Architect - Identity and Access Management - IAM SME

PepsiCo; Hyderabad; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

PepsiCo seeks an experienced IAM Architect to lead the design, architecture, and implementation of enterprise Identity & Access Management across workforce, customer, cloud, and application identities. You will drive IAM strategy, standards, evaluations, and POCs, guiding cross-functional IAM initiatives from inception through deployment.

The ideal candidate combines deep IAM expertise with strong architecture, cloud security, stakeholder management, and project leadership to deliver secure,

Qualifications

• 10-12 years of IAM experience in enterprise environments.
• 5+ years in IAM architecture or technical lead roles.
• Proven delivery of enterprise-scale IAM transformation programs.
• Experience leading cross-functional initiatives and large technology projects.
• Hands-on and architecture expertise in authentication, authorization, SSO/Federation, IGA, PAM, and governance.
• Experience with Microsoft Entra ID/Azure, AWS IAM, and Google Cloud IAM.
• Certification prefs: CISSP, CISM, CCSP, Azure Security, AWS Security, Okta cert, CyberArk Defender/Sentry.

Responsibilities

• Lead solution design sessions and produce architecture deliverables (HLDs, LLDs, sequence diagrams, integration specs).
• Translate business requirements into scalable IAM solutions.
• Review designs and provide oversight across lifecycle of implementations.
• Lead POC initiatives and pilots for new IAM technologies.
• Collaborate with cloud/platform teams to enable secure cloud adoption.
• Manage vendors, cross-functional teams, and project milestones.

Skills

Authn/Authz

SSO/Federation

IGA

PAM

Directory Services

Zero Trust

Tools

Okta

Entra ID

SailPoint

Saviynt

CyberArk

Ping Identity

ForgeRock

HashiCorp Vault

Job description

Overview

We are seeking an experienced IAM Architect to lead the design, architecture, and implementation of enterprise Identity & Access Management solutions across workforce, customer, cloud, application, and non-human identities. The role is responsible for defining IAM strategy, developing architecture standards, conducting technology evaluations and proof-of-concepts (POCs), and leading cross-functional IAM initiatives, M&A programs from inception through deployment.

The ideal candidate combines deep IAM technical expertise with strong architecture, cloud security, stakeholder management, and project leadership skills to drive secure, scalable, and business-aligned identity solutions.

Responsibilities

• Lead solution design sessions and produce high-quality architecture deliverables including HLDs, LLDs, sequence diagrams, and integration specifications.
• Translate business requirements into scalable IAM solutions.
• Review and approve IAM designs produced by engineering teams and vendors.
• Provide technical oversight throughout the lifecycle of IAM implementations.
• Lead Proof-of-Concept (POC) initiatives and pilot programs for emerging IAM technologies.
• Present recommendations and business cases to leadership and architecture governance boards.
• Design IAM solutions for Azure, AWS, and GCP environments.
• Develop standards for cloud-native identity services and privileged access controls.
• Implement modern authentication mechanisms including OAuth, OIDC, SAML, FIDO2, Passkeys, and mTLS.
• Define cloud access governance and least-privilege models.
• Collaborate with cloud platform teams to enable secure cloud adoption and migration initiatives.
• Lead and manage IAM cross functional projects from initiation to completion, including:

Planning, Scope Management, Risk Management, Design Reviews, Execution Oversight, Deployment Support, Change Management, Project Closure

• Coordinate activities across security, infrastructure, network, cloud, application, and business teams.
• Manage vendors, integrators, and implementation partners.
• Track project milestones, dependencies, risks, and deliverables.

Qualifications

• 10- 12 years of Identity & Access Management experience.
• 5+ years in IAM Architecture or Technical Lead roles.
• Proven experience delivering enterprise-scale IAM transformation programs.
• Demonstrated experience leading cross-functional initiatives and large technology projects.
• Strong hands-on and architecture experience in: Authentication & Authorization, SSO & Federation, IGA, PAM, Directory Services, Access Certification & Governance, NHI Security.
• Experience designing IAM solutions across: Microsoft Entra ID / Azure, AWS IAM, Google Cloud IAM.
• Knowledge of OAuth, 2.0 / OIDC, SAML, SCIM, FIDO2 / Passkeys, Conditional Access, PIM / JIT Access, Zero Trust Architecture.
• Experience managing multiple concurrent IAM projects.
• Strong program planning and execution capabilities.
• Experience working within Agile and Waterfall methodologies.
• Experience with one or more of Okta, Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, ForgeRock, HashiCorp Vault.
• Preferred certifications include CISSP, CISM, CCSP, Azure Security Engineer, AWS Security Specialty, Okta Certified Professional/Administrator, CyberArk Defender/Sentry.