IAM Architect

Job Description
We are seeking a highly skilled and strategic IAM Architect to join our cybersecurity team. This role is pivotal in designing, implementing, and maintaining enterprise-level identity and access management solutions. The IAM Architect will work across multiple business units to ensure secure and compliant access to systems and data while enabling seamless user experiences.

Key Responsibilities:
Design and develop scalable and secure IAM solutions across cloud and on-prem environments.

Lead the architecture of identity governance, privileged access management (PAM), authentication (MFA, SSO), and directory services.

Evaluate and select IAM tools and platforms; develop integration strategies with enterprise systems.

Collaborate with InfoSec, IT, and application teams to define access policies, roles, and workflows.

Conduct risk assessments and drive IAM compliance initiatives with relevant standards (SOX, HIPAA, ISO 27001).

Provide technical leadership in IAM roadmap planning and architecture reviews.

Monitor IAM system performance and ensure high availability, reliability, and incident response readiness.

Stay up to date on emerging IAM technologies and recommend enhancements or replacements.

Required Qualifications:
Bachelor’s degree in Computer Science, Cybersecurity, or related field.

7+ years in identity and access management with at least 3 years in an architect role.

Strong experience with IAM platforms (e.g., SailPoint, Okta, ForgeRock, CyberArk, Azure AD).

Solid understanding of RBAC, ABAC, Zero Trust, LDAP, SAML, OIDC, and OAut..

Proven experience in securing access to cloud platforms (AWS, Azure, GCP).

Hands-on scripting or programming experience (Python, PowerShell, or Java preferred).

Familiarity with DevOps/IaC tools is a plus (Terraform, Ansible, etc.).

Nice to Have:
IAM or Security certifications (e.g., CISSP, CIAM, CISM, Azure Security Engineer).

Experience in regulated environments (financial services, healthcare, etc.).

Knowledge of identity lifecycle automation and self-service access models