Sr Architect

Birlasoft; Pune District; On-site; INR 3,000,000 - 5,200,000; Full time

Job summary

Birlasoft is seeking an Identity and Access Management Architect for Pune/Mumbai to lead complex IAM initiatives and deliver secure, scalable solutions. You will design and oversee architectures, select platforms such as SailPoint IdentityIQ, IdentityNow, Okta and Azure AD, and guide delivery across enterprise environments.

The role requires 10+ years of IAM experience, strong communication and stakeholder management, and the ability to drive architecture reviews and solution workshops with

Qualifications

• 10+ years in IAM with architecture and implementation background.
• Experience as IAM Architect/Lead for enterprise-scale IAM programs.
• Hands-on with IAM platforms SailPoint, Okta, Azure/Entra ID, AD and PAM.
• Strong knowledge of identity lifecycle, access governance, provisioning, and SoD.
• Experience with IGA, SSO, MFA, PAM onboarding and directory integration.
• Knowledge of SAML, OAuth2, OIDC, SCIM, LDAP, Kerberos, REST APIs.

Skills

Leadership

Stakeholder management

Communication

Decision making

Problem solving

Tools

SailPoint IdentityIQ

IdentityNow

Okta

Azure AD / Microsoft Entra ID

Active Directory

CyberArk

BeyondTrust

Delinea

PKI

Job description

Area(s) of responsibility

Job Title- Identity and Access Management Architect

Location- Pune/Mumbai

Mandatory Skills And Experience

• Minimum 10+ years of experience in Identity and Access Management, with strong architecture and implementation background.


• Proven experience as an IAM Architect / IAM Lead / IAM Solution Designer for enterprise-scale IAM programs.


• Strong hands-on and architectural experience with one or more IAM platforms such as:


• 
  
  • SailPoint IdentityIQ / IdentityNow
  
  
  • Okta
  
  
  • Microsoft Entra ID / Azure AD
  
  
  • Active Directory
  
  
  • CyberArk / BeyondTrust / Delinea or equivalent PAM platforms
  
  


• Strong understanding of identity lifecycle management, access governance, provisioning, reconciliation, certification, and role management.


• Experience in application onboarding for IGA, SSO, MFA, PAM, and directory integration.


• Strong knowledge of authentication and federation protocols including SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, and REST APIs.


• Experience designing directory integrations, delegated authentication, user mastering, attribute-level mastering, and identity correlation rules.


• Strong understanding of RBAC, ABAC, SoD policies, privileged access controls, least privilege, and access review processes.


• Experience with password vault configuration, privileged account onboarding, password rotation, session management, and secrets management.


• Experience with PKI, certificate lifecycle management, passwordless authentication, MFA, and conditional access policies.


• Strong knowledge of cloud identity and security architecture across Microsoft Azure, M365/O365, AWS IAM, KMS, and SaaS integrations.


• Ability to create high-quality architecture and delivery documents such as SRS, HLD, LLD, design documents, runbooks, test plans, and operational handover documents.


• Experience supporting compliance and audit requirements for SOX, NIST, ISO 27001, CMMC/CMMI, and Cloud Security Alliance frameworks.


• Excellent communication, stakeholder management, leadership, and decision-making skills.


• Ability to lead technical discussions, architecture reviews, design workshops, and executive-level solution walkthroughs.

Preferred Skills

Preferred Skills

• Experience with Zero Trust architecture and identity-centric security models.


• Experience with CIAM, B2B/B2C identity, external identity, or customer-facing identity platforms.


• Experience with IAM migration, consolidation, modernization, or transformation programs.


• Knowledge of DevSecOps, API security, secrets management, and workload identity.


• Experience with automation using PowerShell, Python, REST APIs, SCIM, or IAM Connector


• Relevant certifications such as:




• Microsoft Certified: Identity and Access Administrator


• Okta Certified Professional / Administrator / Consultant


• SailPoint IdentityIQ / IdentityNow Certification


• CyberArk Defender / Sentry


• CISSP / CCSP / CISM


• AWS Security Specialty