Security Architect

Key Responsibilities

1. Discovery & Assessment

Assess the organization's current IAM landscape, including:

o Identity Governance & Administration (IGA)

o Privileged Access Management (PAM)

o Authentication and Single Sign-On (SSO)

o Access Certification and Governance processes

o Directory Services and Identity Stores

Evaluate existing IAM security controls, architecture standards, and operational processes.

Identify security, compliance, and operational gaps.

Produce current-state architecture assessments and recommendations.

2. Requirements Gathering & Analysis

Conduct workshops and stakeholder interviews with business, security, risk, compliance, and application teams.

Gather functional and non-functional IAM requirements.

Translate business and regulatory requirements into IAM architecture principles.

Document use cases and security requirements.

3. IAM Architecture Design

Define enterprise IAM architecture standards and frameworks.

Design:

o Authentication architectures

o Authorization models

o Role-Based Access Control (RBAC)

o Attribute-Based Access Control (ABAC)

o Federation and Single Sign-On architectures

o Privileged Access Management frameworks

Ensure architecture alignment with Zero Trust and cybersecurity policies.

4. IAM Security Pattern Development

Develop reusable IAM security patterns for common business scenarios.

Establish standard design templates and implementation blueprints.

Create approved reference architectures covering:

o Joiner-Mover-Leaver processes

o Application onboarding

o Privileged access management

o API and service account security

o Federation and external identity integrations

o MFA and passwordless authentication

Maintain a catalog of approximately 160+ enterprise IAM patterns.

5. Security Architecture Reviews

Conduct architecture reviews for IAM solutions and integrations.

Collaborate with Security, Risk, Compliance, Infrastructure, and Engineering teams.

Review technical designs against security standards and control requirements.

Drive remediation of architecture and security control gaps.

6. Documentation & Standards Management

Develop and maintain:

o IAM Architecture Frameworks

o Security Standards

o Architecture Decision Records (ADRs)

o Technical Reference Architectures

o Pattern Catalogs

o Implementation Guidance Documents

Ensure architecture artifacts remain current and accessible.