Key Responsibilities :
- Architect and implement end-to-end IAM solutions, including identity lifecycle management, access governance, authentication, and federation.
- Design and deploy Privileged Access Management (PAM / PIM) architectures using solutions like CyberArk, BeyondTrust, Delinea, or ManageEngine, ensuring strong privileged account security.
- Develop and maintain Access Management and Federation Services using Azure AD (Entra ID), Okta, or equivalent.
- Design and implement Customer Identity (CIAM) solutions using like Okta or PingIdentity, as required.
- Define and maintain IAM reference architectures, standards, and integration blueprints across hybrid and multi-cloud environments.
- Perform IAM maturity and pre-assessment studies to evaluate organizational readiness and define target operating models.
- Collaborate with stakeholders to translate business challenges into scalable IAM / PAM architectural solutions.
- Develop custom connectors and integrations with enterprise systems and cloud platforms.
- Provide architectural governance and technical leadership to IAM delivery teams, mentoring junior consultants and ensuring best practices are followed.
- Ensure compliance with enterprise cybersecurity policies, standards, and relevant regulations.
- Contribute to business development activities by providing technical expertise and solution design support in IAM / PAM opportunities.
- Excellent verbal and written communication
- Strong client management skills
- Ability to cope with competing demands
Required Experience, Skills & Competencies :
Experience should be between 10 to 12 years in IAM and PAM architectureDeep understanding of IAM and PAM architectures, frameworks, and operations.Hands-on expertise in tools such as for any of these CyberArk, BeyondTrust, Delinea, Azure AD (Entra ID), Okta, Saviynt, SailPoint, ManageEngine, etc.Strong grasp of Active Directory, Federation Services (ADFS, SAML, OIDC, OAuth2), and Zero Trust access design.Experience with identity lifecycle management, role-based access control (RBAC), policy-based access control (PBAC), and access governance.Familiarity with cloud infrastructure security across Azure, AWS, and GCP.Strong understanding of cybersecurity principles, least privilege, and zero-trust architecture.Excellent communication, documentation, and stakeholder engagement skills.Preferred Qualifications :
Certifications such as CISSP, CISM, Microsoft Certified : Identity & Access Administrator, CyberArk Defender / Guardian, or SailPoint Certified Engineer.Experience designing IAM / PAM architectures in large, hybrid enterprise environments.Knowledge of compliance frameworks like ISO 27001, NIST, GDPR, or SOC 2.(ref : hirist.tech)