Sr Architect

Area(s) of responsibility

Job Title- Identity and Access Management Architect

Location- Pune/Mumbai

Mandatory Skills and Experience

• Minimum 10+ years of experience in Identity and Access Management, with strong architecture and implementation background.
• Proven experience as an IAM Architect / IAM Lead / IAM Solution Designer for enterprise-scale IAM programs.
• Strong hands-on and architectural experience with one or more IAM platforms such as:
• SailPoint IdentityIQ / IdentityNow
• Okta
• Microsoft Entra ID / Azure AD
• Active Directory
• CyberArk / BeyondTrust / Delinea or equivalent PAM platforms
• Strong understanding of identity lifecycle management, access governance, provisioning, reconciliation, certification, and role management.
• Experience in application onboarding for IGA, SSO, MFA, PAM, and directory integration.
• Strong knowledge of authentication and federation protocols including SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, and REST APIs.
• Experience designing directory integrations, delegated authentication, user mastering, attribute-level mastering, and identity correlation rules.
• Strong understanding of RBAC, ABAC, SoD policies, privileged access controls, least privilege, and access review processes.
• Experience with password vault configuration, privileged account onboarding, password rotation, session management, and secrets management.
• Experience with PKI, certificate lifecycle management, passwordless authentication, MFA, and conditional access policies.
• Strong knowledge of cloud identity and security architecture across Microsoft Azure, M365/O365, AWS IAM, KMS, and SaaS integrations.
• Ability to create high-quality architecture and delivery documents such as SRS, HLD, LLD, design documents, runbooks, test plans, and operational handover documents.
• Experience supporting compliance and audit requirements for SOX, NIST, ISO 27001, CMMC/CMMI, and Cloud Security Alliance frameworks.
• Excellent communication, stakeholder management, leadership, and decision-making skills.
• Ability to lead technical discussions, architecture reviews, design workshops, and executive-level solution walkthroughs.

Preferred Skills

• Experience with Zero Trust architecture and identity-centric security models.
• Experience with CIAM, B2B/B2C identity, external identity, or customer-facing identity platforms.
• Experience with IAM migration, consolidation, modernization, or transformation programs.
• Knowledge of DevSecOps, API security, secrets management, and workload identity.
• Experience with automation using PowerShell, Python, REST APIs, SCIM, or IAM Connector
• Relevant certifications such as:
• Microsoft Certified: Identity and Access Administrator
• Okta Certified Professional / Administrator / Consultant
• SailPoint IdentityIQ / IdentityNow Certification
• CyberArk Defender / Sentry
• CISSP / CCSP / CISM
• AWS Security Specialty