Description

You will design and lead the architecture for workload identity and access management across Azure, GCP, hybrid, and on-premises environments.

Responsibilities

• Develop the overarching vision, principles, and architecture for workload identity and access management systems.
• Define workload identity types, such as Managed Identities, Service Accounts, and SPIFFE identities, including their lifecycle management processes.
• Design frameworks and policies to control workload access to resources using the principle of least privilege.
• Create secure methods for workloads to authenticate and communicate with one another.
• Design integration points between the workload IAM system and existing infrastructure like Entra ID.
• Drive the creation of a long-term workload IAM governance framework aligned with industry best practices.
• Serve as the subject matter expert on workload identity concepts and technologies.
• Assess and recommend identity features and tools within Azure and GCP to meet security and compliance requirements.

Required Skills

• 5+ years of experience in identity and access management architecture.
• Experience designing IAM systems for Azure and GCP environments.
• Knowledge of Managed Identities, Service Accounts, and SPIFFE/SPIRE.
• Experience with Entra ID or Entra Workload Identity.
• Ability to design secure authentication and communication methods for workloads.
• Experience implementing least privilege access policies.
• Background in designing IAM for hybrid and on-premises environments.
• Degree in any graduate field.

Key Skills

Education

Any Gradute