Principal IT Architect

Eaton's Corporate Sector division is currently seeking a Principal IT Architect.

The expected annual salary range for this role is $141000.03 - $206800.04 a year. This position is also eligible for a variable incentive program.

Please note the salary information shown above is a general guideline only. Salaries are based upon candidate skills, experience, and qualifications, as well as market and business considerations.

What you'll do : Job Summary

The IAM Principal Architect plays a critical role in shaping and securing Eaton's identity and access management landscape. This position is responsible for architecting and delivering robust solutions that govern user identities, manage privileged access, and enforce secure authentication and authorization across systems and applications.

As a strategic leader within an Agile delivery team, the architect will drive the design and integration of Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Access Management capabilities. The role demands a deep understanding of identity lifecycle management, policy enforcement, and compliance requirements, as well as hands-on experience troubleshooting complex integrations involving web services, databases, and LDAP directories.

The architect will collaborate closely with cross-functional teams-including cybersecurity, infrastructure, application development, and business stakeholders-to ensure identity solutions are scalable, resilient, and aligned with enterprise goals. A strong grasp of microservices architecture is essential, as the organization continues to modernize its platforms and adopt cloud-native technologies.

This role requires a proactive, self-starting mindset and the ability to lead technical discussions, facilitate requirements gathering sessions, and translate business needs into actionable architecture and design. The architect will also evaluate emerging technologies, contribute to strategic roadmaps, and mentor team members to elevate IAM maturity across the organization.

Job Responsibilities

• Lead and participate in the planning, definition, development, and high-level design of scalable identity solutions and architectural alternatives including identity governance, access management and privileged access.- Define and enforce access policies, RBAC, and least privilege principles.- Enable a continuous delivery pipeline through proper design guidelines.- Establish and communicate critical nonfunctional requirements with international internal customers- Architect and optimize identity integrations with web services, databases, and LDAP directories.- Apply knowledge of microservices architecture to design modular and scalable IAM components.- Collaborate with product owners, developers, and security teams to integrate IAM capabilities into enterprise platforms.- Evaluate and recommend IAM technologies and vendors.- Develop reference architecture documentation, standards, and best practices.- Serve as subject matter expert and internal consultant to other technical staff and groups.- Top-level responsible party for escalated support, working directly with external vendors.
• This role can be supported remotely for a qualified candidate currently residing in the USA.

Qualifications :

Basic Qualifications :

Bachelor's Degree from an accredited institution.

Minimum of 8 years experience leading / Architecting large corporation IT projects.

Significant 5+ years experience in cloud services, cybersecurity, infrastructure, application development-to ensure identity solutions are scalable, resilient, and aligned with enterprise goals.

Strong knowledge of microservices architecture is essential, as the organization continues to modernize its platforms and adopt cloud-native technologies.

Experience architecting enterprise scale IGA solutions with Industry leading vendors (Saviynt, Sailpoint, others)

Must currently reside within 50 miles of posted locations(s). Relocation is not available for this role.

Must be legally authorized to work in the United States without corporate sponsorship now or in the future.

Preferred Qualifications :

Preferred MS degree in Engineering, Computer Science, MBA.

Previous experience leading / architecting global IT projects.

Experience in ERP, Planning and Project Management tools.

Knowledge of data analysis and visualization tools.

Familiarity with software development processes and methodologies.

Excellent communication skills, both written and verbal. This position will often work with other business analysts, project managers and business teams on a regular basis.

Good team-oriented interpersonal skills. Assists with facilitation sessions, may require some coaching on how to lead and influence others, and to effectively interface and work with a wide variety of people.

Good team player, self-motivated and committed with an ability to work under pressure and to tight deadlines.

Technical knowledge :

Experience with cloud IAM (Azure AD, AWS IAM, GCP IAM).

Certifications in IGA solutions (e.g., Saviynt Certified Advanced IGA Professional, SailPoint Certified Identity Security Administrator).

Experience designing solutions to effectively manage privileged access (shared credentials and personal) using PAM solutions like Saviynt PAM, CyberArk, Thycotic.

Strong understanding of modern authentication / authorization standards (SAML, OIDC) including when to apply them to example use cases and how to perform high-level troubleshooting.

Experience in designing solutions for non-human account lifecycle management.

Additional certifications such as CISSP, CISM, or vendor-specific IAM credentials are desired.

Software development and API experience; Java, Python, JavaScript, REST API, SCIM API etc.

Knowledge of Zero Trust architecture and NIST cybersecurity frameworks. Administrator

Skills : Soft skills

Advanced verbal and written communication skills including the ability to explain and present technical concepts to all levels of the organization

Comfortable working directly with both technical and non-technical audiences

Good judgment, time management, and decision-making skills

Ability to work colaboratively on large scale cybersecurity initiatives

Patience and empathy when working with and coaching developers, testers, and cybersecurity experts

Extensive experience working with diverse, global cultures, organizations and security teams

We are committed to ensuring equal employment opportunities for all job applicants and employees. Employment decisions are based upon job-related reasons regardless of an applicant's race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, marital status, genetic information, protected veteran status, or any other status protected by law.

Eaton believes in second chance employment. Qualified applicants with arrest or conviction history will be considered regardless of their arrest or conviction history, consistent with the Los Angeles County Fair Chance Ordinance, the California Fair Chance Act and other local laws.

You do not need to disclose your conviction history or participate in a background check until a conditional job offer is made to you. After making a conditional offer and running a background check, if Eaton is concerned about conviction that is directly related to the job, you will be given the chance to explain the circumstances surrounding the conviction, provide mitigating evidence, or challenge the accuracy of the background report.

To request a disability-related reasonable accommodation to assist you in your job search, application, or interview process, please call us at 1-800-836-6345 to discuss your specific need. Only accommodation requests will be accepted by this phone number.

We know that good benefit programs are important to employees and their families. Eaton provides various Health and Welfare benefits as well as Retirement benefits, and several programs that provide for paid and unpaid time away from work. Click here (https : / / www.youreatonbenefits.com / candidates) for more detail : Eaton Benefits Overview. Please note that specific programs and options available to an employee may depend on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.