Sr Architect

Birlasoft; Pune District; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Birlasoft is seeking an Identity and Access Management Architect to lead enterprise IAM initiatives in Pune/Mumbai. The role requires extensive experience in IAM architecture, implementation, and cross-functional stakeholder engagement.

Responsibilities include designing IAM solutions across SSO, MFA, directory integrations, and lifecycle management, with hands-on expertise in platforms like SailPoint, Okta, Entra ID, AD, and PAM tools. Strong communication and leadership are essential.

Qualifications

• Minimum 10+ years of experience in Identity and Access Management.
• Proven experience as IAM Architect / IAM Lead / IAM Solution Designer for enterprise-scale IAM programs.
• Strong hands-on and architectural experience with IAM platforms such as SailPoint, Okta, Entra ID, AD, and PAM tools.
• Experience with identity lifecycle management, access governance, provisioning, reconciliation, certification, and RBAC/ABAC.

Responsibilities

• Lead IAM architecture discussions, reviews, and solution walkthroughs.
• Design and deliver identity and access management solutions for enterprise programs.

Skills

IAM Architect

Leadership

Enterprise IAM

Tools

SailPoint IdentityIQ/IdentityNow

Okta

Microsoft Entra ID / Azure AD

Active Directory

CyberArk/BeyondTrust/Delinea PAM

Job description

Job Description:

Area(s) of responsibility

Job Title- Identity and Access Management Architect

Location- Pune/Mumbai

Mandatory Skills and Experience

• Minimum 10+ years of experience in Identity and Access Management, with strong architecture and implementation background.
• Proven experience as an IAM Architect / IAM Lead / IAM Solution Designer for enterprise-scale IAM programs.
• Strong hands-on and architectural experience with one or more IAM platforms such as:
  • SailPoint IdentityIQ / IdentityNow
  • Okta
  • Microsoft Entra ID / Azure AD
  • Active Directory
  • CyberArk / BeyondTrust / Delinea or equivalent PAM platforms
• Strong understanding of identity lifecycle management, access governance, provisioning, reconciliation, certification, and role management.
• Experience in application onboarding for IGA, SSO, MFA, PAM, and directory integration.
• Strong knowledge of authentication and federation protocols including SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, and REST APIs.
• Experience designing directory integrations, delegated authentication, user mastering, attribute-level mastering, and identity correlation rules.
• Strong understanding of RBAC, ABAC, SoD policies, privileged access controls, least privilege, and access review processes.
• Experience with password vault configuration, privileged account onboarding, password rotation, session management, and secrets management.
• Experience with PKI, certificate lifecycle management, passwordless authentication, MFA, and conditional access policies.
• Strong knowledge of cloud identity and security architecture across Microsoft Azure, M365/O365, AWS IAM, KMS, and SaaS integrations.
• Ability to create high-quality architecture and delivery documents such as SRS, HLD, LLD, design documents, runbooks, test plans, and operational handover documents.
• Experience supporting compliance and audit requirements for SOX, NIST, ISO 27001, CMMC/CMMI, and Cloud Security Alliance frameworks.
• Excellent communication, stakeholder management, leadership, and decision-making skills.
• Ability to lead technical discussions, architecture reviews, design workshops, and executive-level solution walkthroughs.

Preferred Skills

• Experience with Zero Trust architecture and identity-centric security models.
• Experience with CIAM, B2B/B2C identity, external identity, or customer-facing identity platforms.
• Experience with IAM migration, consolidation, modernization, or transformation programs.
• Knowledge of DevSecOps, API security, secrets management, and workload identity.
• Experience with automation using PowerShell, Python, REST APIs, SCIM, or IAM Connector
• Relevant certifications such as:
  • Microsoft Certified: Identity and Access Administrator
  • Okta Certified Professional / Administrator / Consultant
  • SailPoint IdentityIQ / IdentityNow Certification
  • CyberArk Defender / Sentry
  • CISSP / CCSP / CISM
  • AWS Security Specialty

Requirements: