Description

Define and own the enterprise IAM architecture, standards, and reference patterns for authentication, authorization, identity lifecycle, and privileged access.

This role is hybrid.

Responsibilities

• Develop and maintain the IAM roadmap aligned with security strategy, business objectives, and regulatory requirements.
• Design end-to-end IAM solutions including Identity Governance & Administration (IGA), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Privileged Access Management (PAM).
• Architect integrations between IAM platforms and enterprise applications, directories, cloud services, APIs, and CI/CD pipelines.
• Lead solution design for user provisioning, access request workflows, role-based and attribute-based access control (RBAC/ABAC), and access certification.
• Establish and promote DevOps and automation practices for IAM, including configuration as code and automated testing.

Required Skills

• 10+ years of experience in information security or enterprise architecture with a focus on IAM.
• Hands-on experience with at least two major IAM platforms: Identity Governance (SailPoint, Saviynt), Workforce/Customer IAM & SSO (Microsoft Entra ID/Azure AD, Okta, Ping), or Privileged Access (CyberArk, BeyondTrust).
• Deep knowledge of IAM concepts: identity lifecycle, authentication, authorization, RBAC/ABAC, least privilege, SoD, and Zero Trust principles.
• Strong understanding of directories and identity stores (AD/LDAP), group strategy, OU design, and delegation models.
• Proficiency in IAM standards and protocols: SAML, OAuth2, OpenID Connect, SCIM, LDAP, Kerberos.
• Experience designing IAM solutions for hybrid environments (on-prem, cloud, and SaaS) on platforms such as Azure, AWS, or GCP.
• Strong communication skills with the ability to explain technical concepts to technical and non-technical audiences and influence senior stakeholders.

Preferred Skills

• Experience implementing or architecting IGA solutions with SailPoint, Entra ID, Okta, Ping, or equivalent.
• Familiarity with DevOps tooling and practices (e.g., Git, CI/CD pipelines) for IAM change management.
• Relevant certifications such as CISSP, CCSP, CISM, GIAC, or vendor certifications in IAM platforms.

Key Skills

Education

Bachelor's degree