A path for every ambition.

At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day.

We’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them.

Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here.

Whether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage.

Your ambition has a home here.

Job Description

We are seeking an experienced IAM Architect to design, build, and evolve our enterprise Identity and Access Management (IAM) program. This role oversees and drives the IAM architectural standards for authentication, authorization, provisioning, and privileged access across cloud, SaaS, and on-premises environments. You will translate business and security requirements into reference architectures, technical standards, and multi-year roadmaps that support workforce, and privileged identities.

The ideal candidate has deep hands-on experience with modern IAM/IGA platforms (e.g., SailPoint Identity Security Cloud/IdentityNow, Okta, Azure AD/Entra ID, or similar), a strong understanding of Zero Trust principles, and a track record of leading identity initiatives that reduce risk, complexity, and operational cost while improving the end-user experience.

Objectives of this Role

• Develop and maintain the enterprise IAM framework, including authentication, authorization, provisioning, and privileged access systems.
• Rationalize identity platforms and standardize integration patterns to reduce complexity, cost, and operational risk.
• Ensure high availability, resilience, and audit readiness of identity services.
• Improve onboarding/offboarding (Joiner-Mover-Leaver) efficiency and reduce identity-related security incidents such as credential compromise or orphaned accounts.
• Serve as the technical leader for IAM initiatives, driving scalable identity architecture and governance standards across cloud and on-prem environments.
• Ensure identity operations practices provide a sound foundation that utilizes tools and processes for rapid identification of security events to address and mitigate risks.
• Engage with peers regularly on security operations functions, project status, activities, and achievements.
• Lead “Continuous Improvement” efforts, in respect to HUB’s information security identity tooling and systems.
• Lead/Assist in plan, organize, and execute multiple responsibilities to achieve project goals and provide technical leadership to move operational projects to completion.
• Contribute to security requirements, standards, procedures, and reference architectures to comply with policies and technical standards.

Daily and Monthly Responsibilities

• Lead the architecture, design, implementation and integration of IAM/IGA solutions (e.g., SailPoint ISC) across enterprise environments.
• Define IAM architecture standards, governance models, and best practices.
• Design scalable identity lifecycle processes including Joiner, Mover, and Leaver workflows.
• Architect integrations with Active Directory, Azure AD/Entra ID, Workday, ServiceNow, LDAP, SAP, cloud platforms, and REST APIs.
• Maintain all IAM architectural diagrams, as-built documentation, and roadmaps.
• Lead application onboarding, provisioning, deprovisioning, and access certification initiatives.
• Provide architecture guidance for compliance, audit readiness, and regulatory requirements (e.g., SOX, HIPAA, GDPR, PCI-DSS).
• Collaborate with cybersecurity, infrastructure, cloud, and application teams to align IAM strategy with enterprise security goals.
• Mentor engineers, developers, and analysts on IAM platform best practices and technical standards.
• Participate in roadmap planning, technical governance, and solution architecture reviews.
• Support Agile delivery, sprint planning, and technical design workshops.

Skills and Qualifications

• Bachelor’s degree in technology, Security, or equivalent experience.
• 7+ years of experience in identity and access management, with at least 3 years in an architecture or technical leadership role.
• Proven experience designing and implementing enterprise IGA/IAM solutions (e.g., SailPoint ISC/IdentityNow, Saviynt, or similar).
• Experience with access certifications, provisioning workflows, lifecycle management, and governance controls.
• Strong understanding of Zero Trust architecture and enterprise security frameworks.
• Expertise with IGA platforms, Active Directory, EntraID, LDAP, SSO, RBAC, Rest APIs and/or JSON / XML.
• Expertise with SAML, OIDC, oAuth, and SCIM.
• Experience integrating IAM platforms with HR systems (e.g., Workday), ITSM tools (e.g., ServiceNow, JIRA), business applications, and cloud platforms (AWS, Azure, GCP).
• Solid understanding of compliance and audit requirements related to identity and access.
• Excellent communication skills, with the ability to translate technical concepts for both technical and non-technical stakeholders.
• Experience mentoring engineers and leading technical governance discussions.
• Familiarity with Agile delivery methodologies.

• Knowledge of industry security standards, guidelines, and regulatory/compliance requirements related to information security such as ISO 27001, NIST 800-53, SOC2, PCI, SOX, etc.
• This position reports into Chicago and is hybrid.
• Willingness to travel up to 10% of working time.

JOIN OUR TEAM

Do you believe in the power of innovation, collaboration, and transformation? Do you thrive in a supportive and client focused work environment? Are you looking for an opportunity to help build and drive change in a rapidly growing and evolving organization? When you join HUB International, you will be part of a community of learners and doers focused on our Core Values: entrepreneurship, teamwork, integrity, accountability, and service.

The expected salary range for this position is $ 120,000 to $150,000 and will be impacted by factors such as the successful candidate’s skills, experience and working location, as well as the specific position’s business line, scope and level. HUB International is proud to offer comprehensive benefit and total compensation packages which could include health/dental/vision/life/disability insurance, FSA, HAS and 401(k) accounts, paid-time-off benefits such as vacation, sick, personal, floating holidays and company holidays. In addition, eligible annual bonuses, equity and commissions may be available for some positions.  

What we offer you

We invest in your growth. HUB offers structured training, licensing support, and ongoing development opportunities designed to accelerate your career. Benefits and programs vary based on employment status, role, location, and applicable eligibility requirements.

• Competitive pay with comprehensive health benefits, retirement savings matching, and company-paid life and disability plans
• Generous paid time off, paid parental leave and a wellbeing program designed to support real work/life balance
• A collaborative, high-performing culture with meaningful engagement, community impact through HUB Gives and genuine room to grow your career

The HUB difference

HUB International is one of North America’s largest insurance brokers, delivering risk management, insurance, employee benefits, retirement and wealth management solutions to businesses and individuals across the United States and Canada — through locally led teams backed by national expertise, giving you the agility of a local partner and the reach of a global organization.

Equal Employment Opportunity: HUB International Limited is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

Reasonable Accommodations: HUB International Limited is committed to providing reasonable accommodations to qualified individuals with disabilities throughout the application and hiring process. If you need a reasonable accommodation to access our career site, complete an application, or participate in any part of the hiring process, please contact the Recruiting Team at HUBRecruiting@HUBInternational.com. This contact information is for accommodation requests only and should not be used to inquire about the status of an application.

E-Verify: HUB International Limited participates in E-Verify. Please refer to Our Recruiting Process | Applicant Notices: E-Verify Program for additional information.