IAM Architect

IAM Architect

An IAM Architect is responsible for designing, implementing, and governing identity and access management solutions that ensure secure access to enterprise systems, applications, and data. This role bridges business requirements, cybersecurity, and IT architecture to enforce robust identity governance and compliance.

1. Architecture & Design

· Design and develop enterprise IAM architecture aligned with security and business goals

· Define identity lifecycle management (joiner, mover, leaver processes)

· Architect solutions for:

o Authentication (SSO, MFA, password less)

o Authorization (RBAC, ABAC)

o Federation (SAML, OAuth, OIDC)

· Develop zero trust security models for identity

2. Implementation & Integration

· Lead implementation of IAM platforms such as:

o Azure AD / Entra

o Okta

o Sail Point

o Cyber Ark

o Ping Identity

· Integrate IAM systems with:

o Cloud platforms (AWS, Azure, GCP)

o On-prem systems (Active Directory, LDAP)

o Enterprise applications (SAP, Salesforce, Workday)

· Enable API security and identity federation

3. Governance, Risk & Compliance

· Establish Identity Governance & Administration (IGA) frameworks

· Design role models and access certification campaigns

· Ensure compliance with standards:

o SOX, GDPR, HIPAA, ISO 27001

· Implement audit logging, monitoring, and reporting

4. Security & Risk Management

· Enforce least privilege & segregation of duties (SoD)

· Design solutions to mitigate identity-based threats

· Integrate IAM with:

o SIEM (e.g., Splunk, Sentinel)

o PAM (Privileged Access Management)

· Conduct risk assessments and threat modeling

5. Strategy & Roadmap

· Define IAM strategy and technology roadmap

· Evaluate and recommend IAM tools and platforms

· Drive cloud identity transformation initiatives

· Promote adoption of password less and Zero Trust frameworks