IAM Solution Architect

About the role

An experienced Identity & Access Management (IAM) Solution Architect is sought to lead the design and implementation of enterprise-scale identity security solutions. The role requires deep expertise in Microsoft Active Directory and Microsoft Entra ID, and strong capability in designing and delivering Identity Governance & Administration (IGA) and Privileged Access Management (PAM) solutions, in hybrid and cloud-first environments.

Key responsibilities

• Lead the architecture, design and implementation of enterprise IAM solutions across hybrid and cloud environments, and develop IAM reference architectures, standards, roadmaps and best practices.
• Translate business and regulatory requirements into secure IAM solutions and conduct architecture reviews and technical governance.
• Architect and optimize Microsoft Active Directory (forest and domain design, trust relationships, Group Policy, AD FS, directory synchronization) and Microsoft Entra ID (hybrid identity, SSO, Conditional Access, MFA, Identity Protection, B2B/B2C integrations, Zero Trust).
• Design and implement IGA: joiner-mover-leaver processes, access requests and approvals, RBAC, access certifications, SoD, automated provisioning and deprovisioning, and integration with HR systems and applications.
• Design and deploy PAM solutions covering privileged session management, credential vaulting, just-in-time access and privileged access governance, aligned with Zero Trust and least-privilege principles.
• Collaborate with security, infrastructure, cloud, application and compliance teams, mentor IAM engineering and operations teams, and support vendor evaluations and technology roadmaps.

Required profile

• 8+ years of experience in Identity and Access Management.
• Proven experience designing and implementing IGA and PAM solutions in large, complex environments.
• Strong understanding of SSO, MFA, Conditional Access, RBAC, federation (SAML, OAuth 2.0, OpenID Connect) and Zero Trust security principles.

Required skills

• Microsoft Active Directory and Microsoft Entra ID (Azure AD)
• IGA and PAM solution design and implementation
• SSO, MFA, Conditional Access, RBAC, federation protocols and Zero Trust