Description

You define the enterprise IAM architecture, standards, and reference patterns for authentication, authorization, identity lifecycle, and privileged access.

This role is hybrid.

Responsibilities

• Define and maintain the IAM roadmap aligned with security strategy, business objectives, and regulatory requirements.
• Design end-to-end IAM solutions including Identity Governance & Administration (IGA), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Privileged Access Management (PAM).
• Architect integrations between IAM platforms and enterprise applications, directories, cloud services, APIs, and CI/CD pipelines.
• Lead solution design for user provisioning, access request workflows, role-based and attribute-based access control (RBAC/ABAC), and access certification.
• Provide technical leadership to IAM engineers, guiding implementation, configuration, and migration activities while establishing DevOps and automation practices.

Required Skills

• 10+ years of experience in identity and access management architecture.
• Deep knowledge of IAM concepts: identity lifecycle, authentication, authorization, RBAC/ABAC, least privilege, SoD, and Zero Trust principles.
• Hands-on experience with at least two major IAM platforms, such as SailPoint, Okta, Microsoft Entra ID, Ping, CyberArk, or BeyondTrust.
• Strong understanding of directories and identity stores (AD/LDAP), group strategy, OU design, and delegation models.
• Proficiency with IAM standards and protocols: SAML, OAuth2, OpenID Connect, SCIM, LDAP, and Kerberos.
• Experience designing IAM solutions for hybrid environments (on-prem, cloud, and SaaS) on Azure, AWS, or GCP.
• Bachelor’s degree in computer science, Information Security, Engineering, or related field.

Preferred Skills

• Experience implementing IGA solutions with SailPoint, Entra ID, Okta, or Ping, including connector design and lifecycle management.
• Familiarity with DevOps tooling (Git, CI/CD) for IAM change management and configuration as code.
• Knowledge of regulatory frameworks (SOX, GDPR, HIPAA, ISO 27001) and relevant certifications (CISSP, CISM, vendor-specific).

Key Skills

Education

Bachelor’s degree