Description

Design and implement enterprise identity and access management architectures to secure cloud and on-premises environments.

You will own the IAM strategy, architecture, and integration across identity lifecycle management, authentication protocols, and governance frameworks.

Responsibilities

• Architect identity solutions including SSO, MFA, passwordless, RBAC, ABAC, and federation using SAML, OAuth, and OIDC.
• Implement and integrate IAM platforms (Azure AD/Entra ID, Okta, SailPoint, CyberArk, Ping) with cloud (AWS, Azure, GCP) and on-prem systems (Active Directory, LDAP).
• Establish Identity Governance & Administration (IGA) frameworks, role models, and access certification campaigns to ensure compliance with SOX, GDPR, HIPAA, and ISO 27001.
• Enforce least privilege and segregation of duties, integrating IAM with SIEM and PAM tools to mitigate identity-based threats.
• Define IAM technology roadmaps and drive cloud identity transformation initiatives.

Required Skills

• 5+ years of experience in IAM architecture and implementation.
• Deep expertise in SSO, MFA, and federation protocols (SAML, OAuth 2.0, OpenID Connect).
• Hands-on experience with major IAM tools: Azure AD/Entra ID, Okta, SailPoint, Ping Identity, or CyberArk.
• Strong understanding of Active Directory, LDAP, and cloud security models (AWS IAM, Azure RBAC).
• Proficiency in scripting/programming: PowerShell, Python, or Java.
• Experience with API security and identity lifecycle management (joiner, mover, leaver processes).
• Bachelor's degree in Computer Science or related field.

Preferred Skills

• Experience designing zero trust security models for identity.
• Knowledge of risk assessments and threat modeling specific to identity.

Key Skills

Education

Bachelor's degree