IAM Architect

" Design and develop enterprise IAM architecture aligned with security and business goals
" Define identity lifecycle management (joiner, mover, leaver processes)
" Architect solutions for:
" Authentication (SSO, MFA, passwordless)
" Authorization (RBAC, ABAC)
" Federation (SAML, OAuth, OIDC)

An IAM Architect is responsible for designing, implementing, and governing identity and access management solutions that ensure secure access to enterprise systems, applications, and data. This role bridges business requirements, cybersecurity, and IT architecture to enforce robust identity governance and compliance.

Key Responsibilities

1. Architecture & Design
Design and develop enterprise IAM architecture aligned with security and business goals
Define identity lifecycle management (joiner, mover, leaver processes)
Architect solutions for:
o Authentication (SSO, MFA, passwordless)
o Authorization (RBAC, ABAC)
o Federation (SAML, OAuth, OIDC)
Develop zero trust security models for identity

2. Implementation & Integration
Lead implementation of IAM platforms such as:
o Azure AD / Entra ID
o Okta
o SailPoint
o CyberArk
o Ping Identity
Integrate IAM systems with:
o Cloud platforms (AWS, Azure, GCP)
o On-prem systems (Active Directory, LDAP)
o Enterprise applications (SAP, Salesforce, Workday)
Enable API security and identity federation

3. Governance, Risk & Compliance
Establish Identity Governance & Administration (IGA) frameworks
Design role models and access certification campaigns
Ensure compliance with standards:
o SOX, GDPR, HIPAA, ISO 27001
Implement audit logging, monitoring, and reporting

4. Security & Risk Management
Enforce least privilege & segregation of duties (SoD)
Design solutions to mitigate identity-based threats
Integrate IAM with:
o SIEM (e.g., Splunk, Sentinel)
o PAM (Privileged Access Management)
Conduct risk assessments and threat modeling

5. Strategy & Roadmap
Define IAM strategy and technology roadmap
Evaluate and recommend IAM tools and platforms
Drive cloud identity transformation initiatives
Promote adoption of passwordless and Zero Trust frameworks

6. Stakeholder Collaboration
Work with:
o Security teams
o IT operations
o Application owners
o Compliance and audit teams
Provide technical leadership and mentorship to IAM engineers
Communicate complex IAM concepts to non-technical stakeholders