Security Architect

Project Role :Security Architect
Project Role Description :Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :Identity and Access Management (IAM) Operations
Good to have skills :NA
Minimum 12 year(s) of experience is required
Educational Qualification :15 years full time education
Summary:The IAM Lead will be responsible for leading and managing end-to-end Identity and Access Management initiatives across the enterprise, with a focus on Privileged Access Management (PAM), SailPoint Identity Governance, and Single Sign-On (SSO) solutions. The role requires a blend of technical depth, process governance, and leadership capability to drive IAM transformation, ensure compliance, and enhance security posture across multiple environments. Roles & Responsibilities:-Lead the design, implementation, and operations of IAM solutions across on-premise and cloud environments.-Oversee the governance, lifecycle management, and provisioning of user identities, roles, and entitlements.-Define and maintain the IAM roadmap, ensuring alignment with enterprise security strategy and compliance requirements.-Drive IAM maturity initiatives, including automation, analytics, and process optimization.-Lead the deployment, configuration, and administration of PAM solutions (CyberArk, BeyondTrust, or equivalent).-Define access control policies for privileged accounts, including vaulting, session monitoring, and rotation of credentials.-Ensure least privilege enforcement, audit readiness, and alignment with compliance standards (e.g., ISO 27001, SOX, GDPR).-Manage PAM integrations with servers, databases, network devices, and cloud platforms.-Manage and enhance SailPoint IdentityIQ (or IdentityNow) implementation for identity lifecycle management.-Develop and maintain connectors/integrations with enterprise applications for automated provisioning and de-provisioning.-Define and implement role-based access control (RBAC) and access certification campaigns.-Troubleshoot and resolve IAM system issues, working closely with application and infrastructure teams.-Lead SSO solution design and deployment using SAML, OAuth, and OpenID Connect protocols.-Manage federated identity integrations across cloud (Azure AD, Okta, PingFederate) and on-premise environments.-Ensure secure authentication across enterprise applications, including MFA (Multi-Factor Authentication) enablement.-Collaborate with cross-functional teams — Security Operations, Infrastructure, and Application teams — for IAM enablement.-Define IAM metrics, dashboards, and reporting for leadership and audit purposes.-Partner with audit, risk, and compliance teams to ensure regulatory adherence.-Manage vendors, licensing, and support contracts for IAM tools.Professional & Technical
Skills:

-Experience in Information Security, with at least 7+ years in IAM domain leadership roles.-Strong hands-on experience in:-Privileged Access Management (PAM) – CyberArk, BeyondTrust, or equivalent.-Identity Governance (IGA) – SailPoint IdentityIQ or IdentityNow.-Single Sign-On (SSO) and federation technologies – SAML, OAuth 2.0, OpenID Connect, PingFederate, Okta, or Azure AD.-Proven expertise in identity lifecycle management, RBAC design, and access certification campaigns.-Good understanding of directory services (Active Directory, LDAP), cloud identity (Azure, AWS IAM), and API integrations.-Strong grasp of compliance frameworks — ISO 27001, NIST, SOX, GDPR, etc.-Demonstrated leadership in managing teams, projects, and stakeholder relationships.
Additional Information:

The candidate should have minimum 12 years of experience in Identity and Access Management (IAM) Operations.

This position is based at our Bengaluru office.

A 15 years full time education is required.
Qualification15 years full time education