Architect - GBS IND

Bank of America; Chennai District; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

Bank of America seeks an experienced IAM Solution Architect to design, strengthen and secure the Bank’s Identity & Access Management systems within GIS. You will lead design deliverables, assess risks, and align IAM initiatives with security policies across lines of business and CIO teams.

You will collaborate with security engineering and product teams to identify gaps, drive improvement opportunities, and apply standards such as NIST, COBIT and ISO.

Qualifications

• Bachelor's degree in Computer Science or Information Security.
• Experience: 8+ years in Information Security; 7+ years in identity/authentication.

Responsibilities

• Design IAM architectures and documentation (PLD/HLD/LLD) for IAM systems and integrations.
• Perform threat modeling and assess security risks across identity platforms and authentication flows.
• Provide technical security design guidance through SDLC and govern best practices in identity and access platform engineering.
• Communicate risks, challenges, and IAM best practices to stakeholders across engineering, operations and leadership.

Job description

Job Description

We are seeking an experienced Identity and Access Management (IAM) Solution Architect to join a globally distributed team within Global Information Security (GIS). The IAM Solution Architect will facilitate designing, strengthening, and securing the Bank’s Identity & Access Management systems and overall security posture. The role focuses on collaboration across all Lines of Business and CIO teams to continuously improve the organization’s security adherence. The Architect will design, identify, and document inefficiencies and prioritize improvement opportunities across IAM and authentication‑related projects. Additionally, the role actively applies knowledge of laws, rules, regulations, and information security concepts (e.g., NIST, COBIT, ISO) to establish and maintain information security policies and standards. Working with information security engineering and identity & access product teams, the Architect identifies gaps and directs the overall identity and access strategy.

Responsibilities

• Design: Manage all aspects of delivery for solution design, including capturing security requirements, identifying risks & opportunities, and aligning to information security policy. Create portfolio‑level, high‑level and low‑level design (PLD/HLD/LLD) documentation for IAM architectures, integrations, and solution components. Perform IAM‑focused threat modeling to assess security risks, identify attack vectors, and define mitigation strategies across identity platforms and authentication workflows.
• Research: Maintain thought‑leadership role in identity and access technology; conduct research on emerging IAM technologies, authentication protocols, threat landscapes, and best practices to inform platform strategy and improve architectural robustness.
• Consult: Serve as a technical security design resource through the Systems Development Lifecycle and provide expert guidance on design decisions, standards, and operational practices. Support creation of new and leveraging existing secure patterns to optimize an identity and access design that aligns with business requirements. Be an active member of the Identity Centre of Excellence to define and govern best practices in identity and access platform engineering, operations, application development, and governance. Drive discussions in the Architecture Review Board; develop platform architecture artifacts and influence architectural decisions.
• Communicate: Communicate problems, risks, challenges, and evangelize IAM best practices to drive discussions across key stakeholders—engineering, operations, developers, and senior leadership. Cross‑collaborate and work with line(s) of business teams and other security and IT support functions.

Requirements

• Education: Bachelor's degree in Computer Science, Information Security, or a related field.
• Experience: 8+ years in Information Security; 7+ years relevant hands‑on experience in identity and authentication in a large, complex organization.
• Expertise in identity and authentication methodologies, techniques, and technologies.
• Strong experience with PING products, AWS IAM, and EntraID.
• Experience with Linux, Windows, Cloud Identity, Access Management, design and architecture of authentication services or identity store.
• Security knowledge covering core technology infrastructure (account management, servers, databases, etc.), identity management, and application security practice.
• Knowledge of IAM IGA‑related tools with vaulting, integration with service management tools (advantage).
• Strong development experience in Java/J2EE technologies.
• Proficient in articulating facts and data‑driven plans and ability to partner with stakeholders to implement intended solutions that reduce risk and meet IAM standards.
• Knowledge of and understanding of identity and access management laws, rules, regulations, and guidelines such as SOX, OCC, NIST, ISO/EC, FFIEC in the financial services sector.
• Possession of CISSP certification would be an advantage.
• Excellent communication and presentation skills.
• Excellent organizational skills and ability to effectively prioritize multiple tasks.
• Proficient in data management, including strong data‑analytical capabilities and advanced understanding of metadata collection and management.

Desired Skills

• Strong attention to detail and advanced analytical skills.

Other Information

• Work Timings: 1:30 pm to 10:30 pm.
• Job Location: Hyderabad, Chennai.