Identity & Access Management (IAM) Architect

The ideal candidate brings deep expertise in **directory services, authentication systems, access governance, vault and secrets management, cloud identity integration, and PKI**, along with a strong understanding of compliance frameworks such as **ISO 27001, SOC 2, and NIST**.* Lead the **architecture, design, and governance of enterprise IAM services**, supporting business, security, and operational requirements.* Design and manage **directory and identity services** including enterprise directory platforms and LDAP‐based systems.* Architect **authentication and access control mechanisms** for users, applications, and infrastructure, including strong and adaptive authentication models.* Define and govern **identity lifecycle processes** covering onboarding, access changes, and offboarding for employees, contractors, and partners.* Design secure **access enforcement and entitlement models** for enterprise systems and applications.* Drive **authentication modernization initiatives**, reducing credential risk while improving user experience.* Architect and integrate **vault and secrets management capabilities** for applications, services, and infrastructure.* Familiarity with **Public Key Infrastructure (PKI)**, certificate‐based trust models for enterprise use cases, certificate lifecycle processes including issuance, renewal, revocation, and automation.* Support secure application integrations using certificates for TLS, mutual authentication, smart credentials, and signing use cases.* Integrate IAM services with **cloud identity platforms and hybrid environments** as required.* Work with federation standards and protocols such as **SAML, OAuth, and OpenID Connect**.* Ensure IAM services are designed for **high availability, resilience, and disaster recovery**.* Perform regular **health checks, access reviews, and security assessments** across IAM platforms.* Troubleshoot and resolve **complex identity, authentication, and access issues**.* Align IAM architecture and controls with **ISO 27001, SOC 2, NIST, GDPR**, and enterprise security policies.* Support internal and external audits by providing documentation, evidence, and remediation plans.* Define and track **service metrics, SLAs, KPIs, and risk indicators** for IAM services.* Collaborate closely with **IAM, Infrastructure, Security, Cloud, and Application teams** globally.* Provide architectural guidance, design reviews, and technical leadership across IAM initiatives.* Contribute to **change management, documentation, and governance processes** using ITSM tools.* Mentor engineers and lead cross‐functional technical initiatives.* Proven experience designing and leading **enterprise‐scale IAM architectures**.* Strong expertise in **directory services, authentication systems, access controls, and identity governance**.* Hands‐on experience with **LDAP‐based platforms, strong authentication solutions, and access enforcement technologies**.* Experience designing and operating **PKI and certificate lifecycle management** solutions.* Experience with **vault or secrets management platforms** and secure credential handling.* Strong understanding of **cloud identity integration and hybrid IAM models**.* Experience working with **federation protocols and identity standards**.* Strong analytical and problem‐solving skills with the ability to resolve high‐impact security and access issues.* Experience working with **global teams and diverse stakeholders**.* Familiarity with **ITIL processes** (Incident, Change, Problem Management).* Experience using **service management tools**.* Ability and willingness to work **onsite from the office** in a collaborative environment.7+ years of experience in **enterprise IT or Information Security**, with strong specialization in **Identity and Access Management**.* Experience supporting **large‐scale enterprise or regulated environments**.* Background in **identity governance, cryptographic services, or credential management**.* Experience supporting **audit, risk, and compliance activities**.* Prior experience in an **architect, senior lead, or principal‐level role**.* Relevant security or identity certifications.* Lead **strategic identity, authentication, and trust initiatives** in a global enterprise.* Influence how access and credentials are secured at scale.* Work closely with cross‐functional teams through **in‐person collaboration**.* Competitive compensation, benefits, and long‐term career growth opportunities. #J-18808-Ljbffr