IAM Architect / Manager – Identity & Access Management

The IAM Architect is responsible for designing and leading enterprise Identity & Access Management strategies across Identity Governance, Privileged Access Management, Workforce Identity, and Cloud Identity platforms. This role provides architectural leadership, establishes IAM standards, and drives large-scale IAM transformation initiatives aligned with enterprise security strategies.

Day to day responsibilities

IAM Architecture

• Define enterprise IAM architecture and technology roadmaps
• Design end-to-end identity solutions across workforce and privileged identities
• Develop IAM reference architectures, standards, and design patterns
• Lead solution design workshops with business and technical stakeholders

Identity Governance

• Architect Saviynt and SailPoint solutions
• Design identity lifecycle governance
• Define RBAC and ABAC strategies
• Design access certification and governance frameworks

Privileged Access Management

• Architect CyberArk, Delinea, and BeyondTrust solutions
• Define privileged access strategies
• Design privileged identity governance and operational models

Identity Platforms

• Architect Microsoft Entra ID solutions
• Design Okta Workforce Identity architectures
• Integrate cloud identity providers with enterprise applications
• Define federation, SSO, MFA, Conditional Access, Identity Protection, and Passwordless strategies

Program Leadership

• Lead multiple IAM implementation workstreams
• Provide architectural governance
• Mentor consultants and engineers
• Participate in solution estimation, proposal development, and customer presentations
• Collaborate with executive stakeholders on IAM strategy

Essential traits

Core Technical Skills

• 9–12 years of IAM experience
• Strong enterprise architecture experience across IAM domains
• Deep expertise in Saviynt and/or SailPoint
• Strong experience with CyberArk, Delinea, or BeyondTrust
• Extensive experience with Microsoft Entra ID
• Strong experience with Okta Workforce Identity
• Experience designing federation, SSO, MFA, Conditional Access, Identity Governance, and PAM solutions
• Experience developing enterprise IAM roadmaps

Technical Foundations

• Identity governance and administration
• Privileged Access Management
• Authentication and federation (SAML, OAuth2, OIDC, SCIM)
• Active Directory and LDAP
• Cloud identity architecture
• API integrations
• Zero Trust security architecture

Prerequisites

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or equivalent practical experience.

• Experience leading enterprise IAM transformation programs
• Experience in consulting or professional services organizations
• Experience with cloud platforms (Azure, AWS, GCP)
• Strong understanding of security frameworks such as NIST and CIS
• Microsoft, Okta, Saviynt, SailPoint, CyberArk Certifications

#LI-Hybrid

#LI-SP1