Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : One Identity Manager

Good to have skills : NA

Minimum 15 year(s) of experience is required

Educational Qualification : 15 years full time education

Summary

As a One Identity Manager Architect, you will lead the design and implementation of enterprise-wide Identity and Access Management (IAM) solutions using One Identity Manager (1IM). You will define IAM architecture, lead technical teams, and drive the delivery of secure and scalable identity lifecycle, access governance, and compliance capabilities across the client organizations.

Roles & Responsibilities:

Own the end-to-end architecture and roadmap of the One Identity Manager platform within the enterprise IAM ecosystem.

Define and implement scalable identity lifecycle management, access request workflows, attestation, RBAC, and access review solutions.

Lead integration architecture with authoritative sources (e.g., Workday, SAP) and target systems (e.g., Active Directory, Azure AD, O365, RACF, cloud platforms).

Provide architectural guidance for synchronization projects, custom connectors, policy enforcement, and automation frameworks.

Collaborate with enterprise architecture, application teams, and business stakeholders to define IAM strategies aligned with security and compliance goals.

Establish best practices, governance, and technical standards for development, configuration, and deployment of 1IM components.

Evaluate and introduce new features and modules (e.g., IT Shop, Compliance Framework, Certification) to enhance IAM maturity.

Mentor developers, support teams, and junior architects in One Identity technical design and troubleshooting.

Oversee performance tuning, scalability planning, and resiliency of IAM infrastructure.

Act as a technical escalation point for complex issues related to identity provisioning, policy enforcement, or cross-system integration.

Support security and audit teams by designing reporting and monitoring solutions to meet compliance (e.g., SOX, GDPR, ISO 27001).

Professional & Technical Skills:

Proven experience in IAM architecture, design, and implementation across complex enterprise environments.

Deep knowledge of One Identity Manager components, including Designer, Manager, Launchpad, Job Server, and IT Shop.

Expertise in identity governance, role mining, access certification, and policy management.

Strong experience with directory services (LDAP, AD, Azure AD) and cloud-based identity systems.

Must have experience in on-boarding and integration applications with Identity System, User Access Provisioning / Deprovisioning workflows, User access lifecycle management, Access Review and Certifications, Principle of least privilege and Segregation of Duties (SoD), RBAC, ABAC and others

Should be hands -on with writing connectors, Troubleshooting Identity Workflows, Application on-boarding, Automating centralized access management, Governance, Access Review and Certifications.

Hands-on proficiency in scripting and customization using C#, PowerShell, SQL, or .NET Framework.

Familiarity with security protocols (e.g., SCIM, REST APIs).

Strong understanding of compliance frameworks (SOX, HIPAA, GDPR).

Additional Information

• The candidate should have relevant experience in SailPoint IIQ (IdentityIQ), IDN (IdentityNow), or ISC (Identity Security Cloud).
• A minimum of 15 years of full-time education is required.