Senior Manager, Cyber Risk

Kroll; Bengaluru; On-site; INR 2,400,000 - 4,200,000; Full time

Job summary

Kroll is seeking an experienced IAM Architect to lead enterprise IAM strategies across governance, PAM, and cloud identities. You will set architecture standards, drive large-scale transformations, and mentor teams. The role requires extensive IAM domain expertise and certifications.

The candidate will collaborate with executives on IAM strategy, design comprehensive reference architectures, and guide implementation workstreams across Azure, AWS, and GCP environments.

Qualifications

• Bachelor's degree in CS/IT/Cyber Security or equivalent practical experience.
• Experience leading enterprise IAM transformation programs.
• Experience in consulting or professional services organizations.
• Experience with cloud platforms (Azure, AWS, GCP).
• Strong understanding of security frameworks such as NIST and CIS.
• Microsoft, Okta, Saviynt, SailPoint, CyberArk certifications.

Responsibilities

• Define enterprise IAM architecture and technology roadmaps.
• Design end-to-end identity solutions across workforce and privileged identities.
• Develop IAM reference architectures, standards, and design patterns.
• Lead solution design workshops with business and technical stakeholders.
• Architect Saviynt and SailPoint solutions.
• Design identity lifecycle governance.
• Define RBAC and ABAC strategies.
• Design privileged access frameworks.
• Architect Microsoft Entra ID solutions.
• Design Okta Workforce Identity architectures.
• Integrate cloud identity providers with enterprise apps.
• Define federation, SSO, MFA, CA, Identity Protection, Passwordless strategies.
• Lead multiple IAM implementation workstreams.
• Provide architectural governance.
• Mentor consultants and engineers.
• Participate in solution estimation, proposals, and customer presentations.

Skills

IAM experience

Enterprise architecture

RBAC/ABAC

Workforce identity

Cloud identity

Solution design workshops

Leadership

Governance strategy

Federation/SSO/MFA

Roadmaps/strategy

Education

Bachelor's degree in Computer Science/IT/Cyber Security

Tools

Saviynt

SailPoint

CyberArk

Delinea

BeyondTrust

Microsoft Entra ID

Okta Workforce Identity

Active Directory

LDAP

Job description

Day To Day Responsibilities

The IAM Architect is responsible for designing and leading enterprise Identity & Access Management strategies across Identity Governance, Privileged Access Management, Workforce Identity, and Cloud Identity platforms. This role provides architectural leadership, establishes IAM standards, and drives large-scale IAM transformation initiatives aligned with enterprise security strategies.

Day To Day Responsibilities

IAM Architecture

• Define enterprise IAM architecture and technology roadmaps
• Design end-to-end identity solutions across workforce and privileged identities
• Develop IAM reference architectures, standards, and design patterns
• Lead solution design workshops with business and technical stakeholders

Identity Governance

• Architect Saviynt and SailPoint solutions
• Design identity lifecycle governance
• Define RBAC and ABAC strategies
• Design access certification and governance frameworks

Privileged Access Management

• Architect CyberArk, Delinea, and BeyondTrust solutions
• Define privileged access strategies
• Design privileged identity governance and operational models

Identity Platforms

• Architect Microsoft Entra ID solutions
• Design Okta Workforce Identity architectures
• Integrate cloud identity providers with enterprise applications
• Define federation, SSO, MFA, Conditional Access, Identity Protection, and Passwordless strategies

Program Leadership

• Lead multiple IAM implementation workstreams
• Provide architectural governance
• Mentor consultants and engineers
• Participate in solution estimation, proposal development, and customer presentations
• Collaborate with executive stakeholders on IAM strategy

Essential Traits

Core Technical Skills

• 9–12 years of IAM experience
• Strong enterprise architecture experience across IAM domains
• Deep expertise in Saviynt and/or SailPoint
• Strong experience with CyberArk, Delinea, or BeyondTrust
• Extensive experience with Microsoft Entra ID
• Strong experience with Okta Workforce Identity
• Experience designing federation, SSO, MFA, Conditional Access, Identity Governance, and PAM solutions
• Experience developing enterprise IAM roadmaps

Technical Foundations

• Identity governance and administration
• Privileged Access Management
• Authentication and federation (SAML, OAuth2, OIDC, SCIM)
• Active Directory and LDAP
• Cloud identity architecture
• API integrations
• Zero Trust security architecture

Prerequisites

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or equivalent practical experience.
• Experience leading enterprise IAM transformation programs
• Experience in consulting or professional services organizations
• Experience with cloud platforms (Azure, AWS, GCP)
• Strong understanding of security frameworks such as NIST and CIS
• Microsoft, Okta, Saviynt, SailPoint, CyberArk Certifications