IAM Architect

Kerry Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Kerry Consulting is seeking an experienced IAM Solution Architect to build and drive enterprise IAM strategy and target architecture in Singapore. You will translate business and security needs into scalable IAM solutions covering IGA, PAM, SSO, MFA, Entra ID, AD and non-human identities.

The role involves owning end-to-end IAM architecture, shaping solution designs, governing implementations, and partnering with security, cloud and engineering teams to ensure robust identity systems.

Qualifications

• 7–15 years in IAM/security architecture and delivering complex IAM solutions.
• Experience across IGA, PAM, authentication and directory services.
• Knowledge of standards/protocols: SAML, OAuth/OIDC, SCIM, LDAP, Kerberos.

Responsibilities

• Own and evolve IAM architecture, design principles, standards and reusable patterns.
• Design end-to-end IAM solutions across IGA, PAM, SSO, MFA and federation.
• Develop secure identity solutions for employees, contractors, and machine identities.
• Architect identity lifecycle including joiner-mover-leaver, provisioning, access requests and certifications.
• Design authentication/access solutions across cloud and on-prem environments (Entra ID, AD, SAML, OAuth/OIDC, SCIM).
• Develop PAM and least-privilege architectures (credentials, privileged sessions, JIT, elevation).
• Support IAM requirements within OT and legacy environments.
• Review designs and provide architecture governance during implementation.
• Collaborate with security, infra, cloud, apps and engineering teams to ensure aligned architecture.
• Evaluate IAM technologies and contribute to product selection and implementation.
• Provide technical leadership through design, implementation, testing and transition to operations.

Skills

IAM architecture

Security governance

Stakeholder management

Cloud & on-prem IAM

Tools

SailPoint

Saviynt

BeyondTrust

Delinea

Microsoft Entra ID

Active Directory

SAML / OAuth / OIDC

Job description

A global organisation is looking for an experienced IAM Solution Architect to drive the architecture and design of enterprise identity and access management solutions.

You will help shape the organisation's IAM strategy and target architecture, translating business and security requirements into scalable solutions across Identity Governance (IGA), Privileged Access Management (PAM), Access Management, Active Directory/Entra ID and non-human identities.

Key Responsibilities

• Own and evolve IAM architecture, design principles, standards and reusable patterns.
• Design end-to-end solutions across IGA, PAM, SSO, MFA, federation, directory services and privileged access.
• Develop secure identity solutions for employees, contractors, applications, service accounts and other machine/non-human identities.
• Architect identity lifecycle capabilities including joiner-mover-leaver, provisioning, access requests, certifications and role/entitlement management.
• Design authentication and access solutions across cloud and on-premise environments using technologies such as Entra ID, Active Directory, SAML, OAuth/OIDC and SCIM.
• Develop PAM and least-privilege architectures covering credential management, privileged sessions, JIT access and privileged elevation.
• Support IAM requirements within operational technology and other complex or legacy technology environments.
• Review solution designs and provide architecture governance throughout implementation.
• Partner with security, infrastructure, cloud, application and engineering teams to ensure solutions are implemented according to agreed architecture.
• Evaluate IAM technologies and vendors and provide technical input into product selection and implementation.
• Provide technical leadership through design, implementation, testing and transition into operations.

Requirements:

• Approximately 7-15 years of IAM / security architecture experience, with experience designing and delivering complex IAM solutions.
• Strong knowledge across several IAM domains, including IGA, PAM, authentication, federation and directory services.
• Experience with IAM platforms such as SailPoint, Saviynt, BeyondTrust, Delinea or similar technologies.
• Strong understanding of Microsoft Entra ID and Active Directory.
• Knowledge of identity standards and protocols including SAML, OAuth/OIDC, SCIM, LDAP and Kerberos.
• Experience integrating IAM solutions across cloud, SaaS and on-premise environments.
• Ability to translate complex business and security requirements into practical architecture and technical designs.
• Strong stakeholder management skills with the ability to work across global technology and business teams.
• Relevant certifications such as CISSP, CISM, TOGAF or cloud/IAM certifications would be advantageous.