Identity & Access Management (IAM) Security Architect

Role Description

• Design Identity-centric Workforce Security solutions for secure authentication, authorization, and access management.
• Develop identity architectures aligned with security frameworks and regulatory standards.
• Provide architecture guidance for hybrid and cloud identity solutions.
• Act as a subject matter expert for Identity, Authentication, Authorization (IAA), and Identity Governance.
• Design secure identity solutions following Zero Trust and least-privilege principles.
• Support modern identity architectures, cloud security, and agentic identity solutions.

Must-Have Technical Skills

• Strong expertise in:
  • Identity & Access Management (IAM)
  • Authentication & Authorization
  • Identity Governance & Administration (IGA)
  • Workforce Identity
• Experience designing identity solutions aligned with:
  • NIST CSF
  • COBIT
  • SOC
  • GDPR
• Strong understanding of:
  • Zero Trust Architecture
  • Least Privilege
  • Defense-in-Depth
  • Modern access patterns
• Expertise in:
  • Single Sign-On (SSO)
  • Multi-Factor Authentication (MFA)
  • Conditional Access
  • Passwordless Authentication
  • Device-based Authentication
  • Identity Federation
• Hands-on experience with:
  • Microsoft Entra ID (Azure AD)
  • Microsoft EPM
  • Microsoft Sentinel
  • Microsoft Azure
  • Microsoft 365 Security
  • AWS Security Services
• Knowledge of:
  • Okta
  • PingFederate
  • CIEM (Cloud Infrastructure Entitlement Management)
  • Entitlement Management solutions
• Strong understanding of:
  • OAuth 2.0
  • OpenID Connect (OIDC)
  • SAML
  • LDAP
  • Kerberos
  • Identity Federation
• Experience securing:
  • Java-based Microservices
  • React-based web applications
  • Android applications
  • iOS applications
• Strong knowledge of:
  • Secrets Management
  • Certificate Management
  • Token handling
  • Session management
  • Credential vaulting
  • Cryptography
  • Authorization patterns
  • Cloud-native security
• Experience with:
  • Privileged Identity Management (PIM)
  • Role-Based Access Control (RBAC)
  • Just-in-Time (JIT) Access
  • VPN solutions
  • Desktop virtualization
  • Network segmentation
  • Data protection solutions
• Understanding of:
  • Threat Modeling
  • Cybersecurity Risk Management
  • Supply Chain Risk
  • Third-party Risk Assessment
  • Security Governance and Compliance

Roles & Responsibilities

• Design secure Identity and Access Management architectures for enterprise environments.
• Develop authentication and authorization solutions for hybrid and cloud platforms.
• Review and provide architectural guidance for IAM-related security solutions.
• Advise stakeholders and IT leadership on identity and security best practices.
• Design secure access controls using Zero Trust and least-privilege principles.
• Implement and govern:
  • SSO
  • MFA
  • Conditional Access
  • Passwordless Authentication
  • Identity Federation
• Architect solutions for:
  • Entra ID
  • Azure
  • AWS
  • Microsoft 365
  • Okta
  • PingFederate
• Design secure identity integrations for cloud-native, web, and mobile applications.
• Provide guidance on:
  • Secrets management
  • Certificate management
  • OAuth/OIDC flows
  • Session management
  • Token security
• Design IAM roadmaps aligned with security frameworks and audit requirements.
• Evaluate and improve cloud entitlement management (CIEM) and overall security posture.
• Perform threat modeling and security architecture reviews.
• Collaborate with cross-functional teams to deliver secure enterprise solutions.
• Ensure compliance with organizational security standards and regulatory requirements.

Generic Managerial Skills

• Excellent communication and presentation skills.
• Strong stakeholder and executive management capabilities.
• Ability to influence architectural and security decisions.
• Strong analytical and problem-solving skills.
• Experience leading cross-functional security initiatives.
• Ability to mentor architects and engineering teams.
• Strong collaboration across security, infrastructure, application, and business teams.
• High level of ownership, accountability, and strategic thinking.
• Ability to balance business requirements with security and compliance objectives.