Enterprise IAM Solutions Architect

Randstad Singapore; Singapore; On-site; SGD 179,000 - 201,000; Full time

Benefits offered by this job

Benefits

Job summary

Randstad Singapore is seeking an Enterprise IAM Solutions Architect to define and evolve enterprise-grade IAM architectures, roadmaps, and maturity models across multi-cloud and on-prem.

You will lead build vs buy decisions, vendor evaluations (RFI/RFP), and enforce Zero Trust across four identity domains; SSO, MFA, RBAC, lifecycle management; drive continuous authentication across hybrid environments; serve as trusted tech lead across CSR aligning designs with execution.

Qualifications

• Proven track record leading enterprise IAM target-state architectures and strategic transformation programs.
• Deep conceptual knowledge of protocols (SAML, OAuth 2.0, OIDC, SCIM, LDAP) and platform ecosystems (Okta/Ping/Entra ID, CyberArk/BeyondTrust, SailPoint/Saviynt).
• Hands-on experience scaling systems for millions of users while enforcing Zero Trust and continuous risk-evaluation mechanisms.
• CISSP, CISM, CIAM, or TOGAF.

Responsibilities

• Define, own, and evolve enterprise-grade IAM target-state architectures, multi-year roadmaps, and capability maturity models.
• Lead build vs. buy decisions, vendor evaluations (RFI/RFP), and architectural trade-offs across identity platforms.
• Enforce Zero Trust controls across four key identity domains: lifecycle management, RBAC, entitlement management, and least-privilege governance.
• Architect continuous authentication/authorization controls spanning hybrid, AWS, Azure, GCP, and on-premises environments.
• Serve as the trusted technical lead across CSR, advising business units and ensuring alignment between high-level designs and technical execution.

Skills

Enterprise IAM

Zero Trust

SAML

OAuth 2.0

OIDC

RBAC

MFA

SSO

risk-based access

Cloud platforms

Education

CISSP

CISM

TOGAF

Tools

Okta

Ping

Entra ID

CyberArk

BeyondTrust

SailPoint

Saviynt

Job description

• High-Scale Enterprise (Millions of Customers) | Multi-Cloud (AWS, Azure, GCP) | Zero Trust
• Identity Technologies & Security Controls
• Ability to define and evolve enterprise IAM target-state architectures

about the company

As an Enterprise IAM Solutions Architect , you will work directly with the Global Head of Security Architecture & Engineering, you will bridge strategic business objectives with enterprise-grade identity controls, enforcing Zero Trust architectures across all Identity domains.

about the job

• Define, own, and evolve enterprise-grade IAM target-state architectures, multi-year roadmaps, and capability maturity models.
• Lead build vs. buy decisions, vendor evaluations (RFI/RFP), and architectural trade-offs across identity platforms.
• Enforce Zero Trust controls across four key identity domains:
• Automated lifecycle management, RBAC, entitlement management, and least-privilege governance.
• Administrative control-planes, secrets management, break-glass strategies, and infrastructure access.
• SSO, MFA, adaptive risk-based access control, and continuous authentication.
• High-scale B2C/B2B customer identity flows
• Architect continuous authentication/authorization controls spanning hybrid, AWS, Azure, GCP, and on-premises environments.
• Serve as the trusted technical lead across Cyber Security and Risk (CSR), advising business units and ensuring alignment between high-level designs and technical execution.

skills and experience required

Proven track record leading enterprise IAM target-state architectures and strategic transformation programs (strategic design over daily operations).

Deep conceptual knowledge of protocols (SAML, OAuth 2.0, OIDC, SCIM, LDAP) and platform ecosystems (Okta/Ping/Entra ID, CyberArk/BeyondTrust, SailPoint/Saviynt).

Hands-on experience scaling systems for millions of users while enforcing Zero Trust and continuous risk-evaluation mechanisms.

CISSP, CISM, CIAM, or TOGAF.

Whats and offer

The permanent opportunity for an Enterprise IAM Solutions Architect, will pay a salary range of $ 16,000 - $ 18,000 plus benefits.

Desired Skills and Experience

IAM, CIAM, zero trust, enterprise IAM solution architect, identity technology, security control, OAuth, AWS, Azure, GCP, okta, ping, entraID, cyberark, beyondtrust, sailpoint, saviynt, cissp, cism, ciam,TOGAF, IAM architecture