Job description

We are looking for an experienced IAM / IGA Solution Architect to design, implement, and manage enterprise Identity and Access Management solutions. The role will focus on IGA, IAM architecture, Joiner-Mover-Leaver (JML), PAM, privileged access management, and identity governance, ensuring secure and compliant access across the organization.

Key Responsibilities

Design and implement enterprise IAM and IGA architecture aligned with security and business requirements.
Lead Identity Governance and Administration (IGA) initiatives covering identity lifecycle, access governance, provisioning, de-provisioning, and access certification.
Design and manage Joiner-Mover-Leaver (JML) processes and automated identity lifecycle workflows.
Define and implement Role-Based Access Control (RBAC) and access governance frameworks.
Architect and manage Privileged Access Management (PAM) solutions for privileged and sensitive accounts.
Work on PAM platforms such as CyberArk, BeyondTrust, or equivalent solutions.
Integrate IAM platforms with Active Directory, LDAP, HR systems, applications, databases, cloud platforms, and enterprise systems.
Develop IAM solution designs, architecture diagrams, integration patterns, and technical documentation.
Drive SSO, MFA, authentication, authorization, access provisioning, and federation initiatives.
Ensure effective identity controls for compliance, audit, and regulatory requirements.
Identify IAM security risks and recommend improvements to strengthen the organization's identity security posture.
Collaborate with Cyber Security, Infrastructure, Application, Cloud, Risk, Compliance, and business teams.
Provide technical leadership for IAM transformation and modernization programs.

Required Technical Skills

Strong experience in Identity & Access Management (IAM) and Identity Governance & Administration (IGA).
Hands-on experience with IAM architecture and solution design.
Strong understanding of Joiner-Mover-Leaver (JML) lifecycle management.
Experience with PAM / Privileged Identity Management.
Expertise in CyberArk, BeyondTrust, or similar PAM platforms.
Strong knowledge of Microsoft Active Directory, LDAP, Azure AD / Entra ID.
Experience with RBAC, access certification, entitlement management, provisioning and de-provisioning.
Knowledge of SSO, MFA, SAML, OAuth, OpenID Connect and federation.
Experience integrating IAM solutions with enterprise applications and cloud environments.
Understanding of IAM security controls, audit requirements, and access governance frameworks.

Preferred Skills

Experience with leading IGA platforms such as SailPoint, Saviynt, One Identity, or equivalent.
Experience in IAM transformation / modernization programs.
Knowledge of cloud IAM across Azure, AWS, or GCP.
Understanding of Zero Trust and identity-centric security architecture.
Relevant certifications such as CISSP, CISM, CyberArk, SailPoint, Saviynt, or Microsoft Identity certifications would be an advantage.

Education

Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related field.
Relevant professional certifications in IAM, Cyber Security, PAM, or Cloud Security will be preferred.

Key Competencies