IAM Software Architect

Job Summary

Software Architect - IAM, AI & Zero Trust

Location: Bangalore, India

Department: Digital Infrastructure & Platforms (IAM)

Role Description

Are you a visionary software architect with a deep passion for modern cybersecurity, platform engineering, and identity governance Airbus is seeking a Software Development Architect to own and evolve the architectural vision of our IAM Self-Service Platform.

As Airbus accelerates its Digital Transformation, Identity & Access Management (IAM) is moving from a back-office utility to a core strategic product. In this role, you will define the target architecture for our self-service tools, ensure seamless integration across hybrid and cloud environments, and systematically guide our identity ecosystem toward a Zero Trust Architecture (Never Trust, Always Verify).

Operating within our leadership squad alongside the Product Manager, Technical Lead, and Techno-Functional BA, you will bridge business needs and security mandates into resilient, scalable, and developer-friendly technical blueprints.

Challenges & Strategic Impact

• Agentic AI & Emerging Workloads: Preparing identity frameworks to support non-human identities, AI agents, and automated machine-to-machine interactions over the next two years.
• DevSecOps Integration: Fully embedding Security by Design and DevSecOps principles into the software development architecture and release lifecycle.
• Zero Trust Evolution: Transforming legacy identity mechanisms into continuous, dynamic, risk-based access controls and identity governance.
• Architectural Designs: Architect highly performant, scalable software solutions that embed Security by Design principles, driving rigorous quality and sustainability metrics while future-proofing the product roadmap which will be in-line with the IAM PSL objectives.
• Developer & User Experience: Designing zero-trust architectures that simplify access requests and self-service workflows for 130,000+ Airbus employees and external supply chain partners without creating operational friction.
• Enterprise Security Standards: Ensuring architectural alignment with Airbus Cybersecurity rules ("Blue Book"), global data privacy regulations (GDPR), EASA aviation compliance, and ITAR/EAR export control policies.
• Identity & Access Management (IAM): Establishing comprehensive IAM domain leadership and strategic focus to align identity security practices with modern enterprise architecture.

Key Responsibilities

1. Architectural Vision & Zero Trust Strategy

• Own the technical roadmap and target architecture for the IAM Self-Service Platform, ensuring high availability, security-by-design, and modern design patterns.
• Lead the architectural shift toward Zero Trust Principles, designing mechanisms for continuous authentication, dynamic authorization (ABAC/RBAC/PBAC), least-privilege access, and micro-segmentation integration.
• Apply and adopt standard protocols (OIDC/OAuth2, SAML, SCIM, FIDO2) across enterprise web applications, APIs, and services to ensure architectural compliance.

2. Platform Design & Identity Integration

• Design scalable integration patterns between the core self-service portal (Python/React) and identity systems, governance platforms, and hybrid cloud environments.
• Define API-first governance, microservices architecture, and secure data access layers for identity workflow engines and automation scripts.
• Establish non-functional requirements (NFRs) including system scalability, latency targets, failover resilience, and audit logging for security compliance.
• Establish and mandate core architectural principles, enterprise design patterns, and robust application frameworks to drive scalable identity integrations.
• Lead ARD (Architecture Reference Document) management, translating complex IAM requirements into precise network models, Zero Trust security views, and modular software architecture breakdowns.
• Design comprehensive Observability and Telemetry strategies (logging, tracing, and monitoring) to ensure real-time visibility into identity workflows, system health, and security events.

3. Product Quad, Architect Network & Engineering Collaboration

• Partner with the Product Manager (PM) / Product Owner (PO) to translate business vision and security roadmaps into architecturally sound product epics.
• Work in tandem with the Technical Lead to guide engineering teams, ensuring implementation details adhere to the master architectural design without creating technical debt.
• Collaborate with the Techno-Functional BA to validate technical feasibility, security constraints, and boundary conditions for new self-service workflows.
• Collaborate with cross-functional domain leaders-including Enterprise, Cyber Security, Infrastructure, and PSL Architects, alongside Data Officers and Quality/Eco-Design Experts-to drive comprehensive architectural reviews and integrate strategic recommendations.
• Partner closely with Enterprise, Product, and PSL Architects to align platform design with overall IAM domain strategy and enterprise architecture principles.

4. Technical Governance & Innovation

• Serve as the primary representative for the product on the internal Architecture Review Board (ARB) and Cybersecurity committees.
• Conduct Proof of Concepts (PoCs) for emerging identity technologies, passwordless access, and identity threat detection and response (ITDR).
• Author and govern comprehensive Architectural Requirements Dossiers (ARDs), technical standards, engineering specifications, and integration patterns, providing actionable blueprints that guide and accelerate internal development teams.
• Drive proactive Threat Modeling (e.g., STRIDE) and risk assessments during the design phase to identify and mitigate vulnerabilities before development begins.

Qualifications & Experience

• Education: Graduate/Postgraduate degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience: 12+ years of software engineering experience, with at least 4+ years operating as an Enterprise/Software/Solution Architect in large-scale IAM or enterprise security environments.
• Architecture & Frameworks: Expertise in Microservices, Event-Driven Architecture, API Gateway patterns, RESTful APIs, and Cloud-native designs (Azure/AWS/GCP).