Principal Domain Architect - Identity and Access Security
Core
Architectural authority for global Identity and Access Management (IAM) strategy, standards, and implementation across cloud, on-prem, and hybrid environments.
Role type
Principal Domain Architect (Identity and Access Security)
Builds
Global IAM architecture vision, reference architectures, and secure integration patterns for identity lifecycle, access governance, and Zero Trust principles.
Domain
Enterprise Security / Identity and Access Management (IAM)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure
Required skills
Enterprise security architecture, Identity Security (Zero Trust), Cloud security principles, Security standards mapping (ISO 27002, NIST 800-53), Architectural modeling (ArchiMate, UML), IAM platform consolidation, Global team leadership, Technical prototyping
Preferred skills
CISSP, SABSA, TOGAF certifications, Bachelor's degree in Computer Science
Technologies
IAM platforms (IGA, PAM, AM, CIAM), Cloud (SaaS, IaaS, PaaS), Containerized workloads, Hardware-based security modules
Responsibilities
Define global IAM architecture vision and roadmap aligned with enterprise security strategy; Establish standards and reference architectures for identity lifecycle and access governance; Architect IAM capabilities including privileged access management and machine identity; Drive Zero Trust principles and adaptive access controls; Design RBAC, ABAC, and PBAC models for least privilege; Integrate IAM into cloud and hybrid platforms; Partner with HR and security teams to embed IAM controls in joiner-mover-leaver processes; Lead and mentor a globally distributed team of IAM architects; Act as trusted advisor to leadership on identity risk priorities.
Seniority
Principal, strategy & mentorship
