iAM Architect - IT Governance & Compliance

Description :

The IAM Architect is responsible for designing, implementing, and managing enterprise Identity and Access Management (IAM) solutions. This role ensures secure, streamlined access across client applications and infrastructure while aligning with governance, compliance, and cloud security strategies.

Key Responsibilities :

Design & Implementation :

- Architect and deploy IAM systems using NetIQ IDM/IGA, ensuring scalability, resilience, and security.

Governance & Compliance :

- Define and enforce IAM policies, standards, and procedures. Conduct audits to ensure compliance with regulatory and security requirements.

Integration & Federation :

- Enable integration with identity providers (AD, Azure AD, Okta, ADFS) and support federated authentication via SAML, OAuth, and PKI.

Lifecycle Management :

- Oversee Joiner-Mover-Leaver (JML) processes, provisioning/deprovisioning, and identity governance for internal and external users.

Security Architecture :

- Collaborate with security teams to align IAM with Zero Trust principles and cloud security strategies.

Technical Leadership :

- Provide architectural guidance during migrations, including ongoing AWS migration for NetIQ Identity Manager.

Deliverables :

- IAM architectural blueprints and deployment diagrams

- Documentation of identity processes, policies, and standards

- Migration plans for IAM systems to cloud environments

- Regular compliance and security posture reports

Required Skills & Qualifications :

Technical Expertise :

IAM Tools :

- NetIQ IDM/IGA, SailPoint, Saviynt, Access Manager, ForgeRock, Azure AD

Security & Infrastructure :

- Qualys, Palo Alto Firewall, Load Balancers

Directory Services :

- Active Directory, LDAP

Protocols :

- SAML, OAuth, PKI

Cloud Platforms :

- AWS (migration and optimization)

Experience :

- 10+ years in IAM architecture and design

- Hands-on expertise with identity governance and provisioning systems

- Strong background in hybrid environments (on-prem + cloud)