SailPoint Identity Security Cloud (ISC) Architect

Join Tata Consultancy Services, Asia Pacific and be part of an organization committed to sustainable development for our future. TCS follows the Tata group philosophy of building sustainable businesses that are rooted in the community and demonstrate care for the environment. Our unique values position us to combine a purpose-driven worldview with digital innovation, collaborating with customers, communities and governments to lead and shape innovative solutions for a sustainable future. TCS has been carbon neutral in its operations across 11 countries, 12 delivery centres and 18 offices in Asia Pacific since 2022. This is only the initial stage in TCS’ journey as we strive to achieve long-term net zero emissions by 2030.

Corporate sustainability is embedded in our triple-bottom-line, focusing on people, the planet, and our purpose. Our offices are designed with eco-friendly features that significantly reduce our carbon footprint and enhance energy efficiency. We actively champion green initiatives, such as promoting paperless operations, implementing energy-efficient practices, and fostering employee engagement in sustainability efforts. When you become part of the TCS family, you will play an essential role dedicated to innovation, excellence, and crafting a brighter, greener future together. Join us and be a part of our mission to drive sustainability through technology and talent at Tata Consultancy Services, APAC today

Responsibilities

The Senior SailPoint Identity Security Cloud (ISC) Architect will be responsible for leading the design, implementation, governance, and optimization of enterprise Identity and Access Management (IAM) solutions. The role requires close collaboration with business stakeholders, security teams, application owners, and delivery teams to ensure secure, scalable, and compliant identity governance capabilities.

• Act as the primary technical authority for SailPoint ISC architecture, implementation, and operational support.
• Lead customer workshops, discovery sessions, and architecture review meetings to gather requirements and define IAM solutions.
• Design and govern enterprise Identity Governance and Administration (IGA) capabilities within SailPoint ISC.
• Define and oversee Identity Lifecycle Management processes, including Joiner, Mover, and Leaver workflows.
• Lead application onboarding activities, including connector configuration, account aggregation, identity correlation, and access modeling.
• Design and implement access request, approval, provisioning, de-provisioning, role management, and access certification solutions.
• Define RBAC models, entitlement governance frameworks, and Segregation of Duties (SoD) controls.
• Architect integrations between SailPoint ISC and enterprise platforms such as Microsoft Entra ID, Active Directory, LDAP, Workday, SAP, ServiceNow, and other business applications.
• Provide technical leadership for SailPoint APIs, workflows, transforms, rules, and custom integrations.
• Review and approve solution designs, technical documentation, High-Level Designs (HLDs), and Low-Level Designs (LLDs).
• Drive adherence to IAM best practices, security standards, compliance requirements, and audit controls.
• Serve as the escalation point for complex technical issues, critical incidents, and production support challenges.
• Collaborate with customer stakeholders and delivery teams to prioritize enhancements, resolve risks, and ensure successful project execution.
• Lead architecture governance activities, including design reviews, risk assessments, and change management processes.
• Mentor and provide technical guidance to SailPoint developers, engineers, and support teams.
• Identify opportunities for automation, process optimization, and continuous improvement within the IAM ecosystem.
• Develop IAM roadmaps and support identity transformation initiatives aligned with business and security objectives.
• Act as a trusted advisor to customer leadership, providing strategic recommendations on identity governance, cloud security, and access management.
• Facilitate coordination between onsite customer stakeholders and offshore delivery teams to ensure effective communication and timely delivery.
• Support audits, compliance assessments, and governance reviews by providing architecture guidance and technical expertise.
• Contribute to service improvement initiatives and drive adoption of emerging IAM and identity security capabilities.
• Represent the IAM program in governance forums, steering committee meetings, and executive stakeholder discussions.
• Engage directly with business, security, HR, and application teams to accelerate decision-making and issue resolution.
• Manage critical escalations and coordinate rapid response efforts for high-priority incidents.
• Ensure effective stakeholder alignment and communication throughout the lifecycle of IAM initiatives.
• Drive customer satisfaction through proactive engagement, strategic consulting, and delivery excellence.

Technical Skills “Must Have”

• Deep expertise in SailPoint Identity Security Cloud (ISC/Identity Now)
• End-to-end ISC architecture, design, and implementation
• Application onboarding and connector configuration
• Identity lifecycle management (Joiner, Mover, Leaver)
• Access Request and Approval workflows
• Access Certifications and Compliance
• Role-Based Access Control (RBAC)

Technical Skills “Good to Have”

• IGA architecture and best practices
• Identity correlation and aggregation
• Provisioning and de-provisioning
• Segregation of Duties (SoD)
• Access Governance and Compliance controls
• Entitlement management and role modeling
• Cloud Identity architecture
• Zero Trust principles
• Privileged Access concepts
• Security and compliance frameworks
• IAM solution design and governance

Soft Skills

• Ability to engage with business, security, infrastructure, HR, and application teams
• Translating business requirements into IAM solutions
• Manage executive and technical stakeholder expectations
• Excellent verbal and written communication
• Ability to explain complex IAM concepts to non-technical audiences
• Facilitate architecture workshops and design discussions
• Lead architecture and design initiatives
• Mentor developers, engineers, and analysts
• Drive technical decisions and best practices
• Strong customer orientation and professional demeanor
• Manage customer workshops and governance forums
• Handle escalations and challenging discussions effectively

Language proficiency

• Fluent English (Written and Verbal)
• Ability to lead customer workshops, architecture reviews, and governance meetings in English
• Strong technical documentation and report-writing skills
• Ability to prepare executive presentations, solution design documents, HLD/LLD, and assessment reports in English

Mandatory Certifications

• SailPoint Certified Identity Security Cloud Engineer (ISC Engineer)
• SailPoint Certified Identity Security Cloud Professional (ISC Professional)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• TOGAF Enterprise Architecture Certification (Good to have)

Mandatory Relevant Experience

• Minimum 10+ years of overall experience in Identity and Access Management (IAM) and Identity Governance & Administration (IGA).
• Minimum 7+ years of hands-on experience with SailPoint Identity Security Cloud (ISC/IdentityNow) involving development, administration, implementation, and support activities.
• Proven experience in designing, developing, and supporting end-to-end identity lifecycle management solutions including Joiner, Mover, and Leaver processes.
• Experience integrating SailPoint ISC with enterprise applications, HR systems, Active Directory, Entra ID, LDAP, and other authoritative sources.
• Hands-on experience with provisioning, de-provisioning, access certifications, access requests, role management, and governance controls.
• Experience in application onboarding, connector configuration, aggregation, correlation, and identity mapping.
• Strong experience with REST APIs, Web Services, SailPoint Rules, Transforms, workflows, and custom integrations.
• Experience supporting large-scale enterprise IAM/IGA environments with incident, problem, change, and release management processes.
• Proven experience in troubleshooting complex SailPoint ISC production issues and driving resolution in collaboration with business and technical stakeholders.
• Experience leading IAM transformation, migration, or modernization initiatives is highly preferred