IAM architect

• identity, access management, cybersecurity, infrastructure, enterprise architecture, or a closely related discipline.
• 7 or more years of hands-on IAM architecture or senior IAM engineering experience in a large enterprise environment.
• Strong experience with Microsoft Active Directory and Microsoft Entra ID, including hybrid identity, directory synchronization, authentication, authorization, Conditional Access, MFA, and privileged access.
• Demonstrated experience designing or integrating at least two enterprise IAM platforms, with Saviynt preferred and SailPoint accepted.
• Experience with CyberArk or a comparable PAM platform, secrets management, and privileged identity controls.
• Strong understanding of IAM governance, lifecycle management, access reviews, role-based access control, segregation of duties, least privilege, and audit evidence.
• Practical knowledge of AWS and Azure identity and security models.
• Experience with APIs, application integration patterns, federation, SAML, OAuth 2.0, OpenID Connect, SCIM, and automation.

Ability to analyze complex environments, make architecture decisions, document them clearly, and influence stakeholders without direct authority