Identity & Access Management (IAM) Architect

Astreya; India; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

Astreya is seeking an Architect specializing in Cloud Identity and Access Management to design secure IAM architectures for a global enterprise. The role focuses on hybrid environments, federated identity, and least-privilege access across enterprise systems.

You will work across Azure Active Directory/Entra ID and Okta, integrate MFA, SSO and Conditional Access, and define threat models, risk assessments, and guardrails for product and engineering teams.

Qualifications

• Advanced hands-on IAM architecture with Entra ID/Okta and least-privilege principles.
• Experience in enterprise IAM governance, threat modeling, and risk assessments.
• CISSP, CCSP, or Microsoft Azure Security Engineer Associate preferred.

Responsibilities

• Design and refine IAM architectures for hybrid enterprise environments across Azure Entra ID and Okta.
• Integrate MFA, SSO and Conditional Access into legacy and cloud-native apps.
• Define threat models, security risk assessments, reference architectures, and guardrails for product teams.
• Coordinate with security operations to integrate identity logging, monitoring, and alerting into security tooling.
• Produce HLD, LLD, risk docu­mentation, and control mappings for audits and compliance.

Skills

Azure Entra ID

Okta

Least-Privilege Access

MFA

SSO

Conditional Access

Threat Modeling

Security Risk Assessment

Hybrid Identity Governance

Azure Active Directory

Job description

Role Overview: Seeking an Architect specialising in Cloud Identity and Access Management (IAM) to design and secure cyber security architectures for a global enterprise. This role focuses on hybrid environments, federated identity, and least-privilege access management across enterprise systems.

Key Responsibilities:

• Design and refine end-to-end IAM architectures for complex hybrid enterprise environments across Azure Active Directory (Entra ID) and Okta platforms.
• Integrate secure authentication mechanisms (MFA, SSO, Conditional Access) and authorization standards into legacy and cloud-native application architectures.
• Define threat models, security risk assessments, security reference architectures, reusable design patterns, and architectural guardrails for product and engineering teams.
• Coordinate with security operations and incident response teams to integrate identity event logging, monitoring, and alerting into existing security tooling and workflows.
• Produce High-Level Design (HLD), Low-Level Design (LLD), risk decision documentation, and control mappings to support regulatory reviews, audits, and compliance.

Core Requirements:

• Technical Expertise: Advanced hands‑on experience with Azure Active Directory / Entra ID, Okta, and least‑privilege access principles.
• Architecture Background: Proven track record in enterprise IAM architecture, threat modeling, security risk assessments, and hybrid identity governance.
• Preferred Certifications: CISSP, CCSP, or Microsoft Certified: Azure Security Engineer Associate