IAM Lead Designer, AVP

Deutsche Bank AG; Pune District; On-site; INR 3,500,000 - 7,000,000; Full time

Benefits offered by this job

Leave policy

Gender neutral parental leaves

Childcare assistance

Industry certifications sponsorship

Employee Assistance Program

Hospitalization insurance

Life insurance

Health screening

Job summary

Deutsche Bank AG is seeking an experienced IAM Architect to lead design authority for Day 2 IAM enhancements spanning SailPoint and ForgeRock platforms. You will drive architecture decisions, ensure governance, and deliver reusable design artefacts with strong risk and compliance alignment.

The role requires deep expertise in identity governance, access management, and RBAC, with experience across global enterprise environments and collaboration with business analysts and engineering leads.

Qualifications

• 10-12 years of overall experience in IAM, security architecture, or enterprise platforms.
• At least 2 years in a senior IAM Architect / Lead Designer role with design ownership.
• Experience across IAM domains: Identity Governance, Access Management, RBAC and lifecycle.
• Strong exposure to SailPoint and ForgeRock architectures.
• Experience with IAM tools such as OIM and Active Directory.

Responsibilities

• Own end-to-end solution and detailed design for IAM Day 2 enhancements ensuring security controls and regulatory obligations are met.
• Lead design authority for IAM initiatives; translate requirements into robust, reusable designs.
• Produce and govern design artefacts (FSDs, TDDs, interface designs) and ensure alignment with risk and compliance.
• Review vendor designs to ensure simplicity, long-term operability, and audit readiness.
• Define integration patterns across SailPoint, ForgeRock, AD/LDAP, cloud platforms, APIs, and enterprise apps.

Skills

IAM Architect

Security architecture

Governance

Stakeholder management

Architecture decision-making

Tools

SailPoint

ForgeRock

OIM

Active Directory

Job description

What we’ll offer you

• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above

Your key responsibilities

• Accountable for end-to-end solution and detailed design ownership for Accessio Day 2 enhancements, ensuring solutions meet business outcomes, security controls, regulatory obligations, and operational standards across ForgeRock and SailPoint platforms.
• Act as the Lead Designer and design sign-off authority for IAM initiatives, ensuring functional, non-functional, and control requirements are translated into robust, reusable, and supportable designs.
• Produce, own, and govern design artefacts, including: Functional Specification Documents (FSDs) Technical Design Documents (TDDs) Integration, configuration, and interface designs
• Critically review and challenge vendor-provided designs & effort ensuring solutions meet bank standards, avoid unnecessary complexity, and are fit for long-term operation and audit scrutiny.
• Design and govern integration patterns across: SailPoint (IGA) - identity lifecycle, access requests, certifications, RBAC ForgeRock (AM / IDM) - authentication, authorization, federation, access enforcement Directory services (AD / LDAP), cloud platforms, APIs, and enterprise applications
• Partner with business analysts to refine requirements and ensure design traceability, and with engineering leads to ensure designs are implementation-ready and delivery-feasible.
• Identify, document, and manage design-level risks (security, performance, scalability, resilience, operability), ensuring mitigations are embedded within approved designs.
• Ensure all designs adhere to identity lifecycle governance, RBAC principles, segregation of duties, and access control policies, in collaboration with the RBAC Architect.
• Provide design leadership for migration and transition initiatives from legacy IAM platforms to Accessio, ensuring continuity of controls and minimal operational risk.
• Maintain high-quality, audit-ready design documentation, ensuring alignment with risk, compliance, and regulatory control frameworks.
• Work in partnership with Day 2 Project Management to ensure design deliverables meet defined quality gates, timelines, and governance milestones.
• Continuously improve the design maturity of the Accessio platform by driving reuse, simplification, and standardization across SailPoint and ForgeRock implementations.

Technical Governance, Engineering Oversight & Operations

• Provide senior design leadership and governance oversight for IAM Day 2 enhancements delivered by internal and vendor engineering teams.
• Review and approve FSDs and TDDs with a focus on design completeness, control effectiveness, clarity, and reuse.
• Guide engineering teams on design intent, configuration standards, extensibility models, and integration approaches, ensuring fidelity to approved designs.
• Ensure all configurable components and extensions are designed for reuse, stability, maintainability, and performance, avoiding point-in-time or tactical solutions.
• Define and enforce design quality standards that support effective testing, deployment, and release readiness.
• Support defect triage and root-cause analysis, providing design-level direction for systemic or recurring issues.
• Promote reuse of approved design patterns, shared services, and common integration frameworks across IAM initiatives.
• Provide Level 3 design ownership for production incidents, ensuring corrective actions address root design causes and strengthen platform resilience.
• Review design-relevant code artefacts and documentation at a governance level to ensure alignment with approved designs, security standards, and compliance expectations.

Your skills and experience

• 10-12 years of overall experience, with 6+ years of relevant professional experience in IAM, security architecture, or enterprise platforms.
• At least 2 years of proven experience in a senior IAM Architect / Lead Designer role with design ownership responsibilities.
• At least 2 years of experience across IAM domains, including: Identity Governance (IGA) Access Management and Federation RBAC and identity lifecycle management.
• Demonstrated experience with SailPoint and/or ForgeRock in an architectural or design authority capacity.
• Proven skills demonstrated through interviews, design reviews, references, or recognized certifications.
• Nice to Have Experience working in banking or financial services, particularly within regulated environments.
• Strong exposure to SailPoint and ForgeRock architectures.
• Experience with IAM tools OIM, Active Directory.
• Exposure to audit-driven IAM controls, access certifications, and regulatory environment.
• Experience working with global and distributed delivery teams.
• Strong stakeholder management, governance, and architectural decision‑making skills.

Why Join Us

• Strong focus on learning, certifications, and career growth
• Inclusive benefits including gender‑neutral parental and childcare support
• Comprehensive health, life, and insurance coverage
• Opportunity to work on strategic, enterprise‑wide IAM platforms
• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

How we’ll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs

About us and our teams

Please visit our company website for further information: https://www.db.com/company/company.html

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

For over 150 years, our dedication to being the Global Hausbank for our clients has been driven by our people - in around 60 countries and across more than 150 nationalities. Their deep understanding, insights, expertise, and passion help our clients navigate an increasingly complex world - be it in our Corporate Bank, our Private Bank, our Investment Bank or our Asset Management (DWS) division. Together we can make a great impact for our clients at home and abroad, securing their lasting success and financial security.

More information at: Deutsche Bank Careers (db.com)