We are seeking an experienced IAM Architect to design, implement, and evolve enterprise-wide identity and access management capabilities across a global environment. This role will drive modern authentication, governance, and privileged access strategies aligned with Zero Trust principles.
What you’ll do:
*Lead the design and evolution of IAM architecture, including identity lifecycle, access governance, and privileged access management (PAM).
*Implement modern authentication solutions (SSO, MFA, passwordless, biometrics) to enhance security and user experience.
*Design secure authentication and authorization frameworks (OIDC, SAML, OAuth, Kerberos, LDAP).
*Embed Zero Trust and least privilege principles across enterprise systems and privileged roles.
*Develop and automate identity governance processes, leveraging AI/ML for anomaly detection and remediation.
*Oversee Conditional Access, risk-based authentication, and device/state-based access controls.
*Integrate IAM with HR, IT, and engineering platforms for policy-driven lifecycle management.
*Architect and maintain Active Directory (on-prem) and cloud identity platforms (Entra ID/Azure AD).
*Collaborate with security teams to define Azure policies, guardrails, and compliance controls (e.g., ISO 27001, ISO 22301).
*Align IAM strategy with broader security architecture (firewalls, micro-segmentation, NDR, remote access).
*Identify and mitigate IAM-related vulnerabilities and security risks.
*Maintain architecture standards, documentation, and runbooks.
*Engage with vendors and stakeholders; communicate strategy and roadmap to senior leadership.
What you’ll bring:
*Bachelor’s degree in Computer Science, IT, or related field (or equivalent experience).
*7-10 years of IAM/identity engineering experience; 3+ years in architecture roles.
*Experience in large-scale, global enterprise environments.
*Strong expertise in Microsoft identity stack (Entra ID/Azure AD, Active Directory).
*Deep understanding of authentication protocols (OIDC, SAML, OAuth, Kerberos, LDAP).
*Experience with RBAC, entitlement management, and automated provisioning.
*Knowledge of Conditional Access, Azure Policy, and cloud security guardrails.
*Familiarity with network security concepts (NDR, micro-segmentation).
*Experience securing hybrid infrastructure environments.
*Certified in CISSP/ CIAM /Azure Cybersecurity Expert
*Scripting and automation (PowerShell, REST APIs).
Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates