IDAM Architect

XPT Software Australia; Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

A leading company in cybersecurity is seeking an IAM Architect to define and design enterprise-wide IDAM architecture. The role involves evaluating and managing IAM platforms, developing policies, and integrating IAM solutions while collaborating with various teams. The ideal candidate will have extensive experience in cybersecurity, strong knowledge of IAM protocols, and relevant certifications.

Qualifications

• 7+ years of experience in cybersecurity or IT; 3+ years in IAM architect role.
• Strong knowledge of IAM protocols (SAML, OAuth2, OIDC).
• Relevant certifications (e.g., CISSP, CISM) are preferred.

Responsibilities

• Define and design enterprise-wide IDAM architecture and roadmap.
• Evaluate and manage IAM platforms.
• Develop policies and standards for IAM across the organization.

Skills

IAM protocols

Access management

Identity governance

Stakeholder engagement

Education

7+ years in cybersecurity or IT

Tools

IAM platforms

Directory services

Job description

Key Responsibilities:

• Define and design enterprise-wide IDAM architecture and roadmap.
  

• Evaluate, implement, and manage IAM platforms (e.g., Okta, SailPoint, ForgeRock, Azure AD, Ping Identity).
  

• Design solutions for user provisioning, authentication, SSO, MFA, RBAC/ABAC, and identity governance.
  

• Integrate IAM solutions with cloud and on-premise applications and infrastructure.
  

• Lead assessments of security risks associated with identity and access controls.
  

• Collaborate with security, infrastructure, application, and compliance teams to ensure alignment.
  

• Develop policies, standards, and procedures for IAM across the organization.
  

• Stay current on identity security threats, technologies, and best practices.
  

Required Qualifications:

• 7+ years of experience in cybersecurity or IT with 3+ years in an IAM architect or lead role.
  

• Strong knowledge of IAM protocols (SAML, OAuth2, OIDC, LDAP, Kerberos).
  

• Hands-on experience with leading IAM platforms and directory services.
  

• Expertise in access management, identity governance, privileged access management (PAM).
  

• Familiarity with regulatory requirements (e.g., GDPR, SOX, HIPAA).
  

• Strong communication, documentation, and stakeholder engagement skills.
  

Preferred Qualifications:

• Relevant certifications (e.g., CISSP, CISM, TOGAF, Certified Identity and Access Manager).
  

• Experience in DevSecOps, Zero Trust architecture, and cloud IAM (AWS, Azure, GCP).
  

• Background in security architecture, threat modeling, or penetration testing.