Architect - Identity and Access Management - IAM SME

Job description

Overview We are seeking an experienced IAM Architect to lead the design, architecture, and implementation of enterprise Identity & Access Management solutions across workforce, customer, cloud, application, and non-human identities. The role is responsible for defining IAM strategy, developing architecture standards, conducting technology evaluations and proof-of-concepts (POCs), and leading cross-functional IAM initiatives, M&A programs from inception through deployment. The ideal candidate combines deep IAM technical expertise with strong architecture, cloud security, stakeholder management, and project leadership skills to drive secure, scalable, and business-aligned identity solutions. Responsibilities • Lead solution design sessions and produce high-quality architecture deliverables including HLDs, LLDs, sequence diagrams, and integration specifications. • Translate business requirements into scalable IAM solutions. • Review and approve IAM designs produced by engineering teams and vendors. • Provide technical oversight throughout the lifecycle of IAM implementations. • Lead Proof-of-Concept (POC) initiatives and pilot programs for emerging IAM technologies. • Present recommendations and business cases to leadership and architecture governance boards. • Design IAM solutions for Azure, AWS, and GCP environments. • Develop standards for cloud-native identity services and privileged access controls. • Implement modern authentication mechanisms including OAuth, OIDC, SAML, FIDO2, Passkeys, and mTLS. • Define cloud access governance and least-privilege models. • Collaborate with cloud platform teams to enable secure cloud adoption and migration initiatives. • Lead and manage IAM cross functional projects from initiation to completion, including: Planning, Scope Management, Risk Management, Design Reviews, Execution Oversight, Deployment Support, Change Management, Project Closure • Coordinate activities across security, infrastructure, network, cloud, application, and business teams. • Manage vendors, integrators, and implementation partners. • Track project milestones, dependencies, risks, and deliverables. Qualifications • 10- 12 years of Identity & Access Management experience. • 5+ years in IAM Architecture or Technical Lead roles. • Proven experience delivering enterprise-scale IAM transformation programs. • Demonstrated experience leading cross-functional initiatives and large technology projects. • Strong hands-on and architecture experience in: Authentication & Authorization, SSO & Federation, IGA, PAM, Directory Services, Access Certification & Governance, NHI Security. • Experience designing IAM solutions across: Microsoft Entra ID / Azure, AWS IAM, Google Cloud IAM. • Knowledge of OAuth, 2.0 / OIDC, SAML, SCIM, FIDO2 / Passkeys, Conditional Access, PIM / JIT Access, Zero Trust Architecture. • Experience managing multiple concurrent IAM projects. • Strong program planning and execution capabilities. • Experience working within Agile and Waterfall methodologies. • Experience with one or more of Okta, Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, ForgeRock, HashiCorp Vault. • Preferred certifications include CISSP, CISM, CCSP, Azure Security Engineer, AWS Security Specialty, Okta Certified Professional/Administrator, CyberArk Defender/Sentry.