Senior Identity & Access Management (IAM) Architect

The Challenge:

Our growing organization is seeking to enhance its security posture and operational efficiency by implementing a robust Identity & Access Management (IAM) strategy. We are currently facing challenges with decentralized user management, inconsistent access controls, and a lack of clear visibility into who has access to our critical systems and data. This poses significant security risks and complicates our efforts to comply with regulatory standards. We need a solution that automates user lifecycle management, strengthens authentication, and enforces a "least privilege" security model across all our on-premises and cloud resources.

The Project Goal:

We are looking for a senior-level IAM Architect to design, plan, and oversee the implementation of a comprehensive IAM framework. This project is about more than just a technical setup; it's about building a strategic, enterprise-wide solution that protects our assets, streamlines our IT operations, and ensures we meet all compliance requirements.

Key Responsibilities & Deliverables:

• Current State Assessment: Conduct a detailed audit of our existing identity landscape, including user directories, authentication methods, and current access policies.
• IAM Strategy & Roadmap: Design a long-term IAM strategy that aligns with our business goals, including the selection of an appropriate IAM platform (e.g., Okta, Azure AD, Ping Identity).
• Architecture Design: Architect a new IAM solution that integrates seamlessly with our existing applications (on-premises and cloud), directory services, and network infrastructure.
• Implementation & Migration Plan: Develop a phased plan for user and application migration, ensuring zero downtime and minimal disruption to our employees.
• Policy Development: Create and define granular access policies, roles, and a governance framework based on the principle of least privilege.
• Final Documentation & Training: Deliver comprehensive documentation, including architectural diagrams and runbooks, and provide training to our internal IT team for ongoing management.

Who We're Looking For:

The ideal candidate is an expert with a proven track record of architecting and implementing large-scale IAM solutions. They should have hands-on experience with modern authentication protocols (SSO, SAML, OAuth), Multi-Factor Authentication (MFA), and a deep understanding of governance and compliance standards (e.g., GDPR, SOC 2). Excellent communication skills and the ability to work with both technical and non-technical stakeholders are essential.