# IAM Career Paths: From Analyst to Identity Architect

Source: https://startwithidentity.com/guides/career/iam-career-paths/
Last updated: 2026-07-08
License: content by Start with Identity. Cite the source URL.

---

Identity and access management has grown from a back-office IT function into one of the most in-demand specialties in security. As identity became the primary attack surface, the people who understand it became scarce and well paid. This is a map of the common paths and how to move along them.

## Start here: the learning path

If you are new, work through the career hub in this order:

1. **This page** for the map of roles and tracks.
2. [How to become an identity engineer](https://startwithidentity.com/guides/career/how-to-become-an-identity-engineer/) for the concrete skills and hands-on steps.
3. [Identity security certifications](https://startwithidentity.com/guides/career/identity-security-certifications/) to validate fundamentals and pass HR filters.
4. [IAM interview questions](https://startwithidentity.com/guides/career/iam-interview-questions/) to prepare, plus the open-source [IAM interview questions bank](https://github.com/Start-With-Identity/iam-interview-questions) for hundreds of practice questions.
5. [How to get an IAM job](https://startwithidentity.com/guides/career/how-to-get-an-iam-job/) for resume, portfolio, and applying.
6. [IAM salary guide](https://startwithidentity.com/guides/career/iam-salary-guide/) to benchmark and negotiate, and [remote IAM jobs](https://startwithidentity.com/guides/career/remote-iam-jobs/) if you want to work remotely.

New to the concepts themselves? Begin with the [start-here learning path](https://startwithidentity.com/start-here/) and the [fundamentals](https://startwithidentity.com/guides/fundamentals/what-is-iam/).

## Where people start

- **IAM analyst / administrator:** runs the day-to-day. Joiner-mover-leaver, access requests, group management, MFA support. The best on-ramp because you learn how identity actually behaves in production.
- **Help desk or sysadmin crossover:** many strong IAM people arrive from IT operations after owning Active Directory, [Entra](https://startwithidentity.com/vendors/iam/microsoft-entra/), or [Okta](https://startwithidentity.com/vendors/iam/okta/).
- **Developer crossover:** engineers who implemented login with [OAuth and OIDC](https://startwithidentity.com/standards/openid-connect/) often move into customer identity ([CIAM](https://startwithidentity.com/guides/fundamentals/what-is-ciam/)) and [authorization](https://startwithidentity.com/guides/fundamentals/rbac-vs-abac-vs-rebac/).

## The main tracks

- **Engineering track:** IAM engineer to senior to **identity architect**, who designs federation, authentication, and authorization across the enterprise. Deep protocol knowledge ([SAML](https://startwithidentity.com/standards/saml-2-0/), OIDC, [SCIM](https://startwithidentity.com/standards/scim-2-0/), [WebAuthn](https://startwithidentity.com/standards/webauthn-fido2/)) is the differentiator.
- **Governance track:** access reviews and [IGA](https://startwithidentity.com/guides/fundamentals/what-is-iga/) into governance lead and identity risk roles, heavy on audit and compliance.
- **Privileged and security track:** [PAM](https://startwithidentity.com/guides/fundamentals/what-is-pam/) and [ITDR](https://startwithidentity.com/guides/fundamentals/what-is-itdr/) into identity security engineering and detection.
- **Leadership track:** identity program manager, head of identity, and ultimately the CISO office, where identity is now a board-level topic.

## How to move up

Specialize in protocols and patterns, not just one vendor's console. Learn one platform deeply, then a second to break vendor lock-in in your own head. Get hands-on with [passwordless](https://startwithidentity.com/guides/fundamentals/what-is-passwordless/), Zero Trust, and the emerging [non-human and AI identity](https://startwithidentity.com/guides/fundamentals/what-is-non-human-identity/) problems, which are where demand is growing fastest.

## Related

[How to become an identity engineer](https://startwithidentity.com/guides/career/how-to-become-an-identity-engineer/), [certifications](https://startwithidentity.com/guides/career/identity-security-certifications/), and [interview questions](https://startwithidentity.com/guides/career/iam-interview-questions/).