A Software Architect develops and defines the architecture for computer software and applications projects. Oversees the entire software development process; may manage projects for multiple clients. Analyzes customer or user needs, defines system architecture, and leads team of software developers to design programs and build applications.
Design, build, and maintain enterprise IAM architecture and strategy Develop and implement IAM policies, procedures, and standards aligned with security and compliance requirements Lead the implementation and ongoing administration of IAM platforms (e.g., identity governance, directory services, privileged access management) Define and implement identity lifecycle processes, including Joiner/Mover/Leaver (JML), provisioning, deprovisioning, and access certifications Establish scalable Role-Based and Attribute-Based Access Control (RBAC/ABAC) models Assess current IAM capabilities, identify gaps, and implement remediation strategies to mitigate risk Drive enterprise-wide adoption of least privilege and segregation of duties (SoD) principles Eliminate high-risk access practices, including excessive privileges, direct entitlement assignments, and orphaned accounts Collaborate with cross-functional teams to integrate IAM solutions across cloud, SaaS, and on-premises systems Conduct IAM-related risk assessments, audits, and compliance activities Develop automation and workflows to improve IAM service delivery and operational efficiency Provide technical guidance and oversight to IAM engineers and administrators Review IAM-related designs and implementations to ensure alignment with security standards and best practices Develop and maintain documentation, metrics, and reporting related to IAM program performance Stay current on IAM technologies, trends, and emerging threats, recommending improvements as needed Maintain strict confidentiality of all sensitive or confidential information
SKILLS & CERTIFICATIONS
Skill evaluation: Behavioral (80%) Strong knowledge of Identity and Access Management concepts and technologies Expertise in Identity Governance, Active Directory / Entra ID, and Privileged Access Management Deep understanding of authentication and federation protocols (SAML, OAuth, OIDC) Experience implementing
RBAC/ABAC
models and access control frameworks Knowledge of security frameworks and compliance requirements (NIST, SOX, ISO, PCI, etc.) Strong analytical, problem-solving, and risk assessment skills Experience with automation, scripting, and API integrations Ability to communicate effectively with both technical and non-technical stakeholders Proven ability to work collaboratively across cross-functional teams Self-starter with strong initiative and the ability to identify and solve complex security challenges
Preferred Certifications:
CISSP, CISM, CISA, or IAM-specific certifications (e.g., SailPoint, Microsoft Identity)
EDUCATION & EXPERIENCE
Bachelor's or Master's degree in Computer Science, Information Technology, or a related field Minimum of 7+ years of experience in Identity and Access Management, security architecture, or related disciplines Proven experience designing and implementing enterprise-level IAM solutions Experience leading or contributing to large-scale IAM transformation or remediation initiatives
