Cybersecurity IGA & SSO Architect

Raas Infotek LTD; Jersey City (NJ); On-site; USD 150,000 - 210,000; Full time

Job summary

Raas Infotek LTD in Jersey City, NJ seeks an experienced Cybersecurity IGA & SSO Architect to drive enterprise IAM programs. You will act as SME for Identity Governance, Access Management, Authentication, and Federation, defining target architectures and governance models across cloud, on-premises and hybrid environments.

You will lead workshops, assessments, and solution designs, collaborate with security, IT, cloud and business teams, and guide modernization roadmaps toward automation,

Qualifications

• 10+ years of experience designing, architecting, implementing IAM/IGA and SSO solutions.
• Experience delivering large IAM transformations across cloud, on-premises and hybrid environments.
• Proven ability to define enterprise IAM strategy, architecture and governance.
• Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect and SCIM protocols.

Responsibilities

• Serve as SME for Identity Governance, Access Management, Authentication and Federation.
• Define enterprise IAM strategy, target architecture, operating models and governance.
• Lead customer workshops, architecture assessments and solution design engagements.
• Collaborate with security, infrastructure, applications, cloud and business teams.
• Provide architectural governance and oversight for IGA and SSO initiatives.

Skills

Excellent verbal and written English

Client-facing presentation

Documentation skills

Problem-solving

Collaboration in distributed teams

IAM SME

Leadership

Education

University degree in IT or IT Security

Tools

Saviynt

Microsoft Entra ID Governance

Okta

Ping Identity

ForgeRock

Job description

Role :- Cybersecurity IGA & SSO Architect

Location :- Jersey City, NJ(Onsite)

Years of Experience

• 10+ years of experience designing, architecting, implementing, and leading enterprise Identity Governance & Administration (IGA) and Single Sign-On (SSO) solutions.
• Proven experience delivering large-scale IAM transformations across cloud, on-premises, and hybrid environments.

General Description

• Serve as the Subject Matter Expert (SME) for Identity Governance, Access Management, Authentication, and Federation technologies.
• Define enterprise IAM strategy, target architecture, operating models, and governance frameworks aligned with business and security objectives.
• Lead customer workshops, architecture assessments, discovery sessions, and solution design engagements.
• Collaborate with security, infrastructure, application, cloud, and business teams to deliver scalable identity governance and access management solutions.
• Assess existing IAM environments and define modernization roadmaps focusing on automation, compliance, identity lifecycle management, and Zero Trust principles.
• Provide architectural governance, solution reviews, technical leadership, and implementation oversight for IGA and SSO initiatives.

Technical Requirements

• Extensive experience designing and deploying Identity Governance solutions using Saviynt, Microsoft Entra ID Governance, or equivalent platforms.
• Strong expertise in identity lifecycle management including provisioning, de-provisioning, birthright access, role management, certifications, access requests, and SoD controls.
• Experience designing Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), governance groups, and entitlement management frameworks.
• Deep understanding of SSO, authentication, authorization, federation, and identity protocols such as SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, Kerberos, LDAP, and WS-Federation.
• Hands-on experience with Microsoft Entra ID, Okta, Ping Identity, ForgeRock, or similar IAM platforms.
• Design High-Level Design (HLD) and Low-Level Design (LLD) documents for IAM solutions supporting cloud, on-premises, and hybrid architectures.
• Lead application onboarding strategies for SaaS, custom, legacy, cloud, and enterprise applications.
• Experience integrating IAM platforms with Active Directory, Entra ID, HR systems, ServiceNow, MFA solutions, SIEM tools, and enterprise applications.
• Expertise in governance reporting, compliance management, certification campaigns, access reviews, and audit remediation activities.
• Strong understanding of Zero Trust Architecture and modern identity-centric security models.
• Experience developing integration solutions using REST APIs, web services, SCIM, PowerShell, java, or other automation technologies.
• Knowledge of regulatory and compliance frameworks including SOX, GDPR, HIPAA, PCI-DSS, ISO 27001, NIST, and CIS Controls.
• Ability to support RFPs, solution proposals, architecture reviews, and customer-facing technical discussions.

Soft Skills

• Excellent Verbal and written communication skills in English.
• Ability to present solutions to clients in person and remotely if needed.
• Good documentation skills that will enable creation of design documents for the technical solutions proposed.
• Excellent problem-solving skills.
• Good collaboration skills in working with virtual and distributed teams.

Certifications

• Good to have relevant IAM certifications such as:
• Saviynt L100, L200 trainings
• Microsoft Azure Security Engineer
• Educational Qualifications
• University degree in IT or/and IT Security