IAM Software Architect

Airbus; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Airbus India Private Limited in Bangalore seeks a Software Architect for IAM, AI & Zero Trust to own the architectural vision of the Self-Service Identity Platform. You will define target architecture, enable security-by-design, and drive modular, scalable identity workflows across hybrid cloud environments.

You will collaborate with Product, Tech Lead, and BA to align business needs with security mandates, ensuring compliance with GDPR/ITAR and industry standards while delivering a

Qualifications

• 12+ years of software engineering experience.
• 4+ years as Enterprise/Software/Solution Architect in IAM or enterprise security.
• Strong knowledge of Zero Trust, ABAC/RBAC/PBAC and security-by-design.
• Experience with Python and React in enterprise platforms.

Responsibilities

• Own the architectural vision and target architecture for the IAM Self-Service Platform.
• Define Zero Trust strategy, continuous authentication and dynamic authorization.
• Lead ARB governance, PoCs for emerging identity technologies and ITDR concepts.
• Design scalable, secure integration patterns across hybrid cloud environments and identity systems.
• Ensure observability, telemetry, and compliance with data privacy and aviation regulations.

Skills

Zero Trust

IAM

Microservices

API Gateway

OIDC/OAuth2

SAML

Python

React

Cloud-native

Security by Design

Education

Graduate/PG in CS or related

Tools

Azure

AWS

GCP

SQL Server

PowerShell

Job description

Job Description: Software Architect – IAM, AI & Zero Trust

Location: Bangalore, India Department: Digital Infrastructure & Platforms (IAM)

Role Description

Are you a visionary software architect with a deep passion for modern cybersecurity, platform engineering, and identity governance? Airbus is seeking a Software Development Architect to own and evolve the architectural vision of our IAM Self-Service Platform. As Airbus accelerates its Digital Transformation, Identity & Access Management (IAM) is moving from a back-office utility to a core strategic product. In this role, you will define the target architecture for our self-service tools, ensure seamless integration across hybrid and cloud environments, and systematically guide our identity ecosystem toward a Zero Trust Architecture (Never Trust, Always Verify). Operating within our leadership squad alongside the Product Manager, Technical Lead, and Techno-Functional BA, you will bridge business needs and security mandates into resilient, scalable, and developer-friendly technical blueprints.

Challenges & Strategic Impact

Agentic AI & Emerging Workloads

Preparing identity frameworks to support non-human identities, AI agents, and automated machine-to-machine interactions over the next two years.

DevSecOps Integration

Fully embedding Security by Design and DevSecOps principles into the software development architecture and release lifecycle.

Zero Trust Evolution

Transforming legacy identity mechanisms into continuous, dynamic, risk-based access controls and identity governance.

Architectural Designs

Architect highly performant, scalable software solutions that embed 'Security by Design' principles, driving rigorous quality and sustainability metrics while future-proofing the product roadmap which will be in-line with the IAM PSL objectives.

Developer & User Experience

Designing zero-trust architectures that simplify access requests and self-service workflows for 130,000+ Airbus employees and external supply chain partners without creating operational friction.

Enterprise Security Standards

Ensuring architectural alignment with Airbus Cybersecurity rules ("Blue Book"), global data privacy regulations (GDPR), EASA aviation compliance, and ITAR/EAR export control policies.

Identity & Access Management (IAM)

Establishing comprehensive IAM domain leadership and strategic focus to align identity security practices with modern enterprise architecture.

Key Responsibilities

1. Architectural Vision & Zero Trust Strategy Own the technical roadmap and target architecture for the IAM Self-Service Platform, ensuring high availability, security-by-design, and modern design patterns. Lead the architectural shift toward Zero Trust Principles, designing mechanisms for continuous authentication, dynamic authorization (ABAC/RBAC/PBAC), least-privilege access, and micro-segmentation integration. Apply and adopt standard protocols (OIDC/OAuth2, SAML, SCIM, FIDO2) across enterprise web applications, APIs, and services to ensure architectural compliance.
2. Platform Design & Identity Integration Design scalable integration patterns between the core self-service portal (Python/React) and identity systems, governance platforms, and hybrid cloud environments. Define API-first governance, microservices architecture, and secure data access layers for identity workflow engines and automation scripts. Establish non-functional requirements (NFRs) including system scalability, latency targets, failover resilience, and audit logging for security compliance. Establish and mandate core architectural principles, enterprise design patterns, and robust application frameworks to drive scalable identity integrations. Lead ARD (Architecture Reference Document) management, translating complex IAM requirements into precise network models, Zero Trust security views, and modular software architecture breakdowns. Design comprehensive Observability and Telemetry strategies (logging, tracing, and monitoring) to ensure real-time visibility into identity workflows, system health, and security events.
3. Product Quad, Architect Network & Engineering Collaboration Partner with the Product Manager (PM) / Product Owner (PO) to translate business vision and security roadmaps into architecturally sound product epics. Work in tandem with the Technical Lead to guide engineering teams, ensuring implementation details adhere to the master architectural design without creating technical debt. Collaborate with the Techno-Functional BA to validate technical feasibility, security constraints, and boundary conditions for new self-service workflows. Collaborate with cross-functional domain leaders—including Enterprise, Cyber Security, Infrastructure, and PSL Architects, alongside Data Officers and Quality/Eco-Design Experts—to drive comprehensive architectural reviews and integrate strategic recommendations. Partner closely with Enterprise, Product, and PSL Architects to align platform design with overall IAM domain strategy and enterprise architecture principles.
4. Technical Governance & Innovation Serve as the primary representative for the product on the internal Architecture Review Board (ARB) and Cybersecurity committees. Conduct Proof of Concepts (PoCs) for emerging identity technologies, passwordless access, and identity threat detection and response (ITDR). Author and govern comprehensive Architectural Requirements Dossiers (ARDs), technical standards, engineering specifications, and integration patterns, providing actionable blueprints that guide and accelerate internal development teams. Drive proactive Threat Modeling (e.g., STRIDE) and risk assessments during the design phase to identify and mitigate vulnerabilities before development begins.

Qualifications & Experience

Education: Graduate/Postgraduate degree in Computer Science, Information Technology, Cybersecurity, or a related field. Experience: 12+ years of software engineering experience, with at least 4+ years operating as an Enterprise/Software/Solution Architect in large-scale IAM or enterprise security environments. Architecture & Frameworks: Expertise in Microservices, Event-Driven Architecture, API Gateway patterns, RESTful APIs, and Cloud-native designs (Azure/AWS/GCP). Identity Domain Mastery (Preferred): Comprehensive Identity & Access Management (IAM) domain expertise, including familiarity with IGA, PAM, or core IAM frameworks, as well as strong architectural knowledge of: Protocols: OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM, FIDO2/WebAuthn. Identity Engines: Active Directory, Azure AD / Entra ID, Ping Identity, Okta, or SailPoint. Concepts: Zero Trust Architecture (NIST SP 800-207), Identity Governance & Administration (IGA), Privileged Access Management (PAM), RBAC/ABAC models. Technical Stack Literacy: Strong architectural knowledge of Python, React, SQL Server, and PowerShell/Automation workflows. Soft Skills: Exceptional communication and stakeholder management skills within a multi-cultural, international environment (India - Europe), capable of bridging executive strategy, security auditing, and engineering teams. Certifications (Nice to Have): CISSP, CCSP, TOGAF, Microsoft Certified: Cybersecurity Architect Expert, or AWS/Azure Solutions Architect Professional, Archimate. Alignment within the IAM Product Quad Boundary Area Product Architect (This Role) Technical Lead Product Manager / PO Core Ownership System Structure & Security Standards Code Execution & Team Velocity Business Value & Backlog Priority Key Output Architecture Blueprints, Zero Trust Roadmap, Tech Stack Rules Clean Python/React Code, CI/CD, Working APIs Product Roadmap, Feature Epics, User Stories Core Focus Is the system secure, scalable, and aligned with Zero Trust? Is the code performant, maintainable, and bug-free? Does this feature solve a high-value user problem? This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company's success, reputation and sustainable growth.

Company: Airbus India Private Limited Employment Type: Permanent ------- Experience Level: Professional Job Family: Digital

Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief. Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [e-mail]. At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking. Airbus pioneers sustainable aerospace for a safe and united world. The Company constantly innovates to provide efficient and technologically-advanced solutions in aerospace, defence, and connected services. In commercial aircraft, Airbus offers modern and fuel-efficient airliners and associated services. Airbus is also a European leader in defence and security and one of the world's leading space businesses. In helicopters, Airbus provides the most efficient civil and military rotorcraft solutions and services worldwide.