iAM Architect

Job Description:

We are seeking an experienced IAM Architect - Gen AI to design and implement secure Identity and Access Management (IAM) solutions while enabling the adoption of Generative AI and Agentic AI technologies across the enterprise. The ideal candidate will possess deep expertise in IAM architecture, authentication and authorization protocols, enterprise security integration, and modern software development, along with a strong understanding of Large Language Models (LLMs) and AI agent security.

This role involves architecting scalable IAM solutions, integrating AI-powered applications securely, and ensuring compliance with enterprise security and governance standards.

Key Responsibilities:

- Design, implement, and enhance enterprise Identity and Access Management (IAM) architecture.

- Develop secure identity lifecycle management, access provisioning, and privileged access management (PAM) solutions.

- Define authentication and authorization strategies using industry-standard protocols such as OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, and Kerberos.

- Architect secure integrations between enterprise applications, APIs, and IAM platforms.

- Collaborate with development teams to integrate IAM capabilities into modern web applications and microservices.

- Develop reusable security patterns, technical standards, and architecture documentation.

- Automate IAM processes using Linux Shell and PowerShell scripting.

- Design secure access controls for AI-powered applications, LLMs, and Agentic AI workflows.

- Evaluate and implement secure AI agent integrations using frameworks such as Model Context Protocol (MCP) or similar technologies.

- Ensure secure management of credentials, API keys, secrets, and tokens across enterprise AI systems.

- Work closely with security, infrastructure, and application teams to ensure compliance with organizational security policies and regulatory standards.

- Provide technical leadership, architecture guidance, and mentorship to engineering teams.

Required Skills:

- 8+ years of experience in Identity and Access Management (IAM) architecture and enterprise security.

- Strong expertise in:

1. Identity Lifecycle Management

2. Access Provisioning

3. Privileged Access Management (PAM)

4. Authentication & Authorization

- Deep understanding of:

1. OpenID Connect (OIDC)

2. OAuth 2.0

3. SAML

4. LDAP

5. Kerberos

6. REST APIs (SOAP knowledge is a plus)

- Experience with modern application architectures, including microservices and traditional three-tier applications.

- Strong software development knowledge using:

1. Java and/or .NET

2. React or Angular

3. JavaScript / TypeScript

- Hands-on scripting experience with Linux Shell and PowerShell.

- Excellent analytical, documentation, and communication skills.

AI & GenAI Expertise:

- Working knowledge of Large Language Models (LLMs) and Agentic AI concepts.

- Understanding of AI agent architectures, tool invocation mechanisms, and secure enterprise integrations.

- Experience with Model Context Protocol (MCP) or similar agent integration frameworks.

- Knowledge of AI security, governance, and responsible AI practices.

- Experience securing AI applications through proper credential, token, and secret management.

(ref:hirist.tech)