Architect - Identity and Access Management - IAM SME
Core
Lead the design, architecture, and implementation of enterprise Identity & Access Management solutions across workforce, customer, cloud, application, and non-human identities.
Role type
Senior IC IAM Architect (Strategy & Technical Lead)
Builds
Enterprise-scale IAM transformation programs, cloud-native identity services, and secure access governance models.
Domain
Cloud Security / Identity & Access Management
Required skills
IAM strategy definition, HLD/LLD design, POC leadership, cross-functional project management, vendor management, cloud security architecture, Zero Trust design, authentication protocol implementation (OAuth, OIDC, SAML, FIDO2), privileged access management, non-human identity security.
Preferred skills
CISSP, CISM, CCSP, Azure Security Engineer, AWS Security Specialty, Okta Certified Professional/Administrator, CyberArk Defender/Sentry.
Technologies
Microsoft Entra ID, Azure, AWS IAM, Google Cloud IAM, Okta, SailPoint, Saviynt, CyberArk, Ping Identity, ForgeRock, HashiCorp Vault, OAuth, OIDC, SAML, SCIM, FIDO2, Passkeys, mTLS.
Responsibilities
Lead solution design sessions and produce architecture deliverables (HLDs, LLDs, sequence diagrams). Translate business requirements into scalable IAM solutions. Review and approve IAM designs produced by engineering teams and vendors. Provide technical oversight throughout the lifecycle of IAM implementations. Lead Proof-of-Concept (POC) initiatives and pilot programs for emerging IAM technologies. Present recommendations and business cases to leadership and architecture governance boards. Design IAM solutions for Azure, AWS, and GCP environments. Develop standards for cloud-native identity services and privileged access controls. Implement modern authentication mechanisms including OAuth, OIDC, SAML, FIDO2, Passkeys, and mTLS. Define cloud access governance and least-privilege models. Collaborate with cloud platform teams to enable secure cloud adoption and migration initiatives. Lead and manage IAM cross-functional projects from initiation to completion, including planning, scope management, risk management, design reviews, execution oversight, deployment support, change management, and project closure. Coordinate activities across security, infrastructure, network, cloud, application, and business teams. Manage vendors, integrators, and implementation partners. Track project milestones, dependencies, risks, and deliverables.
Seniority
Senior, hands-on IC with strategic leadership
