Domain Architect

Tata Consultancy Services; São Paulo; Presencial; BRL 350 000 - 600 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Life insurance

Gympass

Mental health support

SESC partnership

Certification reimbursement

Learning Portal

International experience

University discounts

Buddy referral bonus

Gems recognition

Mentoring platform

Resumo da oferta

Tata Consultancy Services is seeking a Domain Architect - IAM & AI Agent Identity to lead the evolution of enterprise identity architecture, enabling secure AI adoption and large-scale digital transformation while ensuring compliance and governance.

The role drives standards for identity platforms, RBAC, and authentication architectures, working across human, machine, and AI identities with integrations to Microsoft Graph and enterprise APIs.

Qualificações

• Bachelor's degree in Computer Science, Engineering, Information Systems, or related field.
• Master's degree or specialization in Security, Architecture, or Cloud technologies preferred.
• 10+ years in IT; 5+ years in IAM, Security, or Enterprise Architecture.
• Experience in large-scale enterprise environments; proven governance/security architecture expertise.

Responsabilidades

• Define enterprise-wide identity architecture and standards.
• Lead identity governance across human, machine, and AI identities.
• Design authentication architectures with OAuth 2.0 and RBAC.
• Manage AI agent identity life cycle and security frameworks.
• Coordinate integrations with Microsoft Graph, APIs, and AI platforms.

Conhecimentos

Identity architecture

IAM governance

OAuth 2.0

API security

RBAC

AI agent security

Microsoft Graph

Formação académica

Bachelor's degree in CS/Engineering/IS

Master's in Security/Architecture/Cloud

Ferramentas

SailPoint

LeanIX

Microsoft Graph

Descrição da oferta de emprego

Come to one of the biggest IT Services companies in the world!! Here you can transform your career!

Why to join TCS? Here at TCS we believe that people make the difference, that's why we live a culture of unlimited learning full of opportunities for improvement and mutual development. The ideal scenario to expand ideas through the right tools, contributing to our success in a collaborative environment.

Domain Architect - IAM & AI Agent Identity who wants to learn and transform his career.

Job Summary

The Domain Architect - IAM & AI Agent Identity will lead the design, governance, and evolution of enterprise identity architecture, driving the transition from traditional IAM practices to a modern framework supporting human identities, machine identities, workloads, and AI agents.

This strategic role will establish identity governance standards that enable secure AI adoption, intelligent automation, and large‑scale digital transformation while maintaining compliance, security, and operational control.

Key Responsibilities

Identity Architecture & Strategy

• Define enterprise-wide identity architecture.
• Develop standards for identity platforms and governance.
• Lead architectural decisions impacting the organization.

Identity Governance

• Implement unified identity governance across human, machine, and AI identities.
• Define ownership, accountability, and entitlement management frameworks.
• Drive least‑privilege access models and governance controls.

Security & Access Control

• Design authentication architectures based on OAuth 2.0.
• Implement RBAC, Conditional Access, Identity Protection, and audit logging.
• Ensure proper segregation between control and data planes.

AI Agent Identity Management

• Define lifecycle management for AI agents.
• Establish authentication standards for APIs, tools, and data access.
• Design secure agent‑to‑agent interaction frameworks.

Integration & Platforms

• Define integrations with Microsoft Graph, enterprise APIs, and AI platforms.
• Support MCP and A2A architectural frameworks.
• Align identity strategy with enterprise architecture tools such as LeanIX

Required Qualifications

Education

• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related field.
• Master's degree or specialization in Security, Architecture, or Cloud technologies preferred.

Experience

• 10+ years of IT experience.
• 5+ years in IAM, Security, or Enterprise Architecture.
• Experience in large-scale enterprise environments.
• Proven expertise in identity governance and security architecture

Technical Skills

• Service Principals & Managed Identity
• OAuth 2.0
• API Security
• Identity Governance
• Microsoft Graph
• SailPoint/IGA Solutions

Certifications Required

• SC-300 Identity and Access Administrator or equivalent

Highly Preferred

• SC-100 Cybersecurity Architect
• CISSP
• CISM
• CCSP
• SailPoint Identity Security Certifications
• Enterprise Identity Blueprint
• AI Agent Security Framework
• Identity Governance Framework
• Identity & Agent Catalog
• Access Policies and Audit Standards
• Identity Lifecycle Model

What do we offer?

• Health insurance
• Life insurance
• Gympass
• TCS Cares – free 0800 that provides psychological assistance (24 hrs/day), legal, social and financial assistance to associates
• Partnership with SESC
• Reimbursement of Certifications
• Free TCS Learning Portal – Online courses and live training
• International experience opportunity
• Discount Partnership with Universities and Language Schools
• Bring Your Buddy – By referring people you become eligible to receive a bonus for each hire
• TCS Gems – Recognition for performance
• Xcelerate – Free Mentoring Career Platform

At TATA Consultancy Services we promote an inclusive culture, we always work for equity. This applies to Gender, People with Disabilities, LGBTQIA+, Religion, Race, Ethnicity. All our opportunities are based on these principles. We think of different actions of inclusion and social responsibility, in order to build a TCS that respects individuality. Come to be a TCSer!