Title: Sr Architect
Area(s) of responsibility
Job Title- Identity and Access Management Architect
Location- Pune/Mumbai
Mandatory Skills and Experience
- Minimum 10+ years of experience in Identity and Access Management, with strong architecture and implementation background.
- Proven experience as an IAM Architect / IAM Lead / IAM Solution Designer for enterprise-scale IAM programs.
- Strong hands-on and architectural experience with one or more IAM platforms such as:
- SailPoint IdentityIQ / IdentityNow
- Okta
- Microsoft Entra ID / Azure AD
- Active Directory
- CyberArk / BeyondTrust / Delinea or equivalent PAM platforms
- Strong understanding of identity lifecycle management, access governance, provisioning, reconciliation, certification, and role management.
- Experience in application onboarding for IGA, SSO, MFA, PAM, and directory integration.
- Strong knowledge of authentication and federation protocols including SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, and REST APIs.
- Experience designing directory integrations, delegated authentication, user mastering, attribute-level mastering, and identity correlation rules.
- Strong understanding of RBAC, ABAC, SoD policies, privileged access controls, least privilege, and access review processes.
- Experience with password vault configuration, privileged account onboarding, password rotation, session management, and secrets management.
- Experience with PKI, certificate lifecycle management, passwordless authentication, MFA, and conditional access policies.
- Strong knowledge of cloud identity and security architecture across Microsoft Azure, M365/O365, AWS IAM, KMS, and SaaS integrations.
- Ability to create high-quality architecture and delivery documents such as SRS, HLD, LLD, design documents, runbooks, test plans, and operational handover documents.
- Experience supporting compliance and audit requirements for SOX, NIST, ISO 27001, CMMC/CMMI, and Cloud Security Alliance frameworks.
- Excellent communication, stakeholder management, leadership, and decision-making skills.
- Ability to lead technical discussions, architecture reviews, design workshops, and executive-level solution walkthroughs.
Preferred Skills
- Experience with Zero Trust architecture and identity-centric security models.
- Experience with CIAM, B2B/B2C identity, external identity, or customer-facing identity platforms.
- Experience with IAM migration, consolidation, modernization, or transformation programs.
- Knowledge of DevSecOps, API security, secrets management, and workload identity.
- Experience with automation using PowerShell, Python, REST APIs, SCIM, or IAM Connector
- Relevant certifications such as:
- Microsoft Certified: Identity and Access Administrator
- Okta Certified Professional / Administrator / Consultant
- SailPoint IdentityIQ / IdentityNow Certification
- CyberArk Defender / Sentry
- CISSP / CCSP / CISM
- AWS Security Specialty