IAM Architect

A global organisation is looking for an experienced IAM Solution Architect to drive the architecture and design of enterprise identity and access management solutions.

You will help shape the organisation's IAM strategy and target architecture, translating business and security requirements into scalable solutions across Identity Governance (IGA), Privileged Access Management (PAM), Access Management, Active Directory/Entra ID and non-human identities.

Key Responsibilities

• Own and evolve IAM architecture, design principles, standards and reusable patterns.
• Design end-to-end solutions across IGA, PAM, SSO, MFA, federation, directory services and privileged access.
• Develop secure identity solutions for employees, contractors, applications, service accounts and other machine/non-human identities.
• Architect identity lifecycle capabilities including joiner-mover-leaver, provisioning, access requests, certifications and role/entitlement management.
• Design authentication and access solutions across cloud and on-premise environments using technologies such as Entra ID, Active Directory, SAML, OAuth/OIDC and SCIM.
• Develop PAM and least-privilege architectures covering credential management, privileged sessions, JIT access and privileged elevation.
• Support IAM requirements within operational technology and other complex or legacy technology environments.
• Review solution designs and provide architecture governance throughout implementation.
• Partner with security, infrastructure, cloud, application and engineering teams to ensure solutions are implemented according to agreed architecture.
• Evaluate IAM technologies and vendors and provide technical input into product selection and implementation.
• Provide technical leadership through design, implementation, testing and transition into operations.

Requirements:

• Approximately 7-15 years of IAM / security architecture experience, with experience designing and delivering complex IAM solutions.
• Strong knowledge across several IAM domains, including IGA, PAM, authentication, federation and directory services.
• Experience with IAM platforms such as SailPoint, Saviynt, BeyondTrust, Delinea or similar technologies.
• Strong understanding of Microsoft Entra ID and Active Directory.
• Knowledge of identity standards and protocols including SAML, OAuth/OIDC, SCIM, LDAP and Kerberos.
• Experience integrating IAM solutions across cloud, SaaS and on-premise environments.
• Ability to translate complex business and security requirements into practical architecture and technical designs.
• Strong stakeholder management skills with the ability to work across global technology and business teams.
• Relevant certifications such as CISSP, CISM, TOGAF or cloud/IAM certifications would be advantageous.

To apply:

If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi at [Confidential Information] for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389

Lic: 16S8060