The Senior IAM Architect will work with project teams to architect secure IAM and PAM solutions
Working with business, security, and other technical team members, the IAM Architect will assist with technical security architectural requirements, design, and delivery of the SailPoint IdentityNow, Active Directory, Secrets Management and Privileged Access Management platforms. This role will lead the development of toolsets that brings centralization, security, and timely access to resources and will work closely with IAM Engineering, Operations and DevOps team members.
This is a deep technical, delivery and leadership-oriented role, and provides a unique opportunity to work closely with numerous business and functional areas across the organization.

Capabilities & Responsibilities:

• Define strategic security architectures across hybrid technology stacks and cloud hosted IAM, PAM and Secrets Management platforms
• Act as an SME in IAM and PAM platforms on evaluating, designing, and testing solutions and technologies, aligned with the enterprise security platforms, including SailPoint IdentityNow, CyberArk PAM, HashiCorp Vault for Secrets Management, Microsoft Active Directory and Azure Active Directory
• Define solutions realizing workforce and customer IAM capabilities, develop and evolve solution architectures and designs, demonstrate solutions meet stakeholders' requirements, and obtain approval on the architectures and designs at the architecture review board
• Deliver architectures and designs in both agile and iterative waterfall project delivery models, and propose and implement enhancements to improve the viability of the solutions to meet program timelines, budget, and quality measurements
• Author patterns to drive reuse of IAM, PAM and Secrets Management solutions across the organization
• Be an authoritative and trusted partner with deep, practical experience in workforce and customer IAM, Secrets Management, PAM and solution architecture best practices to various business and functional areas across the enterprise, as well as to various risk management and governance functions
• Liaise with cloud, integration, data, digital, security and infrastructure architecture, development, and engineering teams to ensure that all solution architecture views are defined and elaborated
• Develop documentation, architectural, design and workflow diagrams, and test scripts
• Identify and communicate high-level gaps and issues in primary functional areas
• Review solutions to ensure new and existing applications are implemented to the standards utilizing the RBAC and Zero Trust Security Frameworks
• Proactively identify security technology reuse goals and opportunities
• Direct the research and evaluation of emerging IAM and PAM technologies, industry, and market trends; and ensure recommendations are based on business relevance, current standards and best practices, appropriate timing, and deployment
• Identify potential risks of projects, document and address those risks and work with other teams to resolve issues

Implementation Experience:

• Must have hands-on experience designing and deploying large-scale enterprise Identity Governance & Administration solutions, including Identity Management (Provisioning, Enrolment, De-provisioning), Access Management, Authentication, Authorization, Role Based Access Control (RBAC), Identity Governance (Attestation, Re-certification, Reconciliation), Identity Federation, Single Sign-On (Desktop SSO, Web SSO, eSSO), Privileged Access/User Management (PAM/PUM), Security and IAM management for cloud based solutions, including IaaS, PaaS, SaaS and IDaaS, Social Login, Identity Analytics, Identity Trust Frameworks
• Must have hands-on experience to install, configure, test, maintain and troubleshoot Identity, Access, Governance and Audit Management platforms, e.g. SailPoint IIQ IdentityNow, Azure Active Directory, Windows Active Directory, CyberArk
• Strong architecture experience with Privileged Access Management Solutions (CyberArk, etc.)
• Strong knowledge of Directory Services – Active Directory and Azure Active Directory
• Subject matter expert in the following IAM Technologies: LDAP, SAML, OAuth, OpenID Connect (OIDC), XAML, NAPPS, WS-Fed, FIDO, UMA, SCIM, IWA, etc.
• Hands-on experience in designing and implementing integrations with ServiceNow and end-to-end workflow automation for full circle fulfillment
• Governance, planning, and delivery of enterprise-level IAM program based on zero-trust (Identity, access, privileged access, SSO federation, cloud, MFA) Experience in implementing security hardening in cloud-based systems, endpoint, and cloud Infrastructure
• Design of SIEM use cases and playbooks and detection and response plans as it relates to IAM Maintain security, backup, and redundancy strategies for IAM platforms
• Document standard operating procedures and protocols
• Lead in the creation and updates of technical project documentation (i.e. technical and configuration runbook, implementation plan, etc.)
• Experience in leading the team in supporting Level 2, 3 and/or 4 escalation for production incidents