Talent.com
This job offer is not available in your country.
▷ (Only 24h Left) Senior Architect

▷ (Only 24h Left) Senior Architect

Persistent SystemsPune, Maharashtra, India
11 hours ago
Job description

About Position :

We are hiring for Senior Architect in IAM (Keycloak & Microsoft Entra ID) with hands on experience in IAM, 3+ in Keycloak, 3+ in Entra ID).

  • Role : Senior Architect
  • Location : All Persistent Locations
  • Experience : 12-16 Years
  • Job Type : Full Time Employment

What You'll Do :

  • Must to have : IAM Architecture (SAML, OIDC, OAuth2, SCIM, MFA, Conditional Access) Keycloak realm design, custom providers (SPI), themes, LDAP / AD, clustering, HA Microsoft Entra ID app registrations, External ID (B2C), IEF / custom policies, Graph API Identity governance & lifecycle (joiner–mover–leaver), JustInTime & SCIM provisioning Cloud security patterns, Zero Trust, secrets, certificates, Terraform / GitOps, Kubernetes
  • Nice-to-have : Azure, Kubernetes / containers, CI / CD, SOC2 / ISO 27001 / NIST experience, PAM Detailed Job Description Role : Senior Architect – Identity & Access Management (Keycloak & Microsoft Entra ID) About the Role We are seeking a seasoned IAM Architect to own the strategy, architecture, and delivery of our identity platform spanning Keycloak and Microsoft Entra ID. You'll define reference architectures, lead solution design for SSO / federation, govern access and lifecycle, and partner with product, security, and platform teams to deliver a secure, scalable, developerfriendly identity fabric.
  • Architecture & Strategy Define and evolve the enterprise identity reference architecture (workforce, B2B, B2C).
  • Establish standards for SSO, federation, token lifecycles, secrets, certificates, and Zero Trust enforcement.
  • Create roadmaps for modernization (onprem cloud / hybrid), legacy deprecation, and consolidation.
  • Keycloak Ownership Design realms, clients, roles, groups, and fine-grained authorization models. Implement custom Service Provider Interfaces (SPIs), authentication flows, and identity brokering.
  • Build themes / branding for B2C; integrate LDAP / AD; configure JDBC storage, session policies, and crossrealm flows.
  • Productionize Keycloak : clustering, HA, backup / DR, observability (Prometheus / Grafana), performance tuning. Automate realm / client configuration via Terraform / Helm; manage GitOps pipelines.
  • Microsoft Entra ID (Azure AD) Architect app registrations, enterprise apps, Conditional Access, MFA, Identity Protection. Lead External ID (formerly B2C) designs using custom policies (IEF), user journeys, social logins, and OIDC / OAuth2 flows.
  • Implement SCIM and JIT provisioning; manage entitlement models with groups / roles and access packages (if using Entra ID Governance).
  • Integrate with workloads using MSAL, Graph API, and Managed Identities. Identity Governance & Lifecycle Design joiner–mover–leaver processes, RBAC / ABAC, SoD controls, and periodic access reviews.
  • Define target operating model for identity operations, auditability, and evidence collection.
  • Security & Compliance Apply best practices aligned to NIST, ISO 27001, CIS, SOC2, and data protection obligations.
  • Drive threat modeling for identity flows (phishing-resistant MFA, replay protection, token hardening).
  • Delivery & Leadership Lead solutioning, estimations, and architecture governance; create HLD / LLD, sequence diagrams, and decision records.
  • Mentor engineers; collaborate with app teams to onboard apps to Keycloak / Entra ID using OIDC / SAML patterns. Manage vendor / partner engagements and cost optimization for identity platforms.
  • Expertise You'll Bring :

  • 12+ years of overall experience, with 5+ years dedicated to IAM architecture / engineering.
  • 3+ years hands-on with Keycloak in production (including recent Quarkus versions).
  • 3+ years with Microsoft Entra ID (Azure AD), including Conditional Access / MFA and External ID (B2C).
  • Expert in OIDC, OAuth2, SAML 2.0, SCIM, token handling (JWT, refresh token lifecycles), and PKCE.
  • Experience with hybrid identity (onprem AD, Azure AD Connect / Cloud Sync) and identity federation.
  • Strong with Terraform, Kubernetes / Containers, CI / CD, GitOps, REST / Graph APIs.
  • Proven track record producing HLD / LLD, architecture decision records (ADRs), and reference implementations.
  • Preferred / Nice to Have Azure : Azure AD Domain Services, Key Vault, Azure Monitor, Application Gateway / WAF, API Management.
  • PAM (e.g., CyberArk), secrets management, certificate automation (ACME, EST).
  • Performance tuning of auth services; cache strategies (e.g., Infinispan), sticky sessions, session replication. Knowledge of WebAuthn / FIDO2, device trust, and phishing-resistant MFA.
  • Regulatory experience : PCI DSS, SOX, HIPAA, GDPR (customize per industry).
  • Tools & Technologies IAM : Keycloak (Quarkus), Microsoft Entra ID (Azure AD), Entra External ID, Entra ID Governance Standards : OIDC, OAuth2, SAML, SCIM, JWT / JWS / JWE, WebAuthn / FIDO2 Integration : MSAL, Microsoft Graph API, Keycloak Admin API Infra / DevOps : Terraform, Helm, Kubernetes, Docker, GitHub / GitLab, Azure DevOps, ArgoCD Observability : Prometheus, Grafana, ELK / EFK, Azure Monitor, App Insights
  • Education & Certifications Bachelor's / Master's in Computer Science, Information Security, or equivalent experience.
  • Nice to have : Microsoft Identity & Access Administrator (SC-300), Azure Solutions Architect (AZ305), CISSP / CCSP, Okta / Forgerock (for comparative architecture).
  • Benefits :

  • Competitive salary and benefits package
  • Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
  • Opportunity to work with cutting-edge technologies
  • Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
  • Annual health check-ups
  • Insurance coverage : group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents
  • Values-Driven, People-Centric & Inclusive Work Environment :

    Persistent Ltd. is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

  • We support hybrid work and flexible hours to fit diverse lifestyles.
  • Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
  • If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment
  • Let’s unleash your full potential at Persistent - persistent.com / careers

    “Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.”

    Create a job alert for this search

    Only 24H Left Senior • Pune, Maharashtra, India

    Related jobs
    • Promoted
    Sitecore Architect

    Sitecore Architect

    Altudopune, maharashtra, in
    Be part of a high-growth digital and customer experience consulting firm that has been recognized as one of the fastest growing companies in America by Inc. Deloitte Technology Fast 500 North Americ...Show moreLast updated: 4 days ago
    • Promoted
    Data Architect

    Data Architect

    G10XPune, IN
    Senior Data Architect (15+ Years Experience).We are looking for a seasoned Data Architect to lead and shape enterprise-wide data initiatives. This role requires a strategic leader with deep technica...Show moreLast updated: 10 days ago
    • Promoted
    • New!
    ▷ [Apply Now] Senior Architect

    ▷ [Apply Now] Senior Architect

    Persistent SystemsPune, Maharashtra, India
    About Position : We are hiring for Senior Architect in IAM (Keycloak & Microsoft Entra ID) with hands on experience in IAM, 3+ in Keycloak, 3+ in Entra ID). Role : Senior Architect - Location : All Pe...Show moreLast updated: 3 hours ago
    • Promoted
    Lead Solutions Architect

    Lead Solutions Architect

    CapgeminiPune, IN
    Lead solutioning from deal qualification to contract signature.Develop end-to-end solutions (Transformation, Transition, Run). Manage internal stakeholders and ensure visibility of solution metrics....Show moreLast updated: 4 days ago
    • Promoted
    Architect

    Architect

    HCLSoftwarepune, maharashtra, in
    HCL Discover (formerly IBM Tealeaf) Implementation Architect.As an IBM Tealeaf or HCL Discover Implementation Architect and Specialist, you'll be the bridge between a client's business needs and th...Show moreLast updated: 4 days ago
    • Promoted
    Architect

    Architect

    Tata TechnologiesPune, Maharashtra, India
    Android Architect - Must have skills.HAL (Hardware Abstraction Layer).Security Policies & Compliance.Third-party App Integration (Media, Google Maps, Navigation, OTT apps).Android Build Systems (So...Show moreLast updated: 16 days ago
    • Promoted
    Senior Landscape Architect / Lead Landscape Architect

    Senior Landscape Architect / Lead Landscape Architect

    DarPune, Maharashtra, India
    Dar Landscape is dedicated to providing the opportunity to create sustainable, resilient landscapes that tackle climate change's issues, rebuilding ecosystems, and promote sustainable living.Being ...Show moreLast updated: 30+ days ago
    • Promoted
    Senior architect

    Senior architect

    Persistent SystemsPune, Maharashtra, India
    We are hiring for Senior Architect in IAM (Keycloak & Microsoft Entra ID) with hands on experience in IAM, 3+ in Keycloak, 3+ in Entra ID). Location : All Persistent Locations.Job Type : Full Time Emp...Show moreLast updated: 2 days ago
    • Promoted
    • New!
    ▷ Only 24h Left! Lead Solutions Architect

    ▷ Only 24h Left! Lead Solutions Architect

    Searce IncPune, Maharashtra, India
    Lead Solution Architect - Modern Product Engineering A forward-deployed solver (fds) and the technical architect for cutting-edge software engineering solutions, directly leading design, execution...Show moreLast updated: 3 hours ago
    • Promoted
    Senior / Lead / Principal Architect

    Senior / Lead / Principal Architect

    ConfidentialPune
    Senior / Lead / Technical / Principal Architect .This role requires someone who can balance .The ideal candidate brings extra experience with . ASPICE, ISO 26262, and tools such as Polyspace, QAC, LDRA, o...Show moreLast updated: 20 days ago
    • Promoted
    Senior Enterprise architect with Generative AI / Sr Solution Architect / Application Architect -Part Time Trainer Role

    Senior Enterprise architect with Generative AI / Sr Solution Architect / Application Architect -Part Time Trainer Role

    Patch the SkillPune, IN
    We are looking for a Senior Solution Architect to deliver technical training on Enterprise Architecture, Cloud (AWS & Azure), DevOps, Containerization, and Cloud Migration.Experience in designing t...Show moreLast updated: 6 days ago
    • Promoted
    Principal / Senior Data Architect

    Principal / Senior Data Architect

    AaysPune, IN
    Position : Principal / Senior Data Architect.You will act as a key member of the consulting team helping Clients to re-invent their corporate finance function by leveraging advanced analytics.You wil...Show moreLast updated: 25 days ago
    • Promoted
    Senior Architect

    Senior Architect

    ConfidentialPune
    Hands-on experience as Data Migration Architect with PLM Enterprise Systems, mainly Windchill and Thingworx.Has strong experience as a Solution Architect as well for Windchill and Thingworx applica...Show moreLast updated: 30+ days ago
    • Promoted
    Lead Solutions Architect

    Lead Solutions Architect

    Searce IncPune, Maharashtra, India
    Lead Solution Architect - Modern Product Engineering.We designed the Job Description for this role like we design our solutions : Smart, Visual & Outcome-focused : . Click here for Searce happier JD.We...Show moreLast updated: 9 days ago
    • Promoted
    Senior Architect

    Senior Architect

    Design Lyricpune, maharashtra, in
    Design Lyric is a leading Architecture and Design firm specializing in innovative and sustainable solutions for residential, commercial, and landscape projects. Founded in 2005, we are a Redmond-bas...Show moreLast updated: 18 days ago
    • Promoted
    Technical Architect

    Technical Architect

    SkillRecruitpune, maharashtra, in
    Looking for Technical Architect Data.Architectural experience with Microsoft Fabric, including Fabric Workspaces, Lakehouses, Real-Time Analytics, DirectLake, and semantic layer generation.Minimum ...Show moreLast updated: 4 days ago
    • Promoted
    JP Morgan Chase - Senior Lead - Architect

    JP Morgan Chase - Senior Lead - Architect

    JP Morgan ChasePune, India
    If you are excited about shaping the future of technology and driving significant business impact in financial services, we are looking for people just like you. Join our team and help us develop ga...Show moreLast updated: 2 days ago
    • Promoted
    Architect

    Architect

    Milestone Technologies, Inc.pune, maharashtra, in
    AI solutions spanning multi-agent orchestration, knowledge-graph reasoning, retrieval-augmented generation (RAG), and evaluation at scale. You will define model strategy, reasoning patterns, data in...Show moreLast updated: 4 days ago
    • Promoted
    Senior Solution Architect

    Senior Solution Architect

    ConfidentialPune, India
    Senior Solution Architect – Data.Lead design andoptimisation of the data ecosystem for a large engineering enterprise with adiverse application landscape that includes multiple ERPs (Baan, Oracle, ...Show moreLast updated: 20 days ago
    • Promoted
    Senior Architect

    Senior Architect

    Persistent SystemsPune, Maharashtra, India
    We are hiring for Senior Architect in IAM (Keycloak & Microsoft Entra ID) with hands on experience in IAM, 3+ in Keycloak, 3+ in Entra ID). Location : All Persistent Locations.Job Type : Full Time Emp...Show moreLast updated: 13 days ago