD enforcement reduces compliance risk. Certification program ensures appropriate access. Defines governance capabilities and strategy. Program effectiveness directly impacts compliance and risk posture. Team development impacts IAM maturity. Industry and organizational transformation. Shapes how identity governance is practiced. Industry-defining impact. Shapes governance practices globally. Global industry impact. Shapes governance practices worldwide.
Autonomy & Decision Authority Works under close supervision. Follows established provisioning procedures. Limited authority to make access decisions independently. Escalates exceptions and policy questions. Works with moderate supervision. Can make routine access decisions. Authority to manage standard certifications. Escalates role changes and policy exceptions. Works independently with strategic guidance. Makes significant governance decisions. Authority over role model and certification processes. Consulted on policy exceptions. High autonomy with strategic alignment. Makes significant program decisions. Authority over governance standards and methodology. Trusted advisor on policy matters. Near-complete autonomy over domain. Strategic influence on organizational direction. Full autonomy over strategic domain. Executive-level authority. Complete strategic autonomy.
Communication & Stakeholders Primarily internal communication with IGA team. Documents requests and findings. Limited direct interaction with business stakeholders initially. Regular interaction with business application owners. Coordinates certification campaigns. Participates in governance meetings. Regular communication with business and security leadership. Presents to executive stakeholders. Primary governance contact for audit. Executive-level communication on governance. Represents IGA to organizational leadership. Manages auditor relationships. C-suite and board engagement. Industry-wide influence. Peer engagement with executives and boards. Industry-defining thought leadership. Global presence. Premier industry venues.
Degree / Experience Bachelor's degree in Information Systems, Business, Cybersecurity, or related field, OR 1-2 years of IT, security, or business operations experience. Bachelor's degree in relevant field, OR 2-4 years of IGA or IAM experience. Demonstrated ability to manage governance processes. Bachelor's degree in relevant field, OR 4-6 years of IGA experience. Demonstrated track record of governance program success. Bachelor's or Master's degree in relevant field, OR 6-10 years of IGA experience. Demonstrated program leadership. Advanced degree often expected, OR 10+ years of elite IGA experience with industry impact. Advanced degree often present, but recognition is primary. 12+ years of elite experience. Recognition is primary qualification. 15+ years with transformational impact.
Certifications
  • CompTIA Security+
  • Platform certifications (SailPoint, Saviynt basics)
  • ITIL Foundation
  • Identity Management Institute (IMI) certifications
  • Platform certifications (SailPoint IdentityNow, Saviynt)
  • CAMS (Certified Access Management Specialist)
  • CIAM or CIGE certifications
  • SOC 2 awareness
  • CISM or CISSP
  • Advanced platform certifications
  • CIGE (Certified Identity Governance Expert)
  • Industry certifications
  • CISM, CISSP
  • Multiple platform certifications
  • Industry recognition often substitutes
  • Certifications secondary to demonstrated expertise
  • May be framework contributors
  • Certifications irrelevant at this level
  • Known by reputation
  • Certifications irrelevant at this level
  • Known by reputation and legacy
Salary: US Gov't $55,000 - $75,000 (GS-7 to GS-9) $70,000 - $95,000 (GS-9 to GS-11) $90,000 - $120,000 (GS-11 to GS-13) $115,000 - $150,000 (GS-13 to GS-14) $140,000 - $175,000 (GS-15 / SES equivalent) $165,000 - $210,000 (Senior SES equivalent) $185,000 - $240,000+ (Senior SES equivalent)
Salary: US Startup $60,000 - $85,000 $80,000 - $110,000 $105,000 - $145,000 $140,000 - $190,000 + equity $175,000 - $240,000 + significant equity $215,000 - $295,000 + major equity $260,000 - $370,000+ + founder-level equity
Salary: US Corporate $58,000 - $80,000 $75,000 - $105,000 $100,000 - $135,000 $130,000 - $175,000 $165,000 - $225,000 $200,000 - $270,000 $245,000 - $330,000+
↑ Back to navigation

Access Management Engineer

Technical professionals who implement and maintain authentication and access management infrastructure. Focus on authentication mechanisms (MFA, passwordless), single sign-on (SSO), federation protocols (SAML, OIDC, OAuth), adaptive/risk-based access, session management, and policy enforcement. Build the systems that verify identity and enforce access decisions.

Attribute Eng 1 / Entry Eng 2 / Junior Eng 3 / Mid Eng 4 / Senior / Lead Eng 5 / Staff Eng 6 / Senior Staff Eng 7 / Principal
General Description Entry-level access management engineer learning authentication systems and federation protocols. Assists with SSO configuration, MFA deployment, and access policy implementation. Develops foundational understanding of authentication flows, identity federation, and access management platforms. Junior access management engineer capable of independently implementing SSO integrations and managing MFA systems. Demonstrates proficiency with federation protocols and can troubleshoot authentication issues. Begins developing adaptive access policies and automation. Experienced access management engineer who independently designs and implements authentication solutions. Expert in federation protocols, adaptive access, and identity provider architecture. Leads complex SSO integrations and builds authentication automation. Mentors junior engineers and shapes access management standards. Senior access management engineer and team leader who defines authentication strategy. Expert in modern authentication architectures including zero trust, passwordless, and adaptive access. Leads access management transformation and advises on enterprise authentication strategy. Distinguished access management engineer who shapes organizational and industry approaches to authentication. Recognized externally for technical innovation in authentication architectures, federation, or passwordless technologies. Elite access management engineer with industry-defining influence. Shapes authentication standards and practices globally. Legendary practitioner at the pinnacle of access management expertise. Globally recognized authority who shapes authentication standards and technologies worldwide. May have contributed to foundational authentication protocols or standards.
Primary Responsibilities
  • Assist with SSO application integrations
  • Support MFA enrollment and troubleshooting
  • Learn federation protocols (SAML, OIDC)
  • Help maintain access management documentation
  • Support user access troubleshooting
  • Monitor authentication system health
  • Document access policies and configurations
  • Shadow senior engineers on implementations
  • Assist with access platform administration
  • Implement SSO integrations independently
  • Configure and manage MFA solutions
  • Troubleshoot authentication and federation issues
  • Develop SAML and OIDC configurations
  • Build access policies and rules
  • Support conditional access implementation
  • Create authentication documentation
  • Monitor access management metrics
  • Assist with access platform upgrades
  • Develop basic authentication automation
  • Design authentication architectures
  • Lead complex federation implementations
  • Build adaptive/risk-based access policies
  • Develop authentication automation
  • Implement passwordless authentication
  • Mentor junior access management engineers
  • Create access management standards
  • Lead IdP platform optimization
  • Design B2B federation relationships
  • Integrate authentication with security tools
  • Evaluate emerging authentication technologies
  • Define enterprise access management strategy
  • Lead authentication transformation initiatives
  • Design zero trust authentication architecture
  • Build passwordless authentication programs
  • Mentor and develop access management team
  • Present authentication strategy to executives
  • Evaluate and select authentication platforms
  • Lead vendor relationships
  • Drive authentication standards adoption
  • Support M&A identity integration
  • Contribute to industry authentication practices
  • Define multi-year authentication vision
  • Lead industry-impacting authentication initiatives
  • Build strategic vendor partnerships
  • Develop next-generation authentication capabilities
  • Represent organization at highest technical levels
  • Shape industry authentication standards
  • Set multi-year vision for enterprise authentication
  • Lead transformational authentication initiatives
  • Influence authentication standards
  • Guide organizational strategy
  • Represent organization as premier authentication authority
  • Define industry direction for authentication
  • Lead transformational initiatives
  • Shape authentication standards globally
  • Represent organization at highest levels globally
Required Skills
  • Understanding of authentication concepts
  • Basic knowledge of SSO and federation
  • Familiarity with MFA technologies
  • HTTP/HTTPS and web protocols
  • Basic troubleshooting skills
  • Documentation abilities
  • Communication skills
  • SSO implementation proficiency
  • Federation protocols (SAML, OIDC, OAuth)
  • MFA administration and troubleshooting
  • Access policy configuration
  • Authentication debugging
  • Platform administration
  • Scripting for automation
  • Stakeholder communication
  • Advanced federation architecture
  • Adaptive/risk-based access design
  • Passwordless authentication implementation
  • Authentication automation development
  • B2B/B2C federation patterns
  • Security integration
  • Technical leadership
  • Cross-team collaboration
  • Enterprise authentication strategy
  • Zero trust authentication architecture
  • Team leadership and development
  • Executive communication
  • Vendor evaluation and management
  • Modern authentication patterns
  • Cross-functional influence
  • World-class authentication expertise
  • Strategic technical leadership
  • Executive presence
  • Industry-wide recognition
  • Innovation leadership
  • Elite authentication expertise
  • Transformational leadership
  • Executive-level communication
  • Industry-shaping influence
  • Globally recognized technical expertise
  • Transformational vision
  • Industry-defining thought leadership
Preferred Skills
  • Exposure to Okta, Azure AD, or Ping
  • Basic scripting (PowerShell, Python)
  • LDAP/Active Directory basics
  • Web application architecture
  • Certificate management basics
  • Multiple IdP platform experience
  • Conditional/adaptive access
  • API authentication
  • Cloud identity integration
  • Certificate management
  • FIDO2/WebAuthn expertise
  • Zero trust authentication
  • API gateway integration
  • Cloud-native authentication
  • Identity proofing integration
  • Published authentication research
  • Conference speaking
  • Standards body participation
  • Vendor advisory relationships
  • FIDO Alliance participation
  • Authentication standards contributions
  • Published research
  • Major standards contributions
  • Vendor advisory leadership
  • Major protocol or standard author
  • FIDO Alliance leadership
Mentorship Requirements Receives direct mentorship from Senior access management engineers. Shadows on SSO integrations and MFA deployments. Expected to achieve platform certification within first year. Learns how access management enables secure, frictionless user experience. Receives guidance from Senior engineers on complex integrations. Expected to begin mentoring Entry-level engineers. Contributes to platform documentation. Primary mentor for Junior and Entry engineers. Leads training on authentication technologies. Expected to develop team standards. Primary mentor for Mid and Junior engineers. Responsible for team career development. Industry mentorship through community engagement. Mentors Senior engineers and emerging leaders. Develops thought leaders in authentication. Develops organizational leadership pipeline. Legacy-building. Develops organizational and industry leadership. Legacy-building through generational impact.
Impact Scope Individual contributor on assigned access tasks. Impact limited to supporting authentication operations. Work is reviewed before deployment. Directly contributes to authentication infrastructure. Responsible for reliable SSO and MFA operations. Beginning to influence access management practices. Shapes authentication infrastructure. Federation architecture impacts security and user experience. Automation improves operational efficiency. Defines authentication capabilities and strategy. Team development impacts IAM maturity. Industry and organizational transformation. Shapes authentication practices. Industry-defining impact. Shapes authentication globally. Global industry impact. Shapes authentication worldwide.
Autonomy & Decision Authority Works under close supervision. Follows established procedures. Limited authority to make configuration changes. Escalates issues to senior engineers. Works with moderate supervision. Can make routine configuration decisions. Authority to implement standard integrations. Escalates complex federation scenarios. Works independently with strategic guidance. Makes significant architecture decisions. Authority over authentication standards. High autonomy with strategic alignment. Makes significant platform decisions. Authority over authentication standards. Near-complete autonomy over domain. Strategic influence. Full autonomy. Executive-level authority. Complete strategic autonomy.
Communication & Stakeholders Primarily internal communication with IAM team. Documents configurations. Limited application team interaction initially. Regular interaction with application teams. Coordinates SSO integrations. Participates in access planning discussions. Regular communication with security and application leadership. Presents technical strategies. Primary access management contact. Executive-level communication. Represents access management to leadership. C-suite engagement. Industry-wide influence. Peer engagement with executives. Industry-defining thought leadership. Global presence. Premier industry venues.
Degree / Experience Bachelor's degree in Computer Science, IT, Cybersecurity, or related field, OR 1-2 years of IT or IAM experience. Bachelor's degree in relevant field, OR 2-4 years of access management or IAM experience. Bachelor's degree in relevant field, OR 4-6 years of access management experience. Bachelor's or Master's degree in relevant field, OR 6-10 years of access management experience. Advanced degree often expected, OR 10+ years of elite access management experience. Advanced degree often present, but recognition is primary. 12+ years of elite experience. Recognition is primary qualification. 15+ years with transformational impact.
Certifications
  • CompTIA Security+
  • Platform certifications (Okta, Azure AD basics)
  • ITIL Foundation
  • Microsoft identity certifications
  • Platform certifications (Okta Professional, Azure AD)
  • Microsoft SC-300 or equivalent
  • CISSP or CISM (helpful)
  • Advanced platform certifications
  • CISSP or CISM
  • Cloud security certifications
  • Multiple advanced certifications
  • Industry recognition often substitutes
  • Certifications secondary to demonstrated expertise
  • Certifications irrelevant at this level
  • Certifications irrelevant at this level
  • Known by contributions and legacy
Salary: US Gov't $60,000 - $80,000 (GS-9 to GS-11) $75,000 - $100,000 (GS-11 to GS-12) $95,000 - $125,000 (GS-12 to GS-13) $120,000 - $155,000 (GS-13 to GS-14) $145,000 - $180,000 (GS-15 / SES equivalent) $170,000 - $215,000 (Senior SES equivalent) $190,000 - $250,000+ (Senior SES equivalent)
Salary: US Startup $70,000 - $95,000 $90,000 - $125,000 $120,000 - $160,000 $150,000 - $200,000 + equity $185,000 - $255,000 + significant equity $230,000 - $315,000 + major equity $275,000 - $390,000+ + founder-level equity
Salary: US Corporate $65,000 - $90,000 $85,000 - $115,000 $110,000 - $150,000 $140,000 - $185,000 $175,000 - $240,000 $215,000 - $285,000 $260,000 - $350,000+
↑ Back to navigation

PAM Engineer

Technical professionals who implement and manage privileged access management infrastructure. Focus on privileged account control, credential vaulting, session recording and monitoring, just-in-time (JIT) access, least privilege enforcement, and privileged access workstation (PAW) controls. Protect the most sensitive access in the enterprise by securing administrative and service accounts.

Attribute Eng 1 / Entry Eng 2 / Junior Eng 3 / Mid Eng 4 / Senior / Lead Eng 5 / Staff Eng 6 / Senior Staff Eng 7 / Principal
General Description Entry-level PAM engineer learning privileged access management fundamentals and vault operations. Assists with credential management, access requests, and basic platform administration. Develops foundational understanding of privileged account security, vaulting concepts, and session management. Junior PAM engineer capable of independently managing credential vaulting and privileged access requests. Demonstrates proficiency with PAM platform operations and can implement account onboarding. Begins developing automation for credential rotation and access workflows. Experienced PAM engineer who independently designs and implements privileged access solutions. Expert in vault architecture, JIT access, session recording, and least privilege enforcement. Leads PAM onboarding programs and develops automation. Mentors junior engineers and shapes PAM standards. Senior PAM engineer and team leader who defines privileged access strategy. Expert in enterprise PAM architecture, zero trust privileged access, and DevSecOps secrets management. Leads PAM transformation and advises on privileged access risk reduction. Distinguished PAM engineer who shapes organizational and industry approaches to privileged access. Recognized externally for technical innovation in PAM architecture, secrets management, or zero trust privileged access. Elite PAM engineer with industry-defining influence. Shapes privileged access standards and practices globally. Legendary practitioner at the pinnacle of PAM expertise. Globally recognized authority who shapes privileged access approaches worldwide.
Primary Responsibilities
  • Assist with privileged credential requests
  • Support vault platform administration
  • Learn credential rotation procedures
  • Help maintain PAM documentation
  • Monitor privileged session alerts
  • Support PAM onboarding activities
  • Document privileged access policies
  • Shadow senior engineers on implementations
  • Assist with access reviews for privileged accounts
  • Manage privileged credential vaulting
  • Implement account onboarding to vault
  • Configure credential rotation policies
  • Troubleshoot privileged access issues
  • Support session recording configuration
  • Develop PAM automation scripts
  • Create privileged access documentation
  • Monitor vault health and performance
  • Assist with PAM platform upgrades
  • Support privileged access reviews
  • Design PAM architecture and solutions
  • Implement just-in-time privileged access
  • Build session recording and monitoring
  • Develop PAM automation frameworks
  • Lead privileged account discovery
  • Mentor junior PAM engineers
  • Create PAM standards and procedures
  • Implement service account management
  • Design privileged access workstation controls
  • Integrate PAM with SIEM and security tools
  • Lead secrets management integration
  • Define enterprise PAM strategy
  • Lead PAM transformation initiatives
  • Design zero trust privileged access
  • Build secrets management programs
  • Mentor and develop PAM team
  • Present PAM strategy to executives
  • Evaluate and select PAM platforms
  • Lead vendor relationships
  • Drive privileged access risk reduction
  • Support M&A PAM integration
  • Contribute to industry PAM practices
  • Define multi-year PAM vision
  • Lead industry-impacting PAM initiatives
  • Build strategic vendor partnerships
  • Develop next-generation PAM capabilities
  • Represent organization at highest technical levels
  • Shape industry PAM standards
  • Set multi-year vision for enterprise PAM
  • Lead transformational PAM initiatives
  • Influence PAM standards
  • Guide organizational strategy
  • Represent organization as premier PAM authority
  • Define industry direction for privileged access
  • Lead transformational initiatives
  • Shape PAM standards globally
  • Represent organization at highest levels globally
Required Skills
  • Understanding of privileged access concepts
  • Basic knowledge of vaulting technologies
  • Familiarity with administrative accounts
  • Windows/Linux system administration basics
  • Documentation skills
  • Attention to detail
  • Communication skills
  • PAM platform proficiency
  • Credential vaulting implementation
  • Rotation policy configuration
  • Session management basics
  • Scripting for automation
  • Troubleshooting skills
  • Platform administration
  • Stakeholder communication
  • Advanced PAM architecture
  • JIT access implementation
  • Session recording and analytics
  • PAM automation development
  • Service account management
  • Secrets management integration
  • Technical leadership
  • Cross-team collaboration
  • Enterprise PAM strategy
  • Zero trust privileged access
  • Team leadership and development
  • Executive communication
  • Vendor evaluation and management
  • DevSecOps secrets integration
  • Cross-functional influence
  • World-class PAM expertise
  • Strategic technical leadership
  • Executive presence
  • Industry-wide recognition
  • Innovation leadership
  • Elite PAM expertise
  • Transformational leadership
  • Executive-level communication
  • Industry-shaping influence
  • Globally recognized technical expertise
  • Transformational vision
  • Industry-defining thought leadership
Preferred Skills
  • Exposure to CyberArk, BeyondTrust, or Delinea
  • Active Directory administration
  • Basic scripting
  • Database administration basics
  • Network device administration exposure
  • Multiple PAM platform exposure
  • Service account management
  • Database privileged access
  • Cloud privileged access
  • API integration
  • Cloud PAM (AWS, Azure, GCP)
  • DevOps secrets management
  • Zero trust privileged access
  • Machine identity management
  • PAW implementation
  • Published PAM research
  • Conference speaking
  • Vendor advisory relationships
  • Machine identity expertise
  • Published PAM frameworks
  • Standards body participation
  • Vendor advisory roles
  • Major framework contributions
  • Vendor advisory leadership
  • Founded major PAM approaches
  • Industry advisory at highest levels
Mentorship Requirements Receives direct mentorship from Senior PAM engineers. Shadows on vault implementations and credential management. Expected to achieve PAM platform certification within first year. Learns critical importance of protecting privileged access. Receives guidance from Senior engineers on complex implementations. Expected to begin mentoring Entry-level engineers. Contributes to platform documentation. Primary mentor for Junior and Entry engineers. Leads training on PAM technologies. Expected to develop team standards. Primary mentor for Mid and Junior engineers. Responsible for team career development. Industry mentorship. Mentors Senior engineers and emerging leaders. Develops thought leaders in PAM. Develops organizational leadership pipeline. Legacy-building. Develops organizational and industry leadership. Legacy-building through generational impact.
Impact Scope Individual contributor on assigned PAM tasks. Impact limited to supporting vault operations. Work is reviewed before implementation. Directly contributes to privileged access security. Responsible for reliable vault operations. Beginning to influence PAM practices. Shapes privileged access infrastructure. PAM architecture directly impacts security posture. Automation improves operational efficiency. Defines PAM capabilities and strategy. Team development impacts security maturity. Industry and organizational transformation. Shapes PAM practices. Industry-defining impact. Shapes PAM globally. Global industry impact. Shapes privileged access worldwide.
Autonomy & Decision Authority Works under close supervision. Follows established procedures strictly. Limited authority due to sensitivity of privileged access. Escalates all exceptions. Works with moderate supervision. Can make routine vaulting decisions. Authority to implement standard onboarding. Escalates policy exceptions. Works independently with strategic guidance. Makes significant architecture decisions. Authority over PAM standards. High autonomy with strategic alignment. Makes significant platform decisions. Authority over PAM standards. Near-complete autonomy over domain. Strategic influence. Full autonomy. Executive-level authority. Complete strategic autonomy.
Communication & Stakeholders Primarily internal communication with PAM team. Documents requests and configurations. Limited stakeholder interaction initially. Regular interaction with system administrators. Coordinates privileged access onboarding. Participates in PAM planning. Regular communication with security and infrastructure leadership. Presents technical strategies. Primary PAM contact. Executive-level communication. Represents PAM to leadership. C-suite engagement. Industry-wide influence. Peer engagement with executives. Industry-defining thought leadership. Global presence. Premier industry venues.
Degree / Experience Bachelor's degree in Computer Science, IT, Cybersecurity, or related field, OR 1-2 years of IT or security experience. Bachelor's degree in relevant field, OR 2-4 years of PAM or security experience. Bachelor's degree in relevant field, OR 4-6 years of PAM experience. Bachelor's or Master's degree in relevant field, OR 6-10 years of PAM experience. Advanced degree often expected, OR 10+ years of elite PAM experience. Advanced degree often present, but recognition is primary. 12+ years of elite experience. Recognition is primary qualification. 15+ years with transformational impact.
Certifications
  • CompTIA Security+
  • Platform certifications (CyberArk Trustee)
  • Microsoft certifications
  • Linux administration certifications
  • Platform certifications (CyberArk Defender, Sentry)
  • Cloud security certifications
  • CISSP or CISM (helpful)
  • Advanced platform certifications (CyberArk Guardian)
  • CISSP or CISM
  • Cloud security certifications
  • Multiple advanced certifications
  • Industry recognition often substitutes
  • Certifications secondary to demonstrated expertise
  • Certifications irrelevant at this level
  • Certifications irrelevant at this level
Salary: US Gov't $60,000 - $80,000 (GS-9 to GS-11) $75,000 - $100,000 (GS-11 to GS-12) $95,000 - $125,000 (GS-12 to GS-13) $120,000 - $155,000 (GS-13 to GS-14) $145,000 - $180,000 (GS-15 / SES equivalent) $170,000 - $215,000 (Senior SES equivalent) $190,000 - $250,000+ (Senior SES equivalent)
Salary: US Startup $70,000 - $95,000 $90,000 - $125,000 $120,000 - $165,000 $155,000 - $210,000 + equity $190,000 - $260,000 + significant equity $235,000 - $320,000 + major equity $280,000 - $400,000+ + founder-level equity
Salary: US Corporate $65,000 - $90,000 $85,000 - $115,000 $115,000 - $155,000 $145,000 - $195,000 $180,000 - $245,000 $220,000 - $295,000 $265,000 - $360,000+
↑ Back to navigation

Directory Services Engineer

Technical professionals who design, implement, and maintain enterprise directory services and identity stores. Focus on Active Directory, LDAP directories, identity synchronization, meta-directories, and authoritative data models. Build and maintain the foundational identity infrastructure that other IAM systems rely upon for identity data.

Attribute Eng 1 / Entry Eng 2 / Junior Eng 3 / Mid Eng 4 / Senior / Lead Eng 5 / Staff Eng 6 / Senior Staff Eng 7 / Principal
General Description Entry-level directory services engineer learning directory infrastructure and identity store management. Assists with AD administration, LDAP configuration, and identity data maintenance. Develops foundational understanding of directory architecture, schema design, and identity synchronization. Junior directory services engineer capable of independently managing directory operations and implementing configurations. Demonstrates proficiency with Active Directory and can troubleshoot replication and authentication issues. Begins working with identity synchronization and hybrid directory scenarios. Experienced directory services engineer who independently designs and implements directory architecture. Expert in AD, LDAP, hybrid identity, and identity synchronization. Leads directory projects and develops automation. Mentors junior engineers and shapes directory standards. Senior directory services engineer and team leader who defines enterprise directory strategy. Expert in multi-cloud directory architecture, identity data governance, and authoritative source design. Leads directory transformation and advises on foundational identity infrastructure. Distinguished directory services engineer who shapes organizational and industry approaches to directory infrastructure and identity data management. Elite directory services engineer with industry-defining influence. Legendary practitioner at the pinnacle of directory services expertise. Globally recognized authority.
Primary Responsibilities
  • Assist with Active Directory administration
  • Support user and group management
  • Learn LDAP concepts and operations
  • Help maintain directory documentation
  • Monitor directory health and replication
  • Support identity data quality tasks
  • Document directory configurations
  • Shadow senior engineers on implementations
  • Assist with directory troubleshooting
  • Manage Active Directory operations
  • Implement LDAP configurations
  • Troubleshoot directory replication
  • Configure identity synchronization
  • Manage Group Policy for security
  • Support Azure AD Connect operations
  • Develop directory automation scripts
  • Monitor directory performance
  • Assist with directory migrations
  • Document directory architecture
  • Design directory architecture
  • Lead hybrid identity implementations
  • Build identity synchronization solutions
  • Develop directory automation frameworks
  • Implement schema extensions
  • Mentor junior directory engineers
  • Create directory standards and procedures
  • Lead directory migrations
  • Design authoritative source models
  • Integrate directories with IAM systems
  • Evaluate directory technologies
  • Define enterprise directory strategy
  • Lead directory transformation initiatives
  • Design multi-cloud directory architecture
  • Build identity data governance programs
  • Mentor and develop directory team
  • Present directory strategy to executives
  • Evaluate and select directory technologies
  • Lead vendor relationships
  • Drive directory modernization
  • Support M&A directory integration
  • Contribute to industry practices
  • Define multi-year directory vision
  • Lead industry-impacting initiatives
  • Build strategic partnerships
  • Develop next-generation capabilities
  • Shape industry standards
  • Set multi-year enterprise vision
  • Lead transformational initiatives
  • Influence industry standards
  • Guide organizational strategy
  • Define industry direction
  • Shape standards globally
  • Represent organization globally
Required Skills
  • Active Directory fundamentals
  • Basic LDAP understanding
  • Windows Server administration
  • User and group management
  • DNS basics
  • Documentation skills
  • Troubleshooting aptitude
  • Active Directory administration
  • LDAP configuration and management
  • Directory replication troubleshooting
  • Identity synchronization
  • PowerShell automation
  • Group Policy management
  • Azure AD Connect
  • Stakeholder communication
  • Advanced AD architecture
  • Multi-forest and multi-domain design
  • Hybrid identity architecture
  • Identity synchronization design
  • Schema design and management
  • Meta-directory concepts
  • Technical leadership
  • Cross-team collaboration
  • Enterprise directory strategy
  • Multi-cloud directory architecture
  • Team leadership and development
  • Executive communication
  • Vendor evaluation
  • Identity data governance
  • Cross-functional influence
  • World-class directory expertise
  • Strategic technical leadership
  • Executive presence
  • Industry recognition
  • Elite directory expertise
  • Transformational leadership
  • Industry-shaping influence
  • Globally recognized expertise
  • Industry-defining thought leadership
Preferred Skills
  • PowerShell scripting
  • Azure AD/Entra basics
  • Linux/UNIX LDAP exposure
  • Group Policy basics
  • Certificate services exposure
  • Multi-forest AD experience
  • Schema extensions
  • PKI integration
  • Cloud directory services
  • Meta-directory concepts
  • Cloud-native directories
  • SCIM implementation
  • Virtual directory services
  • Identity data governance
  • Directory security hardening
  • Published directory research
  • Conference speaking
  • Microsoft MVP or similar
  • Microsoft MVP
  • Standards contributions
  • Major standards contributions
  • Protocol or standard author
Mentorship Requirements Receives direct mentorship from Senior directory engineers. Shadows on directory implementations. Expected to achieve AD certification within first year. Learns critical role of directory services as identity foundation. Receives guidance from Senior engineers on complex configurations. Expected to begin mentoring Entry-level engineers. Contributes to documentation. Primary mentor for Junior and Entry engineers. Leads training on directory technologies. Expected to develop team standards. Primary mentor for Mid and Junior engineers. Responsible for team career development. Mentors Senior engineers. Develops thought leaders. Develops leadership pipeline. Legacy-building. Legacy-building through generational impact.
Impact Scope Individual contributor on assigned directory tasks. Impact limited to supporting directory operations. Work is reviewed before implementation. Directly contributes to directory infrastructure. Responsible for reliable directory operations. Beginning to influence directory practices. Shapes directory infrastructure. Architecture decisions impact all identity systems. Synchronization design affects data quality. Defines directory capabilities and strategy. Foundation for all IAM systems. Industry and organizational transformation. Industry-defining impact. Global industry impact.
Autonomy & Decision Authority Works under close supervision. Follows established procedures. Limited authority to make changes. Escalates issues to senior engineers. Works with moderate supervision. Can make routine configuration decisions. Authority to manage standard operations. Escalates architectural changes. Works independently with strategic guidance. Makes significant architecture decisions. Authority over directory standards. High autonomy with strategic alignment. Makes significant platform decisions. Near-complete autonomy. Strategic influence. Full autonomy. Executive-level authority. Complete strategic autonomy.
Communication & Stakeholders Primarily internal communication with directory team. Documents configurations. Limited stakeholder interaction initially. Regular interaction with application and infrastructure teams. Coordinates directory integrations. Participates in planning discussions. Regular communication with IAM and infrastructure leadership. Presents technical strategies. Primary directory contact. Executive-level communication. Represents directory services to leadership. C-suite engagement. Industry-wide influence. Industry-defining thought leadership. Global presence.
Degree / Experience Bachelor's degree in Computer Science, IT, or related field, OR 1-2 years of IT or systems administration experience. Bachelor's degree in relevant field, OR 2-4 years of directory services or systems administration experience. Bachelor's degree in relevant field, OR 4-6 years of directory services experience. Bachelor's or Master's degree in relevant field, OR 6-10 years of directory services experience. Advanced degree often expected, OR 10+ years of elite experience. Recognition is primary. 12+ years elite experience. 15+ years with transformational impact.
Certifications
  • Microsoft certifications (AZ-800, AZ-801)
  • CompTIA Server+
  • MCSA/MCSE legacy certifications
  • Linux certifications (RHCSA)
  • Microsoft identity certifications
  • Azure AD certifications
  • Linux directory certifications
  • Advanced Microsoft certifications
  • Azure identity certifications
  • Cloud architect certifications
  • Multiple advanced certifications
  • Industry recognition often substitutes
  • Certifications secondary to expertise
  • Certifications irrelevant at this level
  • Known by reputation
Salary: US Gov't $60,000 - $80,000 (GS-9 to GS-11) $75,000 - $100,000 (GS-11 to GS-12) $95,000 - $125,000 (GS-12 to GS-13) $120,000 - $155,000 (GS-13 to GS-14) $145,000 - $180,000 (GS-15 / SES equivalent) $170,000 - $215,000 (Senior SES equivalent) $190,000 - $250,000+ (Senior SES equivalent)
Salary: US Startup $68,000 - $92,000 $88,000 - $120,000 $115,000 - $155,000 $145,000 - $195,000 + equity $180,000 - $250,000 + significant equity $225,000 - $310,000 + major equity $270,000 - $380,000+ + founder-level equity
Salary: US Corporate $65,000 - $88,000 $82,000 - $112,000 $108,000 - $145,000 $135,000 - $180,000 $170,000 - $235,000 $210,000 - $280,000 $255,000 - $345,000+
↑ Back to navigation

CIAM Engineer

Technical professionals who implement and manage customer-facing identity and access management systems. Focus on customer authentication, social login integration, consent and privacy management, user experience optimization, progressive profiling, and fraud risk integration. Build identity experiences that balance security, privacy, and frictionless customer engagement.

Attribute Eng 1 / Entry Eng 2 / Junior Eng 3 / Mid Eng 4 / Senior / Lead Eng 5 / Staff Eng 6 / Senior Staff Eng 7 / Principal
General Description Entry-level CIAM engineer learning customer identity fundamentals and consumer authentication patterns. Assists with social login configuration, consent management, and basic platform administration. Develops foundational understanding of customer identity flows, privacy requirements, and user experience considerations. Junior CIAM engineer capable of independently implementing customer authentication features and managing identity platform operations. Demonstrates proficiency with social login, consent management, and customer identity flows. Begins developing progressive profiling and fraud risk integration. Experienced CIAM engineer who independently designs and implements customer identity solutions. Expert in customer authentication, privacy compliance, and identity verification. Leads CIAM projects balancing security, privacy, and customer experience. Mentors junior engineers. Senior CIAM engineer and team leader who defines customer identity strategy. Expert in enterprise CIAM architecture, privacy-first design, and customer experience optimization. Leads CIAM transformation balancing business, security, and privacy. Distinguished CIAM engineer who shapes organizational and industry approaches to customer identity. Elite CIAM engineer with industry-defining influence. Legendary practitioner at the pinnacle of CIAM expertise. Globally recognized authority.
Primary Responsibilities
  • Assist with social login integrations
  • Support consent management configuration
  • Learn customer authentication flows
  • Help maintain CIAM documentation
  • Monitor customer authentication metrics
  • Support user registration workflows
  • Document CIAM configurations
  • Shadow senior engineers on implementations
  • Assist with customer identity troubleshooting
  • Implement social login integrations
  • Configure consent and preference management
  • Build customer registration flows
  • Develop progressive profiling features
  • Support identity verification integration
  • Create CIAM documentation
  • Monitor customer identity metrics
  • Troubleshoot authentication issues
  • Assist with fraud risk integration
  • Support A/B testing of identity flows
  • Design customer identity architecture
  • Lead CIAM platform implementations
  • Build identity verification integrations
  • Develop fraud risk integration
  • Implement privacy compliance features
  • Mentor junior CIAM engineers
  • Create CIAM standards
  • Lead customer identity migrations
  • Design passwordless customer auth
  • Integrate with marketing and analytics
  • Optimize identity conversion funnels
  • Define enterprise CIAM strategy
  • Lead CIAM transformation initiatives
  • Design privacy-first customer identity
  • Build fraud prevention programs
  • Mentor and develop CIAM team
  • Present CIAM strategy to executives
  • Evaluate and select CIAM platforms
  • Lead vendor relationships
  • Drive customer identity innovation
  • Support M&A customer identity integration
  • Define multi-year CIAM vision
  • Lead industry-impacting initiatives
  • Build strategic partnerships
  • Shape industry standards
  • Set multi-year vision
  • Lead transformational initiatives
  • Influence industry standards
  • Guide organizational strategy
  • Define industry direction
  • Shape standards globally
  • Represent organization globally
Required Skills
  • Understanding of consumer authentication
  • Basic OAuth/OIDC knowledge
  • Social login concepts
  • Privacy basics (GDPR, CCPA awareness)
  • Web development fundamentals
  • Documentation skills
  • Customer experience awareness
  • CIAM platform proficiency
  • Social login implementation
  • Consent management
  • OAuth/OIDC implementation
  • Privacy regulation compliance
  • Customer identity flows
  • API development
  • User experience awareness
  • Advanced CIAM architecture
  • Identity verification integration
  • Fraud risk integration
  • Privacy compliance (GDPR, CCPA)
  • Customer journey optimization
  • Technical leadership
  • Cross-functional collaboration
  • Data analytics
  • Enterprise CIAM strategy
  • Privacy-first architecture
  • Team leadership
  • Executive communication
  • Vendor management
  • Business impact analysis
  • Cross-functional influence
  • World-class CIAM expertise
  • Strategic leadership
  • Industry recognition
  • Elite CIAM expertise
  • Transformational leadership
  • Industry-shaping influence
  • Globally recognized expertise
  • Industry-defining thought leadership
Preferred Skills
  • Exposure to Auth0, Okta CIC, or ForgeRock
  • JavaScript/frontend development
  • API basics
  • Mobile authentication exposure
  • UX/UI awareness
  • Multiple CIAM platform exposure
  • Identity proofing integration
  • Fraud detection basics
  • Mobile SDK integration
  • Analytics integration
  • Machine learning fraud detection
  • Biometric authentication
  • Multi-brand CIAM
  • International privacy regulations
  • Customer data platforms
  • Published CIAM research
  • Conference speaking
  • Privacy technology innovation
  • Published frameworks
  • Standards contributions
  • Major standard contributions
  • Founded major CIAM innovations
Mentorship Requirements Receives direct mentorship from Senior CIAM engineers. Shadows on customer identity implementations. Learns balance between security, privacy, and user experience. Receives guidance from Senior engineers on complex implementations. Expected to begin mentoring Entry-level engineers. Primary mentor for Junior and Entry engineers. Leads training on CIAM technologies. Primary mentor for Mid and Junior engineers. Responsible for team development. Mentors Senior engineers. Develops thought leaders. Develops leadership pipeline. Legacy-building. Legacy-building through generational impact.
Impact Scope Individual contributor on assigned CIAM tasks. Impact limited to supporting customer identity operations. Directly contributes to customer identity experience. Beginning to influence CIAM practices. Shapes customer identity experience. Directly impacts customer conversion and satisfaction. Defines CIAM capabilities. Directly impacts customer trust and business revenue. Industry and organizational transformation. Industry-defining impact. Global industry impact.
Autonomy & Decision Authority Works under close supervision. Follows established procedures. Limited authority. Escalates issues. Works with moderate supervision. Can make routine configuration decisions. Escalates UX changes and privacy matters. Works independently with strategic guidance. Makes significant architecture decisions. High autonomy. Makes significant platform decisions. Near-complete autonomy. Strategic influence. Full autonomy. Executive authority. Complete strategic autonomy.
Communication & Stakeholders Primarily internal CIAM team communication. Limited product team interaction initially. Regular interaction with product and engineering teams. Coordinates customer identity features. Regular communication with product and security leadership. Primary CIAM contact. Executive-level communication. Represents CIAM to leadership. C-suite engagement. Industry influence. Industry-defining thought leadership. Global presence.
Degree / Experience Bachelor's degree in Computer Science, IT, or related field, OR 1-2 years of development or IAM experience. Bachelor's degree in relevant field, OR 2-4 years of CIAM or development experience. Bachelor's degree in relevant field, OR 4-6 years of CIAM experience. Bachelor's or Master's degree, OR 6-10 years of CIAM experience. Advanced degree often expected, OR 10+ years elite experience. Recognition is primary. 12+ years elite experience. 15+ years with transformational impact.
Certifications
  • Platform certifications (Auth0, Okta)
  • Web development certifications
  • Privacy certifications (basics)
  • Platform certifications
  • Privacy certifications (CIPP)
  • Development certifications
  • Advanced platform certifications
  • CIPP/E, CIPP/US
  • Cloud security certifications
  • Multiple advanced certifications
  • Privacy certifications
  • Certifications secondary to expertise
  • Certifications irrelevant
  • Known by reputation
Salary: US Gov't $60,000 - $80,000 (GS-9 to GS-11) $75,000 - $100,000 (GS-11 to GS-12) $95,000 - $125,000 (GS-12 to GS-13) $120,000 - $155,000 (GS-13 to GS-14) $145,000 - $180,000 (GS-15 / SES equivalent) $170,000 - $215,000 (Senior SES equivalent) $190,000 - $250,000+ (Senior SES equivalent)
Salary: US Startup $75,000 - $100,000 $95,000 - $130,000 $125,000 - $170,000 $160,000 - $215,000 + equity $195,000 - $270,000 + significant equity $240,000 - $330,000 + major equity $290,000 - $410,000+ + founder-level equity
Salary: US Corporate $70,000 - $95,000 $88,000 - $120,000 $115,000 - $155,000 $150,000 - $200,000 $185,000 - $250,000 $225,000 - $300,000 $275,000 - $370,000+
↑ Back to navigation

IAM Architect

Strategic technical leaders who design enterprise IAM architectures spanning all identity domains. Focus on cross-domain integration, enterprise identity strategy, zero trust architecture, cloud and hybrid identity, and aligning IAM capabilities with business objectives. Bridge IGA, PAM, Access Management, Directory Services, and CIAM into cohesive enterprise identity architectures.

Attribute Architect 1 / Entry Architect 2 / Junior Architect 3 / Mid Architect 4 / Senior / Lead Architect 5 / Staff Architect 6 / Senior Staff Architect 7 / Principal
General Description Entry-level IAM architect learning enterprise identity architecture principles and cross-domain integration. Assists with architecture documentation, design reviews, and reference architecture development. Develops foundational understanding of how IAM domains interconnect. Junior IAM architect capable of contributing to enterprise identity designs and conducting architecture reviews. Demonstrates proficiency in IAM architecture patterns and can participate in cross-domain integration design. Understands enterprise identity principles. Experienced IAM architect who independently leads enterprise identity architecture initiatives. Expert in cross-domain IAM integration, zero trust identity, and cloud identity architecture. Leads IAM architecture design and develops enterprise identity strategy. Mentors junior architects. Senior IAM architect who sets direction for enterprise identity architecture. Leads complex, organization-wide IAM architecture initiatives. Drives identity strategy aligned with business transformation. Expert across all IAM domains with ability to design cohesive enterprise solutions. Distinguished IAM architect who shapes organizational and industry approaches to identity architecture. Recognized externally as thought leader in enterprise IAM, zero trust identity, or converged identity platforms. Elite IAM architect with industry-defining influence. Shapes enterprise identity architecture standards and approaches globally. Legendary practitioner at the pinnacle of IAM architecture expertise. Globally recognized authority who defines how enterprise identity architecture is practiced worldwide.
Primary Responsibilities
  • Assist with IAM architecture documentation
  • Learn cross-domain IAM integration patterns
  • Support architecture review activities
  • Research IAM architecture frameworks
  • Document IAM design decisions
  • Assist with reference architecture development
  • Learn enterprise IAM concepts
  • Shadow senior architects on designs
  • Help map IAM to business requirements
  • Contribute to IAM architecture designs
  • Conduct IAM architecture reviews
  • Develop IAM reference architectures
  • Support zero trust identity design
  • Create IAM architecture documentation
  • Assess IAM integration patterns
  • Support cloud identity architecture
  • Participate in enterprise architecture
  • Map IAM to security frameworks
  • Assist with IAM roadmap development
  • Lead IAM architecture design initiatives
  • Design enterprise zero trust identity
  • Build cross-domain IAM integration
  • Develop enterprise IAM roadmaps
  • Create IAM architecture standards
  • Mentor junior IAM architects
  • Lead IAM architecture reviews
  • Design multi-cloud identity
  • Integrate IAM with security architecture
  • Support M&A IAM architecture
  • Evaluate IAM technology strategies
  • Define enterprise IAM architecture strategy
  • Lead organization-wide IAM architecture
  • Design converged identity platforms
  • Build IAM architecture governance
  • Mentor and develop architecture team
  • Present architecture to executives and board
  • Drive IAM modernization programs
  • Lead vendor architecture relationships
  • Support M&A architecture strategy
  • Shape industry IAM architecture
  • Align IAM with business strategy
  • Define multi-year IAM architecture vision
  • Lead industry-impacting architecture initiatives
  • Build strategic vendor partnerships
  • Develop next-generation IAM architectures
  • Represent organization at highest levels
  • Shape industry IAM architecture standards
  • Advise executive leadership on IAM strategy
  • Set multi-year enterprise IAM architecture vision
  • Lead transformational architecture initiatives
  • Influence industry IAM standards
  • Guide organizational strategy
  • Represent organization as premier IAM authority
  • Define industry direction for IAM architecture
  • Lead transformational multi-year initiatives
  • Shape identity standards globally
  • Represent organization at highest levels globally
Required Skills
  • Understanding of IAM domains (IGA, AM, PAM)
  • Basic architecture principles
  • Identity protocol knowledge
  • Documentation and diagramming
  • Cross-domain awareness
  • Communication skills
  • Analytical thinking
  • IAM architecture patterns
  • Cross-domain IAM integration
  • Zero trust identity concepts
  • Cloud identity architecture
  • Architecture documentation
  • Security framework mapping
  • Stakeholder communication
  • Requirements analysis
  • Enterprise IAM architecture
  • Zero trust identity design
  • Cross-domain integration mastery
  • Multi-cloud identity architecture
  • IAM strategy development
  • Technical leadership
  • Executive communication
  • Vendor-agnostic design
  • Enterprise IAM strategy leadership
  • Cross-domain architecture mastery
  • Team leadership and development
  • Executive and board communication
  • Vendor relationship management
  • Business strategy alignment
  • Change leadership
  • Governance frameworks
  • World-class IAM architecture expertise
  • Strategic practice leadership
  • Executive and board presence
  • Industry-wide recognition
  • Innovation leadership
  • Elite IAM architecture expertise
  • Transformational leadership
  • Board-level influence
  • Industry-shaping thought leadership
  • Globally recognized architecture expertise
  • Transformational vision
  • Industry-defining thought leadership
Preferred Skills
  • Experience in one IAM domain
  • Cloud architecture basics
  • Enterprise architecture exposure
  • Security architecture awareness
  • TOGAF or similar framework basics
  • Multi-domain IAM experience
  • Enterprise architecture frameworks
  • Identity standards expertise
  • Vendor architecture knowledge
  • Hybrid identity design
  • Machine identity architecture
  • ITDR architecture
  • Published architecture work
  • Standards body participation
  • IAM product experience
  • Industry thought leadership
  • Published architecture frameworks
  • Board-level communication
  • Analyst relationships
  • Published architecture frameworks
  • Analyst firm relationships
  • Vendor advisory roles
  • Major framework or methodology creator
  • Analyst firm advisory
  • Founded major IAM architecture frameworks
  • Government advisory
Mentorship Requirements Receives direct mentorship from Senior IAM architects. Shadows on architecture reviews. Expected to complete IAM and architecture training. Learns how IAM domains integrate into enterprise architecture. Receives guidance from Senior architects. Expected to begin mentoring Entry architects. Contributes to architecture standards. Primary mentor for Junior and Entry architects. Leads architecture training. Establishes architecture reputation. Primary mentor for Mid and Junior architects. Responsible for architecture team development. Industry mentorship. Mentors Senior architects and emerging leaders. Shapes organizational IAM architecture talent. Develops thought leaders. Develops organizational architecture leadership pipeline. Legacy-building. Develops organizational and industry architecture leadership. Legacy-building through generational impact.
Impact Scope Individual contributor on documentation and research. Supports architecture deliverables. Directly contributes to architecture quality. Design decisions impact IAM effectiveness. Shapes enterprise IAM architecture. Designs impact all IAM domains and business capabilities. Defines IAM architecture capabilities and strategy. Architecture decisions impact long-term enterprise identity posture. Industry and organizational transformation. Shapes IAM architecture practices. Industry-defining impact. Shapes IAM architecture globally. Global industry impact. Defines IAM architecture practices worldwide.
Autonomy & Decision Authority Works under close supervision. Follows established architecture standards. Limited authority to make design decisions. Works with moderate supervision. Can make design decisions within scope. Escalates strategic decisions. Works independently with strategic guidance. Makes significant architecture decisions. Authority over IAM standards. High autonomy. Makes significant architecture and investment decisions. Authority over IAM architecture standards. Near-complete autonomy. Strategic influence on organizational direction. Full autonomy. Executive-level authority. Complete strategic autonomy.
Communication & Stakeholders Primarily internal architecture team communication. Limited stakeholder interaction initially. Regular interaction with IAM teams and enterprise architecture. Presents design recommendations. Regular communication with security and IT leadership. Presents to executives. Primary IAM architecture contact. Executive and board-level communication. Represents IAM architecture to organizational leadership. Industry forum participation. C-suite and board engagement. Industry-wide influence. Industry-defining thought leadership. Board engagement. Global presence. Premier industry venues.
Degree / Experience Bachelor's degree in relevant field, OR 3-4 years of IAM or IT experience with architecture exposure. Bachelor's degree in relevant field, OR 4-6 years of IAM or architecture experience. Bachelor's degree with strong experience, OR Master's degree, OR 6-8 years of IAM architecture experience. Master's degree preferred, OR 8-12 years of IAM architecture experience. Demonstrated strategic impact. Advanced degree often expected, OR 12+ years of elite IAM architecture experience. Advanced degree often present, but recognition is primary. 14+ years of elite experience. 15+ years with transformational impact.
Certifications
  • CISSP or CISM
  • Cloud architecture certifications
  • IAM platform certifications
  • TOGAF Foundation
  • CISSP-ISSAP
  • Cloud architect certifications
  • SABSA Foundation
  • Multiple IAM certifications
  • CISSP-ISSAP
  • SABSA Chartered
  • Multiple cloud architect certifications
  • Industry recognition
  • CISSP-ISSAP
  • SABSA Chartered Master
  • Industry recognition substitutes
  • Certifications secondary to demonstrated expertise
  • Certifications irrelevant
  • Known by reputation
  • Known by reputation and legacy
Salary: US Gov't $90,000 - $115,000 (GS-11 to GS-12) $110,000 - $140,000 (GS-12 to GS-13) $130,000 - $165,000 (GS-13 to GS-14) $155,000 - $195,000 (GS-14 to GS-15) $180,000 - $230,000 (GS-15 / SES equivalent) $205,000 - $260,000 (Senior SES equivalent) $230,000 - $300,000+ (Senior SES equivalent)
Salary: US Startup $105,000 - $140,000 $130,000 - $175,000 $160,000 - $215,000 $195,000 - $265,000 + equity $240,000 - $330,000 + significant equity $295,000 - $400,000 + major equity $350,000 - $480,000+ + major equity
Salary: US Corporate $100,000 - $130,000 $120,000 - $160,000 $150,000 - $200,000 $185,000 - $250,000 $225,000 - $305,000 $275,000 - $365,000 $330,000 - $440,000+
↑ Back to navigation

Identity Security Analyst

Security professionals who detect, investigate, and respond to identity-based threats. Focus on Identity Threat Detection and Response (ITDR), identity analytics, behavior anomaly detection, credential attack detection, privilege escalation monitoring, and identity incident investigation. Protect identity infrastructure from sophisticated attacks targeting authentication, authorization, and identity systems.

Attribute Analyst 1 / Entry Analyst 2 / Junior Analyst 3 / Mid Analyst 4 / Senior / Lead Analyst 5 / Staff Analyst 6 / Senior Staff Analyst 7 / Principal
General Description Entry-level identity security analyst learning identity threat detection and investigation fundamentals. Assists with identity alert triage, basic investigations, and identity security monitoring. Develops foundational understanding of identity attacks, credential threats, and identity system security. Junior identity security analyst capable of independently investigating identity incidents and conducting identity threat analysis. Demonstrates proficiency in identity attack detection and can investigate credential-based attacks. Begins developing threat hunting hypotheses for identity systems. Experienced identity security analyst who independently leads identity threat investigations and develops advanced detection capabilities. Expert in identity attack patterns, ITDR, and identity analytics. Leads identity threat hunting and develops comprehensive detection strategies. Mentors junior analysts. Senior identity security analyst and team leader who defines ITDR strategy. Expert in identity threat landscape, advanced attack detection, and identity security program development. Leads identity security transformation and advises executives on identity threats. Distinguished identity security analyst who shapes organizational and industry approaches to ITDR. Recognized externally as thought leader in identity threats and detection. Elite identity security analyst with industry-defining influence in ITDR. Legendary practitioner at the pinnacle of identity security expertise. Globally recognized authority in identity threats and ITDR.
Primary Responsibilities
  • Triage identity security alerts
  • Assist with identity incident investigations
  • Learn identity attack patterns
  • Monitor identity system logs
  • Document identity security incidents
  • Support identity threat hunting
  • Learn ITDR concepts and tools
  • Shadow senior analysts on investigations
  • Assist with identity risk reporting
  • Investigate identity security incidents
  • Conduct identity threat analysis
  • Develop identity detection rules
  • Perform identity threat hunting
  • Analyze credential attack patterns
  • Support identity incident response
  • Create identity threat reports
  • Monitor privileged access anomalies
  • Assess identity risk indicators
  • Coordinate with IAM teams on threats
  • Lead complex identity investigations
  • Develop advanced identity detections
  • Build identity threat hunting program
  • Create identity attack playbooks
  • Lead identity incident response
  • Mentor junior identity security analysts
  • Develop identity risk scoring
  • Build identity analytics capabilities
  • Coordinate with threat intelligence
  • Present identity threats to leadership
  • Assess identity security posture
  • Define ITDR strategy and program
  • Lead identity security team
  • Build advanced identity analytics
  • Develop identity threat intelligence
  • Mentor and develop analyst team
  • Present identity risk to executives
  • Coordinate with red team on identity
  • Evaluate ITDR technologies
  • Lead major identity incidents
  • Shape industry ITDR practices
  • Drive identity security maturity
  • Define multi-year ITDR vision
  • Lead industry-impacting research
  • Build strategic partnerships
  • Develop next-generation capabilities
  • Shape industry ITDR standards
  • Set multi-year ITDR vision
  • Lead transformational initiatives
  • Influence industry standards
  • Guide organizational strategy
  • Define industry direction for ITDR
  • Shape identity security globally
  • Represent organization globally
Required Skills
  • Understanding of identity attack patterns
  • Basic knowledge of authentication threats
  • Familiarity with identity logs and events
  • Security monitoring fundamentals
  • Documentation skills
  • Analytical thinking
  • Communication skills
  • Identity incident investigation
  • Credential attack detection
  • Identity log analysis
  • Threat hunting fundamentals
  • Detection rule development
  • Identity system security
  • Incident documentation
  • Stakeholder communication
  • Advanced identity threat investigation
  • ITDR program development
  • Identity analytics and UEBA
  • Advanced detection engineering
  • Identity attack simulation understanding
  • Technical leadership
  • Executive communication
  • Cross-functional collaboration
  • ITDR program leadership
  • Advanced identity threat expertise
  • Team leadership and development
  • Executive communication
  • Technology evaluation
  • Identity threat intelligence
  • Cross-functional leadership
  • World-class identity security expertise
  • Strategic leadership
  • Industry recognition
  • Elite ITDR expertise
  • Transformational leadership
  • Industry-shaping influence
  • Globally recognized expertise
  • Industry-defining thought leadership
Preferred Skills
  • SOC or security operations experience
  • Active Directory security basics
  • SIEM experience
  • Scripting basics
  • IAM platform exposure
  • AD attack detection
  • Azure AD/Entra threat detection
  • UEBA tools
  • Identity analytics platforms
  • Scripting for analysis
  • AD/Azure AD attack expertise
  • Identity red team collaboration
  • Machine learning for detection
  • Published identity threat research
  • Conference speaking
  • Published identity threat research
  • Conference keynotes
  • Vendor advisory relationships
  • Identity attack tool development
  • Named attack technique discoveries
  • Published frameworks
  • Major discovery or framework author
  • Named attack techniques after discoveries
Mentorship Requirements Receives direct mentorship from Senior identity security analysts. Shadows on investigations. Expected to complete ITDR training. Learns identity-specific attack patterns and detection. Receives guidance from Senior analysts on complex investigations. Expected to begin mentoring Entry analysts. Contributes to detection content. Primary mentor for Junior and Entry analysts. Leads training on identity threats. Develops team detection capabilities. Primary mentor for Mid and Junior analysts. Responsible for team development. Industry mentorship. Mentors Senior analysts. Develops thought leaders. Develops leadership pipeline. Legacy-building. Legacy-building through generational impact.
Impact Scope Individual contributor on alert triage. Supports identity security investigations. Directly contributes to identity threat detection. Responsible for accurate incident investigation. Shapes identity security posture. Detection capabilities protect against sophisticated attacks. Defines identity security capabilities. Program effectiveness protects against sophisticated identity attacks. Industry and organizational transformation. Industry-defining impact. Global industry impact.
Autonomy & Decision Authority Works under close supervision. Follows established procedures. Escalates potential incidents. Works with moderate supervision. Can make investigation decisions. Escalates major incidents. Works independently with strategic guidance. Makes significant detection and investigation decisions. High autonomy. Makes significant program and technology decisions. Near-complete autonomy. Strategic influence. Full autonomy. Complete strategic autonomy.
Communication & Stakeholders Primarily internal identity security team communication. Limited incident response interaction initially. Regular interaction with IAM and SOC teams. Coordinates identity incident response. Regular communication with security and IAM leadership. Presents threats to executives. Executive-level communication. Represents ITDR to leadership. C-suite engagement. Industry influence. Industry-defining thought leadership. Global presence.
Degree / Experience Bachelor's degree in Cybersecurity, IT, or related field, OR 1-2 years of SOC or security operations experience. Bachelor's degree in relevant field, OR 2-4 years of security operations or ITDR experience. Bachelor's degree in relevant field, OR 4-6 years of identity security experience. Bachelor's or Master's degree, OR 6-10 years of identity security experience. 10+ years elite experience. 12+ years elite experience. 15+ years transformational impact.
Certifications
  • CompTIA Security+
  • CompTIA CySA+
  • GCIH or GCIA (helpful)
  • Identity platform certifications
  • GCIH, GCIA
  • Identity-specific certifications
  • ITDR platform certifications
  • Cloud security certifications
  • GCIH, GCIA
  • Advanced identity certifications
  • Cloud security certifications
  • Threat hunting certifications
  • Multiple advanced certifications
  • Industry recognition substitutes
  • Certifications secondary to expertise
  • Known by reputation
  • Known by reputation and discoveries
Salary: US Gov't $55,000 - $75,000 (GS-7 to GS-9) $70,000 - $95,000 (GS-9 to GS-11) $90,000 - $120,000 (GS-11 to GS-13) $115,000 - $150,000 (GS-13 to GS-14) $140,000 - $175,000 (GS-15 / SES equivalent) $165,000 - $210,000 (Senior SES equivalent) $185,000 - $240,000+ (Senior SES equivalent)
Salary: US Startup $65,000 - $90,000 $85,000 - $115,000 $110,000 - $150,000 $145,000 - $195,000 + equity $180,000 - $245,000 + significant equity $220,000 - $300,000 + major equity $265,000 - $375,000+ + founder-level equity
Salary: US Corporate $60,000 - $85,000 $80,000 - $110,000 $105,000 - $140,000 $135,000 - $180,000 $170,000 - $230,000 $205,000 - $275,000 $250,000 - $340,000+
↑ Back to navigation

Identity Security Engineer

Technical professionals who build and maintain identity threat detection and response infrastructure. Focus on ITDR platform deployment, identity detection engineering, identity security automation, identity log collection and analysis, and integration of identity security tools. Build the technical capabilities that enable identity threat detection and response.

Attribute Eng 1 / Entry Eng 2 / Junior Eng 3 / Mid Eng 4 / Senior / Lead Eng 5 / Staff Eng 6 / Senior Staff Eng 7 / Principal
General Description Entry-level identity security engineer learning ITDR platform operations and identity security infrastructure. Assists with identity log collection, detection deployment, and basic platform administration. Develops foundational understanding of identity security tooling and detection engineering. Junior identity security engineer capable of independently managing ITDR platform components and developing basic detections. Demonstrates proficiency with identity log collection and can implement detection rules. Begins developing identity security automation. Experienced identity security engineer who independently designs and implements ITDR infrastructure. Expert in identity detection engineering, identity security automation, and platform architecture. Leads platform development and builds advanced detection capabilities. Mentors junior engineers. Senior identity security engineer and team leader who defines ITDR infrastructure strategy. Expert in enterprise identity security architecture, advanced detection engineering, and identity security automation at scale. Distinguished identity security engineer who shapes organizational and industry approaches to ITDR infrastructure. Elite identity security engineer with industry-defining influence. Legendary practitioner at the pinnacle of identity security engineering. Globally recognized authority who shapes how ITDR infrastructure is built.
Primary Responsibilities
  • Assist with identity log collection
  • Support ITDR platform administration
  • Learn identity detection deployment
  • Help maintain identity security documentation
  • Monitor platform health
  • Support identity security automation
  • Document configurations
  • Shadow senior engineers
  • Assist with identity tool integrations
  • Manage identity log collection pipelines
  • Implement identity detection rules
  • Configure ITDR platform components
  • Develop identity security automation
  • Build identity security dashboards
  • Troubleshoot identity monitoring issues
  • Create platform documentation
  • Support identity tool integrations
  • Monitor detection effectiveness
  • Assist with platform upgrades
  • Design ITDR platform architecture
  • Build advanced identity detections
  • Develop identity security automation
  • Lead identity tool integrations
  • Create identity analytics pipelines
  • Mentor junior identity security engineers
  • Develop platform standards
  • Build identity response automation
  • Design identity log architecture
  • Evaluate ITDR technologies
  • Lead platform optimization
  • Define ITDR infrastructure strategy
  • Lead enterprise identity security platforms
  • Build advanced detection capabilities
  • Develop identity automation frameworks
  • Mentor and develop engineering team
  • Present infrastructure strategy to leadership
  • Evaluate and select ITDR platforms
  • Lead vendor relationships
  • Drive identity security innovation
  • Support M&A identity security integration
  • Shape industry practices
  • Define multi-year ITDR engineering vision
  • Lead industry-impacting initiatives
  • Build strategic partnerships
  • Develop next-generation capabilities
  • Shape industry standards
  • Set multi-year ITDR engineering vision
  • Lead transformational initiatives
  • Influence industry standards
  • Guide organizational strategy
  • Define industry direction
  • Shape ITDR engineering globally
  • Represent organization globally
Required Skills
  • Understanding of identity security concepts
  • Basic knowledge of SIEM and logging
  • Familiarity with identity platforms
  • Scripting basics
  • Documentation skills
  • Troubleshooting aptitude
  • Identity log collection and parsing
  • Detection rule development
  • ITDR platform administration
  • Identity security automation
  • Scripting (Python, PowerShell)
  • Dashboard development
  • Troubleshooting
  • Stakeholder communication
  • ITDR platform architecture
  • Advanced detection engineering
  • Identity security automation
  • Identity analytics development
  • Log architecture and management
  • Technical leadership
  • Cross-team collaboration
  • Platform evaluation
  • Enterprise ITDR strategy
  • Advanced platform architecture
  • Team leadership
  • Executive communication
  • Vendor management
  • Identity security automation at scale
  • Cross-functional leadership
  • World-class ITDR engineering expertise
  • Strategic technical leadership
  • Industry recognition
  • Elite ITDR engineering expertise
  • Transformational leadership
  • Industry-shaping influence
  • Globally recognized expertise
  • Industry-defining thought leadership
Preferred Skills
  • ITDR platform exposure
  • AD and Azure AD logging
  • Python scripting
  • Detection engineering basics
  • SOAR tool exposure
  • Multiple ITDR platforms
  • Advanced detection engineering
  • SOAR development
  • Identity API integration
  • Cloud identity logging
  • Machine learning for identity
  • Custom ITDR tool development
  • Published tools or detections
  • Multi-cloud identity security
  • Identity threat research
  • Published identity security tools
  • Conference speaking
  • Open-source contributions
  • Vendor advisory relationships
  • Major ITDR tool author
  • Published frameworks
  • Founded major ITDR tools
  • Founded major ITDR platforms
Mentorship Requirements Receives direct mentorship from Senior identity security engineers. Shadows on platform implementations. Expected to complete ITDR platform training. Receives guidance from Senior engineers. Expected to begin mentoring Entry engineers. Contributes to platform documentation. Primary mentor for Junior and Entry engineers. Leads platform training. Develops team standards. Primary mentor for Mid and Junior engineers. Responsible for team development. Mentors Senior engineers. Develops thought leaders. Develops leadership pipeline. Legacy-building. Legacy-building through generational impact.
Impact Scope Individual contributor on assigned platform tasks. Supports identity security infrastructure. Directly contributes to identity security infrastructure. Detection rules protect against identity attacks. Shapes identity security infrastructure. Platform capabilities enable effective threat detection. Defines ITDR engineering capabilities. Platform decisions impact long-term identity security posture. Industry and organizational transformation. Industry-defining impact. Global industry impact.
Autonomy & Decision Authority Works under close supervision. Follows established procedures. Escalates issues. Works with moderate supervision. Can make routine configuration decisions. Escalates architectural changes. Works independently with strategic guidance. Makes significant architecture decisions. High autonomy. Makes significant platform and investment decisions. Near-complete autonomy. Strategic influence. Full autonomy. Complete strategic autonomy.
Communication & Stakeholders Primarily internal team communication. Limited stakeholder interaction initially. Regular interaction with identity security analysts and IAM teams. Coordinates platform requirements. Regular communication with security leadership. Presents technical strategies. Executive-level communication. Represents ITDR engineering to leadership. C-suite engagement. Industry influence. Industry-defining thought leadership. Global presence.
Degree / Experience Bachelor's degree in Computer Science, IT, Cybersecurity, OR 1-2 years of security engineering experience. Bachelor's degree in relevant field, OR 2-4 years of security engineering or ITDR experience. Bachelor's degree in relevant field, OR 4-6 years of identity security engineering experience. Bachelor's or Master's degree, OR 6-10 years of identity security engineering experience. 10+ years elite experience. 12+ years elite experience. 15+ years transformational impact.
Certifications
  • CompTIA Security+
  • Platform certifications
  • Cloud certifications
  • Scripting certifications
  • Platform certifications
  • Detection engineering certifications
  • Cloud security certifications
  • Automation certifications
  • Advanced platform certifications
  • Cloud security certifications
  • Detection engineering credentials
  • Automation certifications
  • Multiple advanced certifications
  • Industry recognition substitutes
  • Certifications secondary to expertise
  • Known by reputation and contributions
  • Known by reputation and platforms built
Salary: US Gov't $60,000 - $80,000 (GS-9 to GS-11) $75,000 - $100,000 (GS-11 to GS-12) $95,000 - $125,000 (GS-12 to GS-13) $120,000 - $155,000 (GS-13 to GS-14) $145,000 - $180,000 (GS-15 / SES equivalent) $170,000 - $215,000 (Senior SES equivalent) $190,000 - $250,000+ (Senior SES equivalent)
Salary: US Startup $70,000 - $95,000 $90,000 - $125,000 $120,000 - $160,000 $155,000 - $205,000 + equity $190,000 - $260,000 + significant equity $235,000 - $320,000 + major equity $280,000 - $400,000+ + founder-level equity
Salary: US Corporate $65,000 - $90,000 $85,000 - $115,000 $115,000 - $150,000 $145,000 - $190,000 $180,000 - $245,000 $220,000 - $290,000 $265,000 - $360,000+
↑ Back to navigation

About This Framework

This standardization framework is designed to:

  1. Provide clarity on role expectations at each level
  2. Enable fair compensation through transparent salary benchmarking
  3. Support career development by clearly defining progression paths
  4. Facilitate hiring with consistent job descriptions and requirements

IAM Domain Overview

Domain Focus Key Technologies
IGA (Identity Governance & Administration) Lifecycle management, provisioning, role management, certification, SoD SailPoint, Saviynt, Oracle Identity Governance
Access Management Authentication, MFA, SSO, federation, adaptive access Okta, Azure AD/Entra, Ping, ForgeRock
PAM (Privileged Access Management) Privileged accounts, vaulting, session recording, JIT access CyberArk, BeyondTrust, Delinea
Directory Services AD, LDAP, identity stores, synchronization Active Directory, Azure AD, LDAP directories
CIAM (Customer Identity) Customer authentication, social login, consent, privacy Auth0, Okta CIC, ForgeRock, Ping
IAM Architecture Cross-domain integration, enterprise identity strategy, zero trust Spans all domains
Identity Security (ITDR) Identity threat detection, credential attack detection, identity analytics CrowdStrike, Microsoft, Semperis, specialized ITDR

Expanding IAM Specializations

These specializations scale with level across the core tracks:

Specialization Where It Appears
Machine Identity & Service Accounts Senior+ across IGA, PAM, Architect
Secrets Management Senior+ PAM, Architect; DevSecOps overlap
Certificate & PKI Management Senior+ Directory Services, Architect
Identity Proofing / Verification Senior+ CIAM, IGA
Authorization Management (OPA, XACML) Senior+ Access Management, Architect
Cloud IAM (AWS, Azure, GCP) Mid+ across most tracks
SaaS Access Management Senior+ IGA, Architect
Function Relationship to IAM
Security Engineering Implements security controls; IAM provides identity infrastructure
GRC Defines compliance requirements; IAM implements and evidences controls
SOC Monitors for threats; Identity Security provides identity-specific detection
IT Operations Manages infrastructure; IAM manages identity layer

Salary Notes

Sector Notes
US Government Based on General Schedule (GS) and Senior Executive Service (SES) pay scales. Actual compensation varies by locality pay area.
US Startup Reflects venture-backed companies. Equity compensation can significantly increase total compensation.
US Corporate Reflects Fortune 500 and large enterprise compensation. May include bonus structures of 10-30%+.

All salary figures are estimates based on market data and may vary significantly by geography, company size, industry, and individual negotiation.

Contributing

This is an open-source effort to standardize security titles. Join the discussion to help improve these frameworks.