Identity Access Management (IAM) Lead/Architect

• Lead the end-to-end design, architecture, and implementation of enterprise IAM solutions.
• Develop and maintain IAM architecture roadmaps, ensuring alignment with business goals and technology standards.
• Design, review, and manage API integrations with target applications and cloud services.
• Collaborate with application teams, DevOps, and security operations to integrate IAM controls into enterprise workflows.
• Implement and automate user onboarding/offboarding, access governance, and role-based access control (RBAC) processes.
• Support DevOps with CI/CD automation, including testing, validation, and deployment of IAM components.
• Drive incident response, risk management, and escalation processes, ensuring proactive communication with stakeholders.
• Conduct performance optimization, monitoring, and audit compliance activities for IAM systems.
• Prepare management reports and architectural documentation for internal and client stakeholders.
• Mentor junior engineers and foster collaboration between teams to enhance IAM maturity across the organization.

Experience: 10-15+ Years (with strong IAM architecture & development background)

Core Skills: IAM Architecture & Design (SSO, MFA, Provisioning, Directory Services, PAM), Java, NodeJS, Spring, VueJS, REST APIs, JSON, AWS (Kubernetes, Terraform), CI/CD (Jenkins, GitLab CI), SAML, OAuth2, OIDC, LDAP, IAM Integration & Automation, Application Onboarding, Workflow Creation.

Other: Cloud Deployment (AWS Kubernetes), Terraform/Infrastructure as Code, DevOps Support, Risk & Issue Management, Management Reporting (Internal & Client), Stakeholder Communication, Automation of Manual IAM Processes, Architecture Roadmap Development.

Soft Skills: Leadership & Stakeholder Engagement, Proactive Risk Management, Clear Communication & Presentation, Strong Collaboration with Application and DevOps Teams, Accountability, Problem Solving Mindset.

Nice to Have: ForgeRock, Okta, AWS SaaS IAM Implementation, Monitoring Tools (CloudWatch, RockMon, AppDynamics, DataDog, ELK Kibana), Agile/SAFe Environment Experience., * End-to-end ownership of design and architecture for IAM systems including SSO, MFA, provisioning, directory services, and privileged access management (PAM).

• Strong proficiency in IAM protocols and integrations - SAML, OAuth2, OIDC, LDAP - and hands-on experience with custom development using Java, NodeJS, Spring, and VueJS.
• Proven ability to design and develop RESTful APIs, ensuring secure and scalable integration with enterprise applications.
• Expertise in AWS cloud deployments (Kubernetes) and Terraform scripting for infrastructure automation.
• Ability to build and enhance CI/CD pipelines, supporting continuous integration and deployment across IAM components.
• Strong focus on risk identification, mitigation, and stakeholder communication, maintaining alignment with business objectives and IT strategy.
• Deep understanding of IAM automation workflows - from user provisioning to access revocation - ensuring compliance and efficiency.
• Commitment to security, maintainability, and governance best practices across IAM lifecycle management.