IAM Architect

Kerry Consulting; Singapore; On-site; SGD 140,000 - 210,000; Full time

Job summary

Kerry Consulting is seeking an experienced IAM Solution Architect in Singapore to drive architecture of enterprise IAM solutions across IGA, PAM, SSO, MFA, and Entra ID. You will translate business and security requirements into scalable designs, collaborating with security, cloud, and engineering teams to deliver secure identity platforms for employees, contractors, and machine identities.

Responsibilities include governance, technology evaluation, and overseeing implementation from design

Qualifications

• Experience designing and delivering complex IAM solutions.
• Strong knowledge across IAM domains: IGA, PAM, authentication, federation, directory services.
• Experience with IAM platforms such as SailPoint, Saviynt, BeyondTrust, Delinea or similar.
• Strong understanding of Microsoft Entra ID and Active Directory.
• Knowledge of SAML, OAuth/OIDC, SCIM, LDAP, Kerberos.

Responsibilities

• Own and evolve IAM architecture, design principles, standards and reusable patterns.
• Design end-to-end solutions across IGA, PAM, SSO, MFA, federation, directory services and privileged access.
• Develop secure identity solutions for employees, contractors, applications, service accounts and other machine identities.
• Architect identity lifecycle capabilities including joiner-mover-leaver, provisioning, access requests, certifications and role/entitlement management.
• Design authentication and access solutions across cloud and on-premise environments using Entra ID, AD, SAML, OAuth/OIDC, SCIM.
• Develop PAM and least-privilege architectures covering credential management, privileged sessions, JIT access and privileged elevation.
• Support IAM requirements within operational technology and other complex or legacy environments.
• Review solution designs and provide architecture governance throughout implementation.
• Partner with security, infrastructure, cloud, application and engineering teams to ensure solutions are implemented according to agreed architecture.
• Evaluate IAM technologies and vendors and provide input into product selection and implementation.
• Provide technical leadership through design, implementation, testing and transition into operations.

Job description

A global organisation is looking for an experienced IAM Solution Architect to drive the architecture and design of enterprise identity and access management solutions.

You will help shape the organisation's IAM strategy and target architecture, translating business and security requirements into scalable solutions across Identity Governance (IGA), Privileged Access Management (PAM), Access Management, Active Directory/Entra ID and non-human identities.

Key Responsibilities

• Own and evolve IAM architecture, design principles, standards and reusable patterns.
• Design end-to-end solutions across IGA, PAM, SSO, MFA, federation, directory services and privileged access.
• Develop secure identity solutions for employees, contractors, applications, service accounts and other machine/non-human identities.
• Architect identity lifecycle capabilities including joiner-mover-leaver, provisioning, access requests, certifications and role/entitlement management.
• Design authentication and access solutions across cloud and on-premise environments using technologies such as Entra ID, Active Directory, SAML, OAuth/OIDC and SCIM.
• Develop PAM and least-privilege architectures covering credential management, privileged sessions, JIT access and privileged elevation.
• Support IAM requirements within operational technology and other complex or legacy technology environments.
• Review solution designs and provide architecture governance throughout implementation.
• Partner with security, infrastructure, cloud, application and engineering teams to ensure solutions are implemented according to agreed architecture.
• Evaluate IAM technologies and vendors and provide technical input into product selection and implementation.
• Provide technical leadership through design, implementation, testing and transition into operations.

Requirements:

• Approximately 7-15 years of IAM / security architecture experience, with experience designing and delivering complex IAM solutions.
• Strong knowledge across several IAM domains, including IGA, PAM, authentication, federation and directory services.
• Experience with IAM platforms such as SailPoint, Saviynt, BeyondTrust, Delinea or similar technologies.
• Strong understanding of Microsoft Entra ID and Active Directory.
• Knowledge of identity standards and protocols including SAML, OAuth/OIDC, SCIM, LDAP and Kerberos.
• Experience integrating IAM solutions across cloud, SaaS and on-premise environments.
• Ability to translate complex business and security requirements into practical architecture and technical designs.
• Strong stakeholder management skills with the ability to work across global technology and business teams.
• Relevant certifications such as CISSP, CISM, TOGAF or cloud/IAM certifications would be advantageous.