Purpose of the role :
We are seeking an experienced IAM / PAM lead the design, implementation, and governance of enterprise-scale Identity and Access Management (IAM) solutions. The ideal candidate should have a complete understanding of IAM and PAM architectures , integration methods, and security principles, with hands-on experience across multiple industry-leading platforms such as CyberArk, Azure AD (Entra ID), Okta, Saviynt, BeyondTrust, and Delinea .
Job Description :
Key Responsibilities :
- Architect and implement end-to-end IAM solutions , including identity lifecycle management, access governance, authentication, and federation.
- Design and deploy Privileged Access Management (PAM / PIM) architectures using solutions like CyberArk, BeyondTrust, Delinea, or ManageEngine , ensuring strong privileged account security.
- Develop and maintain Access Management and Federation Services using Azure AD (Entra ID), Okta , or equivalent.
- Design and implement Customer Identity (CIAM) solutions using like Okta or PingIdentity , as required.
- Define and maintain IAM reference architectures, standards, and integration blueprints across hybrid and multi-cloud environments.
- Perform IAM maturity and pre-assessment studies to evaluate organizational readiness and define target operating models.
- Collaborate with stakeholders to translate business challenges into scalable IAM / PAM architectural solutions.
- Develop custom connectors and integrations with enterprise systems and cloud platforms.
- Provide architectural governance and technical leadership to IAM delivery teams, mentoring junior consultants and ensuring best practices are followed.
- Ensure compliance with enterprise cybersecurity policies, standards, and relevant regulations.
- Contribute to business development activities by providing technical expertise and solution design support in IAM / PAM opportunities.
- Excellent verbal and written communication
- Strong client management skills
- Ability to cope with competing demands
Required Experience, Skills & Competencies :
Experience should be between 10 to 12 years in IAM and PAM architectureDeep understanding of IAM and PAM architectures, frameworks, and operations .Hands-on expertise in tools such as for any of these CyberArk, BeyondTrust, Delinea, Azure AD (Entra ID), Okta, Saviynt, SailPoint, ManageEngine , etc.Strong grasp of Active Directory , Federation Services (ADFS, SAML, OIDC, OAuth2) , and Zero Trust access design .Experience with identity lifecycle management , role-based access control (RBAC) , policy-based access control (PBAC) , and access governance .Familiarity with cloud infrastructure security across Azure, AWS, and GCP .Strong understanding of cybersecurity principles , least privilege , and zero-trust architecture .Excellent communication, documentation, and stakeholder engagement skills.Preferred Qualifications :
Certifications such as CISSP, CISM, Microsoft Certified : Identity & Access Administrator, CyberArk Defender / Guardian, or SailPoint Certified Engineer .Experience designing IAM / PAM architectures in large, hybrid enterprise environments.Knowledge of compliance frameworks like ISO 27001, NIST, GDPR, or SOC 2 .Skills Required
Oauth2, Saml, Active Directory, Okta, Adfs, Gcp, Azure Ad, Iam, PAM, Cyberark, Aws