IAM Architect

Role: Senior IAM Architect

• 1012 years of overall IT and Cybersecurity experience, with at least 4+ years of hands-on experience in Identity and Access Management (IAM) architecture and engineering.
• Strong expertise in designing, implementing, and supporting enterprise-scale IAM solutions.
• Extensive hands-on experience with Okta, including SSO, MFA, authentication policies, federation, lifecycle management, and application integrations.
• Strong experience with Microsoft Entra ID (Azure AD), including Conditional Access, Identity Protection, MFA, SSO, enterprise applications, and hybrid identity.
• Hands-on experience with CyberArk or other Privileged Access Management (PAM) solutions, including privileged account onboarding, vaulting, privileged access controls, and session management.
• Strong understanding of Identity Governance and Administration (IGA), including access lifecycle management, joiner-mover-leaver processes, access reviews, certifications, and segregation of duties.
• Strong knowledge of identity and authentication protocols, including SAML, OAuth 2.0, OpenID Connect, LDAP, Active Directory, and SCIM.
• Experience integrating IAM platforms with cloud, SaaS, on-premises applications, directories, enterprise platforms, and REST APIs.
• Experience designing and implementing RBAC, least-privilege access, privileged access, and Zero Trust identity principles.
• Ability to perform IAM architecture assessments and develop target-state architecture, implementation roadmaps, integration strategies, and remediation plans.
• Experience working with infrastructure, application development, enterprise architecture, and cybersecurity teams on IAM initiatives.
• Ability to independently troubleshoot complex identity, authentication, authorization, federation, and access-related issues.
• Experience leading IAM implementation or transformation projects and coordinating with technology vendors and third-party partners.
• Strong documentation and communication skills, including the ability to create architecture documents, standards, technical designs, and implementation plans.
• Ability to work independently as part of a dedicated long-term security team while collaborating extensively with US-based stakeholders and global teams.