IAM Architect

We are seeking an experienced IAM Architect to design, implement, and enhance enterprise Identity and Access Management (IAM) solutions. The ideal candidate will have expertise in authentication, authorization, identity governance, privileged access management, and cloud identity platforms. This role involves collaborating with security, infrastructure, and application teams to deliver secure, scalable, and compliant IAM architectures. Key Responsibilities: Design and implement enterprise IAM architecture and security strategies. Lead IAM solution design, deployment, and integration across cloud and on-premise environments. Develop authentication and authorization solutions using SSO, MFA, OAuth, OpenID Connect, and SAML. Implement Identity Governance & Administration (IGA) and Privileged Access Management (PAM) solutions. Integrate applications with IAM platforms and directory services (Active Directory, Azure AD/Entra ID, LDAP). Define role-based (RBAC) and attribute-based (ABAC) access control models. Collaborate with security, infrastructure, and application teams to ensure secure identity lifecycle management. Conduct security assessments, architecture reviews, and IAM best practice recommendations. Ensure compliance with industry standards such as SOX, HIPAA, PCI-DSS, GDPR, and ISO 27001. Troubleshoot complex IAM issues and provide architectural guidance to engineering teams. Required Qualifications: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field. 8+ years of IT experience with at least 5 years in Identity & Access Management. Strong understanding of IAM architecture, authentication, authorization, and identity governance. Experience with one or more IAM platforms such as: Saviynt Okta Ping Identity ForgeRock CyberArk Hands‑on experience with SSO, MFA, OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, and SCIM. Experience with Active Directory, Azure AD, and directory synchronization. Knowledge of cloud platforms including AWS, Azure, or Google Cloud. Familiarity with scripting languages such as PowerShell, Python, or Java. Strong analytical, troubleshooting, and communication skills. Preferred Qualifications: IAM or cybersecurity certifications such as CISSP, CISM, Microsoft Identity certifications, SailPoint, Saviynt, Okta, or CyberArk. Experience with Zero Trust Architecture. Knowledge of DevSecOps and Infrastructure as Code (Terraform, Ansible). Required Skills: Identity & Access Management (IAM) Identity Governance & Administration (IGA) Privileged Access Management (PAM) Single Sign-On (SSO) OAuth 2.0, OpenID Connect, SAML SailPoint, Saviynt, Okta, Ping Identity, ForgeRock, CyberArk #J-18808-Ljbffr Axiom Global Technologies