Description

Key Responsibilities

Architecture & Strategy

• Define and own the IAM reference architecture across on-prem, hybrid, and multi-cloud environments
• Design identity solutions aligned to Zero Trust, NIST, and least-privilege principles
• Develop IAM roadmaps, standards, patterns, and technical guardrails
• Lead IAM platform modernization and cloud identity transformation initiatives

Identity & Directory Services

• Architect and govern Microsoft Active Directory (on-prem) including:
  • Forest/domain design, trusts, GPOs, LDAP, DNS integration
  • AD security hardening and tiered admin models
• Design and manage Microsoft Entra ID (Azure AD) including:
  • Hybrid identity (AAD Connect / Cloud Sync)
  • Conditional Access, MFA, Identity Protection
  • B2B/B2C identity scenarios

Access Management & Federation

• Architect Okta for:
  • SSO, federation (SAML, OIDC, OAuth 2.0)
  • Lifecycle Management (JML processes)
  • MFA and adaptive authentication
• Integrate Okta and Entra ID with SaaS, custom, and legacy applications

Privileged Access Management

• Design and implement CyberArk PAM solutions including:
  • Vault architecture and high availability
  • Privileged credential lifecycle management
  • Session management and privileged access monitoring
• Define privileged access policies for infrastructure, cloud, and applications

Governance, Risk & Compliance

• Define IAM governance models, access reviews, and entitlement management
• Support compliance requirements (SOX, ISO 27001, SOC 2, PCI, HIPAA as applicable)
• Perform IAM risk assessments and threat modeling
• Lead incident response activities related to identity and access security

Technical Leadership

• Serve as the IAM subject matter expert for engineering and security teams
• Provide design reviews, solution validation, and architectural oversight
• Mentor IAM engineers and support operational teams
• Collaborate with application owners on secure authentication design

Key Skills

Education

Any Gradute