Architect - Identity and Access Management - IAM SME

PepsiCo Inc.; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

PepsiCo is seeking an experienced IAM Architect to lead the design, architecture, and implementation of enterprise IAM across workforce, customer, cloud, and non-human identities. You will define IAM strategy, standards, and drive cross-functional initiatives including M&A programs from inception to deployment.

The ideal candidate blends deep IAM expertise with architecture, cloud security, stakeholder management, and project leadership to deliver secure, scalable identity solutions aligned with

Qualifications

• 10-12 years of Identity & Access Management experience.
• 5+ years in IAM Architecture or Technical Lead roles.
• Proven experience delivering enterprise-scale IAM transformation programs.
• Experience leading cross-functional initiatives and large technology projects.
• Hands-on and architecture experience in authentication/authorization, SSO, IGA, PAM, Directory Services, Governance.
• Experience designing IAM solutions across Azure/Entra ID, AWS IAM, Google Cloud IAM.
• Knowledge of OAuth, OIDC, SAML, SCIM, FIDO2/Passkeys, Conditional Access, PIM/JIT, Zero Trust.
• Experience managing multiple concurrent IAM projects.
• Program planning and execution capabilities; Agile/Waterfall.
• Experience with Okta, Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, ForgeRock, Vault.
• Certifications such as CISSP, CISM, CCSP, Azure/AWS Security; Okta certs.

Responsibilities

• Lead solution design sessions and produce high-quality architecture deliverables.
• Translate business requirements into scalable IAM solutions.
• Review and approve IAM designs by engineering teams and vendors.
• Provide technical oversight throughout IAM implementations.
• Lead POC initiatives and pilot programs for IAM technologies.
• Present recommendations and business cases to governance boards.
• Design IAM solutions for Azure, AWS, and GCP environments.
• Develop standards for cloud-native identity services and privileged access controls.
• Implement modern authentication mechanisms including OAuth, OIDC, SAML, FIDO2/Passkeys, mTLS.
• Define cloud access governance and least-privilege models.
• Coordinate with cloud platform teams to enable secure cloud adoption.
• Lead and manage IAM cross-functional projects: planning, scope, risk, reviews, execution, deployment, change, closure.
• Coordinate activities across security, infrastructure, network, cloud, application, and business teams.
• Manage vendors, integrators, and implementation partners.
• Track milestones, dependencies, risks, and deliverables.

Skills

IAM Architecture

Cross-functional leadership

Cloud security

Stakeholder management

Project leadership

Tools

Okta

Entra ID

SailPoint

Saviynt

CyberArk

Ping Identity

ForgeRock

HashiCorp Vault

Job description

Overview

We are seeking an experienced IAM Architect to lead the design, architecture, and implementation of enterprise Identity & Access Management solutions across workforce, customer, cloud, application, and non-human identities. The role is responsible for defining IAM strategy, developing architecture standards, conducting technology evaluations and proof-of-concepts (POCs), and leading cross-functional IAM initiatives, M&A programs from inception through deployment.

The ideal candidate combines deep IAM technical expertise with strong architecture, cloud security, stakeholder management, and project leadership skills to drive secure, scalable, and business-aligned identity solutions.

Responsibilities

• Lead solution design sessions and produce high-quality architecture deliverables including HLDs, LLDs, sequence diagrams, and integration specifications.
• Translate business requirements into scalable IAM solutions.
• Review and approve IAM designs produced by engineering teams and vendors.
• Provide technical oversight throughout the lifecycle of IAM implementations.
• Lead Proof-of-Concept (POC) initiatives and pilot programs for emerging IAM technologies.
• Present recommendations and business cases to leadership and architecture governance boards.
• Design IAM solutions for Azure, AWS, and GCP environments.
• Develop standards for cloud-native identity services and privileged access controls.
• Implement modern authentication mechanisms including OAuth, OIDC, SAML, FIDO2, Passkeys, and mTLS.
• Define cloud access governance and least-privilege models.
• Collaborate with cloud platform teams to enable secure cloud adoption and migration initiatives.
• Lead and manage IAM cross functional projects from initiation to completion, including:
  • Planning
  • Scope Management
  • Risk Management
  • Design Reviews
  • Execution Oversight
  • Deployment Support
  • Change Management
  • Project Closure
• Coordinate activities across security, infrastructure, network, cloud, application, and business teams.
• Manage vendors, integrators, and implementation partners.
• Track project milestones, dependencies, risks, and deliverables.

Qualifications

• 10- 12 years of Identity & Access Management experience.
• 5+ years in IAM Architecture or Technical Lead roles.
• Proven experience delivering enterprise-scale IAM transformation programs.
• Demonstrated experience leading cross-functional initiatives and large technology projects.
• Strong hands-on and architecture experience in: Authentication & Authorization, SSO & Federation, IGA, PAM, Directory Services, Access Certification & Governance, NHI Security.
• Experience designing IAM solutions across: Microsoft Entra ID / Azure, AWS IAM, Google Cloud IAM.
• Knowledge of OAuth, 2.0 / OIDC, SAML, SCIM, FIDO2 / Passkeys, Conditional Access, PIM / JIT Access, Zero Trust Architecture.
• Experience managing multiple concurrent IAM projects.
• Strong program planning and execution capabilities.
• Experience working within Agile and Waterfall methodologies.
• Experience with one or more of Okta, Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, ForgeRock, HashiCorp Vault.
• Preferred certifications include CISSP, CISM, CCSP, Azure Security Engineer, AWS Security Specialty, Okta Certified Professional/Administrator, CyberArk Defender/Sentry.