Architect - Identity and Access Management - IAM SME

Job description

**Overview** We are seeking an experienced IAM Architect to lead the design, architecture, and implementation of enterprise Identity & Access Management solutions across workforce, customer, cloud, application, and non-human identities. The role is responsible for defining IAM strategy, developing architecture standards, conducting technology evaluations and proof-of-concepts (POCs), and leading cross-functional IAM initiatives, M&A programs from inception through deployment. The ideal candidate combines deep IAM technical expertise with strong architecture, cloud security, stakeholder management, and project leadership skills to drive secure, scalable, and business-aligned identity solutions. **Responsibilities** - Lead solution design sessions and produce high-quality architecture deliverables including HLDs, LLDs, sequence diagrams, and integration specifications. - Translate business requirements into scalable IAM solutions. - Review and approve IAM designs produced by engineering teams and vendors. - Provide technical oversight throughout the lifecycle of IAM implementations. - Lead Proof-of-Concept (POC) initiatives and pilot programs for emerging IAM technologies. - Present recommendations and business cases to leadership and architecture governance boards. - Design IAM solutions for Azure, AWS, and GCP environments. - Develop standards for cloud-native identity services and privileged access controls. - Implement modern authentication mechanisms including OAuth, OIDC, SAML, FIDO2, Passkeys, and mTLS. - Define cloud access governance and least-privilege models. - Collaborate with cloud platform teams to enable secure cloud adoption and migration initiatives. - Lead and manage IAM cross functional projects from initiation to completion, including: Planning, Scope Management, Risk Management, Design Reviews, Execution Oversight, Deployment Support, Change Management, Project Closure - Coordinate activities across security, infrastructure, network, cloud, application, and business teams. - Manage vendors, integrators, and implementation partners. - Track project milestones, dependencies, risks, and deliverables. **Qualifications** - 10- 12 years of Identity & Access Management experience. - 5+ years in IAM Architecture or Technical Lead roles. - Proven experience delivering enterprise-scale IAM transformation programs. - Demonstrated experience leading cross-functional initiatives and large technology projects. - Strong hands-on and architecture experience in: Authentication & Authorization, SSO & Federation, IGA, PAM, Directory Services, Access Certification & Governance, NHI Security. - Experience designing IAM solutions across: Microsoft Entra ID / Azure, AWS IAM, Google Cloud IAM. - Knowledge of OAuth, 2.0 / OIDC, SAML, SCIM, FIDO2 / Passkeys, Conditional Access, PIM / JIT Access, Zero Trust Architecture. - Experience managing multiple concurrent IAM projects. - Strong program planning and execution capabilities. - Experience working within Agile and Waterfall methodologies. - Experience with one or more of Okta, Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, ForgeRock, HashiCorp Vault. - Preferred certifications include CISSP, CISM, CCSP, Azure Security Engineer, AWS Security Specialty, Okta Certified Professional/Administrator, CyberArk Defender/Sentry.