IAM Security Architect

Job Description:

We are looking for a skilled IAM Architect to lead the design and implementation of our Identity and Access Management (IAM) solutions. The IAM Architect will be responsible for developing and executing our IAM strategy, ensuring that our systems are secure, compliant, and effectively managed. This role will partner with cross-functional teams to provide expert guidance on IAM best practices, solutions, and integrations across various applications and systems.

Key Responsibilities:

IAM Strategy & Architecture: Define, design, and implement the IAM architecture for the organization, ensuring alignment with security, compliance, and business goals.

Policy Development: Develop and enforce IAM policies, procedures, and standards, including access control, identity federation, multi-factor authentication (MFA), and privileged access management (PAM).

System Integration: Architect and oversee the integration of IAM solutions with cloud platforms, applications, and other critical systems, ensuring seamless and secure access.

IAM Technology Management: Configure and maintain IAM tools and platforms, including identity provisioning, Single Sign-On (SSO), directory services, and role-based access control (RBAC).

Risk Management: Identify and address potential IAM security risks, providing solutions that mitigate these risks while maintaining user productivity.

Compliance: Ensure IAM systems and practices meet regulatory requirements such as GDPR, HIPAA, SOC 2, and SOX, and provide necessary audit documentation.

Collaboration: Work closely with security, IT, and development teams to ensure IAM solutions align with overall enterprise architecture and business objectives.

User Education & Support: Provide guidance to teams on IAM best practices, policies, and technology usage to promote a security-first culture.

Monitoring & Reporting: Implement IAM monitoring, reporting, and alerting for unauthorized access attempts, user activity anomalies, and policy compliance.

Qualifications:

Education: Bachelor's or Master's degree in Information Security, Computer Science, or a related field.

Experience: 7+ years of experience in Identity and Access Management, including 3+ years in IAM architecture roles.

Certification: Relevant certifications such as Certified Identity and Access Manager (CIAM), Certified Information Systems Security Professional (CISSP), or Certified Cloud Security Professional (CCSP) are a plus.

Technical Expertise:

Proficiency in IAM technologies such as Okta, Ping Identity, SailPoint, Microsoft Azure AD, and CyberArk.

Strong knowledge of protocols and standards (e.g., SAML, OAuth, OpenID Connect, LDAP, SCIM).

Hands-on experience with IAM solutions in cloud and hybrid environments (Azure, AWS, GCP).

Skills:

Excellent understanding of security frameworks (NIST, ISO 27001) and IAM best practices.

Strong analytical, troubleshooting, and problem-solving skills.

Ability to effectively communicate complex IAM concepts to technical and non-technical stakeholders.

Preferred Skills:

Experience with DevSecOps and integration of IAM within CI/CD pipelines.

Familiarity with Infrastructure as Code (IaC) tools such as Terraform or Ansible.

Knowledge of emerging technologies in IAM, such as Zero Trust Architecture, passwordless authentication, and biometric-based authentication.