Identity and Access Management Architect

We need to output HTML fragment with sections: About the role? The posting includes "Work you'll do" and description. Use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to include sections only when posting has real specific content. Let's parse. Content: Intro about Deloitte Global (maybe "About the role"? Actually "Work you'll do" is description of role. Could map to "About the role". Then "Core Responsibilities" -> Responsibilities. Then "Qualifications" -> Qualifications. Also there is "The team" maybe part of About the role. There's also "Identity Providers / Directories: ..." maybe part of Skills? Could be Skills. There's also "Limited immigration sponsorship may be available." That's maybe Benefits? Not exactly benefit but could be included in Benefits? Might be considered a benefit. But we should only include sections if there is real specific content. Immigration sponsorship is a detail; could be placed under Benefits? Might be better to include under Benefits as a bullet. However the instruction: "Prefer a few substantive sections over many thin ones." So maybe combine. We need to use

• for any list of duties/requirements/benefits. So we need to list responsibilities as bullet list. Requirements as bullet list? The qualifications list includes bullet points (starting with "Do you possess the following?:"). We'll output as
  • . We need to preserve all substantive information, not invent or summarize away detail. So we need to include all details. Let's extract sections: About the role: Could include introductory paragraph: "Deloitte Global is the engine of the Deloitte network..." plus "Work you'll do We are seeking a Senior Manager-level IAM Architect..." plus maybe "The team Deloitte Technology works at the forefront..." This is descriptive. Responsibilities: Core Responsibilities bullet list. Qualifications: The list after "Qualifications Do you possess the following?:" includes bullet points. Skills: Could include the specific technologies list: "Identity Providers / Directories: Entra ID/Azure AD, Microsoft AD Identity Governance and PAM: SailPoint, CyberArk Authentication & Federation: Ping Identity, OAuth2/OIDC, SAML, SCIM Cloud & DevOps integration: AWS/Azure/GCP identity services, CI/CD tooling". This is more like technical skills. Could be placed under Skills. Benefits: "Limited immigration sponsorship may be available." That's a benefit. Also maybe no explicit pay or schedule. So we should not create Pay or Schedule sections because not stated. Thus sections: About the role, Responsibilities, Qualifications, Skills, Benefits. We need to use

    for each section heading. We need to output only HTML fragment, no /. Let's craft. About the role: combine paragraphs into

    . Might need to preserve line breaks? Use

    for prose. Responsibilities:

    • each bullet. Qualifications:
      • each bullet. Skills: Could be
        • each technology grouping? Or could be a

          with list. Since it's a list of technologies, better as

          • . Benefits:
            • limited immigration sponsorship may be available. Check for any duplicated lines: The posting repeats some sentences? Eg "Partner with Senior IAM leadership team to define and own the enterprise IAM architecture..." appears in responsibilities and also earlier? We need to preserve all substantive information but not duplicate lines? The instruction: "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." So we should remove duplicated lines. Need to identify duplicates. Let's scan the posting for duplicates: - "Partner with Senior IAM leadership team to define and own the enterprise IAM architecture, strategy, reference patterns, and roadmaps across authentication, authorization, identity lifecycle, privileged access, and account protection." appears in Core Responsibilities bullet list. Also earlier in "Work you'll do" maybe not exactly same. The earlier paragraph: "Partner with Senior IAM leadership team to define and drive the technical strategy and architecture for Identity and Access Management (IAM) across the organization." Slightly different. Not duplicate. - "Partner with IAM product technical leads to assist with technical design and implementation for authentication (e.g. MFA, SSO, etc), authorization models (e.g. RBAC, ABAC, etc), identity provisioning, lifecycle management, and privileged access controls." appears in responsibilities. - "Champion innovation with Identity and Access Management tools, evaluate and provide recommendations to product owners for consideration and integration with the existing platform, while balancing security, privacy, and usability." appears. - "Architect secure integrations between IAM platforms and applications, directories, cloud services, and CI/CD pipelines, set standards and reusable patterns for developers." appears. - "Partner with IAM Sr. Leadership team and IAM product technical leads to address IAM risk assessments, threat modeling, and remediation strategies, partner with security, risk, and compliance teams to implement controls and measure risk reduction." appears. - "Partner with IAM product technical leads to oversee incident response activities as they relate to identity compromise, and lead post-incident root-cause analysis and remediation." appears. - "Drive adoption: create technical guidance, architecture diagrams, and executive-level briefings, mentor architects and senior engineers on IAM best practices." appears. - "Collaborate with product, engineering, and business leaders to prioritize roadmap items, measure outcomes (security posture, access-related incidents, time-to-provision), and demonstrate business value." appears. - "Ensure compliance" appears alone? Actually after responsibilities there is "Ensure compliance The team Deloitte Technology works..." Might be a fragment. Probably part of responsibilities? It says "Ensure compliance". Could be a bullet? Not sure. We'll keep as a bullet maybe. Now qualifications list: "Do you possess the following?: 10+ years of IAM experience with progressive technical leadership, experience in a consulting or large enterprise environment preferred. Proven track record designing, delivering, and operating enterprise-scale IAM solutions across cloud and on-prem environments. Deep technical knowledge of authentication/authorization protocols and standards (OAuth2/OIDC, SAML, SCIM, LDAP) and modern IAM architectures. Hands-on experience with at least two major IAM technologies (e.g., Entra ID/Azure AD, Microsoft AD, CyberArk, SailPoint, Ping Identity). Strong stakeholder management and communication skills, able to present technical concepts to executive audiences and translate business needs into technical requirements. Experience leading vendors, technical teams, and cross-functional workstreams to successful outcomes. Advanced degree (MS) or certifications (e.g., CISSP, CISM, SABSA, TOGAF, vendor-specific IAM certs). Experience with zero-trust identity models, identity governance, privileged access management, and modern authentication modalities (passwordless, biometrics, adaptive MFA). Prior experience building IAM programs or working in high-regulation industries (finance, healthcare, government). Balance strategic thinking with the ability to roll up sleeves and deliver technically where needed." That's a list of sentences separated by periods. We'll turn each sentence into
            • . Skills: The technologies list: "Identity Providers / Directories: Entra ID/Azure AD, Microsoft AD Identity Governance and PAM: SailPoint, CyberArk Authentication & Federation: Ping Identity, OAuth2/OIDC, SAML, SCIM Cloud & DevOps integration: AWS/Azure/GCP identity services, CI/CD tooling". Could break into categories. We'll output as
              • each category. Benefits: "Limited immigration sponsorship may be available." Now ensure we don't include Pay or Schedule sections. Now produce HTML. Let's craft:

                About the role

                Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. Work you'll do We are seeking a Senior Manager-level IAM Architect to partner with Senior IAM leadership team to define and drive the technical strategy and architecture for Identity and Access Management (IAM) across the organization. This role combines strategic leadership, hands-on solution design with product owners, and senior level stakeholder engagement, to secure identities, enable business objectives, and improve user experience across digital channels. This individual must have a pulse on the emerging identity technology trends and best practices to coordinate with Product Owners for integrated IAM architectures and roadmaps. The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

                But note we have duplicated phrase "Work you'll do". Might be okay. Now Responsibilities:

                Responsibilities

                • Partner with Senior IAM leadership team to define and own the enterprise IAM architecture, strategy, reference patterns, and roadmaps across authentication, authorization, identity lifecycle, privileged access, and account protection.
                • Engage in executive level leadership conversations, translate business goals into IAM requirements, coordinate with IAM product owners on technical feasibility to ensure solutions scale and interoperate across on-premises, cloud, and hybrid environments.
                • Partner with IAM product technical leads to assist with technical design and implementation for authentication (e.g. MFA, SSO, etc), authorization models (e.g. RBAC, ABAC, etc), identity provisioning, lifecycle management, and privileged access controls.
                • Champion innovation with Identity and Access Management tools, evaluate and provide recommendations to product owners for consideration and integration with the existing platform, while balancing security, privacy, and usability.
                • Architect secure integrations between IAM platforms and applications, directories, cloud services, and CI/CD pipelines, set standards and reusable patterns for developers.
                • Partner with IAM Sr. Leadership team and IAM product technical leads to address IAM risk assessments, threat modeling, and remediation strategies, partner with security, risk, and compliance teams to implement controls and measure risk reduction.
                • Partner with IAM product technical leads to oversee incident response activities as they relate to identity compromise, and lead post-incident root-cause analysis and remediation.
                • Drive adoption: create technical guidance, architecture diagrams, and executive-level briefings, mentor architects and senior engineers on IAM best practices.
                • Collaborate with product, engineering, and business leaders to prioritize roadmap items, measure outcomes (security posture, access-related incidents, time-to-provision), and demonstrate business value.
                • Ensure compliance.
                Now Qualifications:

                Qualifications

                • 10+ years of IAM experience with progressive technical leadership, experience in a consulting or large enterprise environment preferred.
                • Proven track record designing, delivering, and operating enterprise-scale IAM solutions across cloud and on-prem environments.
                • Deep technical knowledge of authentication/authorization protocols and standards (OAuth2/OIDC, SAML, SCIM, LDAP) and modern IAM architectures.
                • Hands-on experience with at least two major IAM technologies (e.g., Entra ID/Azure AD, Microsoft AD, CyberArk, SailPoint, Ping Identity).
                • Strong stakeholder management and communication skills, able to present technical concepts to executive audiences and translate business needs into technical requirements.
                • Experience leading vendors, technical teams, and cross-functional workstreams to successful outcomes.
                • Advanced degree (MS) or certifications (e.g., CISSP, CISM, SABSA, TOGAF, vendor-specific IAM certs).
                • Experience with zero-trust identity models, identity governance, privileged access management, and modern authentication modalities (passwordless, biometrics, adaptive MFA).