IdentITy and Access Management Architect

Role & responsibilities

• Design and implement enterprise-wide Identity and Access Management (IAM) architecture, solutions and security standards.
• Develop IAM strategies covering Identity Governance and Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO) and Multi-Factor Authentication (MFA).
• Architect and implement IAM solutions using platforms such as SailPoint, Saviynt, CyberArk, Microsoft Entra ID and Okta.
• Design identity lifecycle management processes, including user provisioning, deprovisioning, access requests, approvals and periodic access reviews.
• Integrate enterprise applications, cloud platforms and directories using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP and REST APIs.
• Define role-based access control (RBAC), attribute-based access control (ABAC), segregation of duties (SoD) and least-privilege access policies.
• Ensure IAM solutions align with Zero Trust principles, enterprise security policies and regulatory requirements.
• Lead IAM assessments, architecture reviews, solution design, technical documentation and proof-of-concept implementations.
• Collaborate with security, infrastructure, application development, cloud and compliance teams to deliver secure identity solutions.
• Troubleshoot complex IAM integration issues, optimize identity workflows and oversee technical implementation and production support.
• Mentor IAM engineers, establish architectural best practices and communicate technical risks and recommendations to stakeholders.

Preferred candidate profile

• Bachelors degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• 5 to 10 years of experience in IAM, identity governance, access management or cybersecurity, including enterprise IAM solution design and implementation.
• Strong expertise in at least one major IAM platform, such as SailPoint IdentityIQ/IdentityNow, Saviynt, CyberArk, Okta or Microsoft Entra ID.
• Hands-on experience with IAM architecture, identity lifecycle management, access governance, SSO, MFA, federation and privileged access management.
• Strong understanding of identity protocols, including SAML, OAuth 2.0, OIDC, SCIM, LDAP and Active Directory.
• Experience integrating enterprise applications, directories, cloud environments and HR systems with IAM platforms.
• Knowledge of RBAC, ABAC, Zero Trust, least-privilege principles, SoD and access certification processes.
• Familiarity with scripting and automation using PowerShell, Python, Java or BeanShell, along with REST API integrations.
• Understanding of cloud IAM across AWS, Microsoft Azure and Google Cloud Platform, along with relevant security and compliance frameworks.
• Relevant certifications such as CISSP, CCSP, Microsoft SC-300, SailPoint, Saviynt or CyberArk are preferred.
• Excellent analytical, problem-solving, communication and stakeholder-management skills, with the ability to lead technical teams and translate business requirements into scalable IAM architectures.