IAM Architect

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
• 15+ years of experience in cybersecurity or identity and access management.
• 5+ years of experience designing and implementing enterprise IAM solutions.

Required Skills

• Strong experience with IAM technologies such as: Microsoft Entra ID (Azure AD), Okta, Ping Identity, SailPoint, CyberArk, Saviynt, ForgeRock.
• Experience with Identity Governance & Administration (IGA).
• Strong knowledge of Privileged Access Management (PAM).
• Expertise in SSO, MFA, OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, LDAP, and Kerberos.
• Experience with RBAC, ABAC, and Zero Trust security models.
• Strong understanding of Active Directory and Microsoft Entra ID.
• Experience integrating IAM with enterprise and cloud applications.
• Familiarity with AWS, Microsoft Azure, and Google Cloud IAM services.
• Knowledge of scripting or automation using PowerShell, Python, or REST APIs.
• Strong understanding of security principles, cryptography, PKI, and certificate management.

Job Summary

We are seeking an experienced Security Architect – IAM to design, implement, and govern enterprise Identity and Access Management (IAM) solutions. The ideal candidate will have expertise in identity governance, authentication, authorization, privileged access management, and cloud identity platforms. This role is responsible for developing secure IAM architectures that align with business objectives and cybersecurity best practices.

Key Responsibilities

• Design and implement enterprise IAM architecture and security strategies.
• Develop secure authentication, authorization, and identity lifecycle management solutions.
• Architect and implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation solutions.
• Design and manage Identity Governance & Administration (IGA) processes, including provisioning, deprovisioning, role management, and access reviews.
• Implement and integrate Privileged Access Management (PAM) solutions.
• Design secure access controls for on-premises, cloud, and hybrid environments.
• Collaborate with security, infrastructure, application, and cloud teams to integrate IAM services.
• Conduct IAM security assessments, risk analyses, and architecture reviews.
• Ensure compliance with security frameworks and regulatory requirements.
• Create architecture documentation, standards, policies, and technical designs.
• Troubleshoot complex IAM issues and provide technical leadership.
• Stay updated on emerging IAM technologies and cybersecurity trends.

Preferred Certifications

• CISSP
• MCPA (Microsoft Certified: Identity and Access Administrator)
• MCC (Microsoft Certified: Cybersecurity Architect)
• OCM (Okta Certified Professional/Administrator)
• SQE (SailPoint IdentityIQ Engineer)
• CDE (CyberArk Certified Delivery Engineer)
• CIM (Certified Identity and Access Manager)
• GIAC Security Certifications (preferred)

Nice to Have Experience

• Experience with Zero Trust Architecture.
• Knowledge of DevSecOps and CI/CD security integration.
• Experience with cloud-native identity services and API security.
• Familiarity with compliance standards such as ISO 27001, NIST, SOC 2, PCI-DSS, HIPAA, and GDPR.
• Experience working in large enterprise or regulated environments.