Description

Define and own the IAM reference architecture across on-prem, hybrid, and multi-cloud environments. Design identity solutions aligned to Zero Trust, NIST, and least-privilege principles.

Responsibilities

• Architect and govern Microsoft Active Directory (Forest/domain design, trusts, GPOs, LDAP, DNS) and Microsoft Entra ID (Hybrid identity, Conditional Access, MFA, Identity Protection, B2B/B2C).
• Design and manage Okta for SSO, federation (SAML, OIDC, OAuth 2.0), Lifecycle Management, and MFA, integrating with SaaS, custom, and legacy applications.
• Implement CyberArk PAM solutions including vault architecture, privileged credential lifecycle, session management, and access monitoring.
• Define IAM governance models, access reviews, and entitlement management to support compliance requirements (SOX, ISO 27001, SOC 2, PCI, HIPAA).
• Serve as the IAM subject matter expert, providing design reviews, solution validation, and architectural oversight for engineering and security teams.

Required Skills

• 5+ years of experience in IAM architecture and strategy.
• Deep expertise in Microsoft Active Directory, LDAP, and DNS integration.
• Strong knowledge of Microsoft Entra ID (Azure AD), including Conditional Access and Hybrid identity.
• Proficiency in Okta, SAML, OIDC, and OAuth 2.0 protocols.
• Experience with CyberArk or similar Privileged Access Management solutions.
• Understanding of compliance frameworks: SOX, ISO 27001, and SOC 2.

Preferred Skills

• Experience with Zero Trust architecture and NIST guidelines.
• Background in threat modeling and IAM incident response.

Key Skills

Education

Any Gradute