Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Identity and Access Management (IAM) Operations, Security Delivery Governance
Good to have skills : NA
Minimum 15 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
We are seeking an experienced IAM Lead to drive enterprise Identity Access Management (IAM) initiatives with expertise across Microsoft Entra ID (Azure AD), Active Directory, SSO/Federation, PAM, PKI, and Identity Lifecycle Management. The role will lead IAM architecture, implementation, operations, governance, provisioning, authentication, privileged access, and identity security transformation across enterprise platforms. This position combines technical leadership, delivery management, stakeholder engagement, and team leadership to ensure secure, scalable, and compliant identity services.

Roles Responsibilities:
-Lead the architecture, design, implementation, and operations of enterprise IAM solutions across Microsoft Entra ID (Azure AD), Active Directory, Hybrid Identity, SSO, PAM, and PKI.
-Provide expertise in identity lifecycle management, authentication, authorization, federation, MFA, Conditional Access, and privileged access governance.
-Drive implementation and governance of SSO and federation technologies using SAML, OAuth2, OIDC, LDAP, and Kerberos.
-Oversee Active Directory and Entra ID administration, including identity synchronization, access controls, directory security, and hybrid identity configurations.
-Lead PAM implementations and governance for privileged, service, and application accounts, including credential vaulting and session monitoring.
-Provide oversight for PKI and certificate lifecycle management, ensuring compliance with cryptographic standards.
-Drive end-user provisioning, de-provisioning, JML automation, and IAM integrations across enterprise systems.
-Lead troubleshooting, issue resolution, escalations, and continuous improvements across IAM services.
-Collaborate with cross-functional teams to deliver secure and scalable IAM solutions.
-Experience with CyberArk, Ping Identity, ForgeRock, SailPoint, Okta, or similar IAM technologies.
-Automation/scripting experience (PowerShell, APIs, Python).
-Understanding of Zero Trust and compliance frameworks (ISO 27001, SOX, GDPR, PCI-DSS).



Professional Technical Skills:
-Exp inIAM experience, with strong expertise in Active Directory, Microsoft Entra ID (Azure AD), SSO/Federation, PAM, and PKI, including 5+ years in leadership/managerial roles.
-Strong experience in Hybrid Identity environments, IAM operations, provisioning, access governance, authentication, and authorization.
-Experience integrating IAM solutions with Active Directory, HRMS, SAP, Workday, Azure/O365, cloud applications, and enterprise platforms.
-Strong understanding of IAM protocols including SAML, OAuth2, OIDC, LDAP, and Kerberos.
-Ability to understand and translate business/customer requirements into secure IAM solutions.
-Experience leading delivery teams, stakeholder engagement, escalations, audit support, and technical governance.
-Strong communication, presentation, and people leadership skills with focus on mentoring and team development.
-Quick learner with willingness to cross-skill, upskill, and adopt emerging IAM technologies.
-Lead and mentor IAM teams and technical leads, driving operational excellence and service maturity.
-Define and execute IAM strategy, governance, and transformation initiatives aligned with business and security objectives.
-Manage senior stakeholder engagement, escalations, audits, vendors, and cross-functional collaboration.
-Drive automation, Zero Trust adoption, and continuous improvement across IAM services.
-Experience in large enterprise or regulated environments.
-Exposure to Azure cloud (AWS/GCP is a plus).
-Familiarity with ITIL, Agile, and DevSecOps delivery models.
-Relevant IAM/security certifications preferred (Microsoft, CyberArk, SailPoint, Ping, ForgeRock, CISSP/CISM).

- The candidate should have minimum 15 years of experience in Identity and Access Management (IAM) Operations.
- This position is based at our Bengaluru office.
- A 15 years full time education is required.

Qualification
15 years full time education