Domain Architect - IAM Operations

Sapsf; United States; In loco; USD 140.000 - 210.000; Tempo pieno

Descrizione del lavoro

Sapsf is seeking a Domain Architect - IAM Operations in the United States to lead enterprise Identity Governance and SSO programs. The role requires SME-level expertise in IGA, Access Management, and federation technologies to design modern architectures and governance models.

Responsibilities include leading workshops, defining roadmaps, and coordinating across security, infrastructure, and app teams to deliver scalable IAM solutions with Zero Trust focus.

Competenze

• 10+ years of experience designing, architecting, implementing, and leading enterprise IAM solutions.
• Experience delivering large-scale IAM transformations across cloud, on-premises, and hybrid environments.

Mansioni

• Serve as SME for Identity Governance, Access Management, Authentication, and Federation technologies.
• Define enterprise IAM strategy, target architecture, operating models, and governance frameworks.
• Lead customer workshops, architecture assessments, discovery sessions, and solution design engagements.
• Collaborate with security, infrastructure, application, cloud, and business teams to deliver scalable IAM solutions.
• Assess existing IAM environments and define modernization roadmaps focusing on automation, compliance, lifecycle management, and Zero Trust.
• Provide architectural governance, solution reviews, and implementation oversight for IGA and SSO initiatives.

Conoscenze

IGA design

SSO architecture

IAM strategy

Zero Trust

RBAC

ABAC

identity lifecycle

provisioning

SoD controls

REST APIs

Formazione

University degree in IT or IT Security

Strumenti

Saviynt

Microsoft Entra ID Governance

Okta

Ping Identity

ForgeRock

SAML

OAuth 2.0

OpenID Connect

Descrizione del lavoro

Career Opportunities: Domain Architect - IAM Operations (171180)

Requisition ID171180-Posted09/25/2026

• 10+ years of experience designing, architecting, implementing, and leading enterprise Identity Governance & Administration (IGA) and Single Sign-On (SSO) solutions.
• Proven experience delivering large-scale IAM transformations across cloud, on-premises, and hybrid environments.

General Description

• Serve as the Subject Matter Expert (SME) for Identity Governance, Access Management, Authentication, and Federation technologies.
• Define enterprise IAM strategy, target architecture, operating models, and governance frameworks aligned with business and security objectives.
• Lead customer workshops, architecture assessments, discovery sessions, and solution design engagements.
• Collaborate with security, infrastructure, application, cloud, and business teams to deliver scalable identity governance and access management solutions.
• Assess existing IAM environments and define modernization roadmaps focusing on automation, compliance, identity lifecycle management, and Zero Trust principles.
• Provide architectural governance, solution reviews, technical leadership, and implementation oversight for IGA and SSO initiatives.

Key Responsibilities

General Description

• Serve as the Subject Matter Expert (SME) for Identity Governance, Access Management, Authentication, and Federation technologies.
• Define enterprise IAM strategy, target architecture, operating models, and governance frameworks aligned with business and security objectives.
• Lead customer workshops, architecture assessments, discovery sessions, and solution design engagements.
• Collaborate with security, infrastructure, application, cloud, and business teams to deliver scalable identity governance and access management solutions.
• Assess existing IAM environments and define modernization roadmaps focusing on automation, compliance, identity lifecycle management, and Zero Trust principles.
• Provide architectural governance, solution reviews, technical leadership, and implementation oversight for IGA and SSO initiatives.

Technical Requirements

Skill Requirements

Technical Requirements

• Extensive experience designing and deploying Identity Governance solutions using Saviynt, Microsoft Entra ID Governance, or equivalent platforms.
• Strong expertise in identity lifecycle management including provisioning, de-provisioning, birthright access, role management, certifications, access requests, and SoD controls.
• Experience designing Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), governance groups, and entitlement management frameworks.
• Deep understanding of SSO, authentication, authorization, federation, and identity protocols such as SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, Kerberos, LDAP, and WS-Federation.
• Hands-on experience with Microsoft Entra ID, Okta, Ping Identity, ForgeRock, or similar IAM platforms.
• Design High-Level Design (HLD) and Low-Level Design (LLD) documents for IAM solutions supporting cloud, on-premises, and hybrid architectures.
• Lead application onboarding strategies for SaaS, custom, legacy, cloud, and enterprise applications.
• Experience integrating IAM platforms with Active Directory, Entra ID, HR systems, ServiceNow, MFA solutions, SIEM tools, and enterprise applications.
• Expertise in governance reporting, compliance management, certification campaigns, access reviews, and audit remediation activities.
• Strong understanding of Zero Trust Architecture and modern identity-centric security models.
• Experience developing integration solutions using REST APIs, web services, SCIM, PowerShell, java, or other automation technologies.
• Knowledge of regulatory and compliance frameworks including SOX, GDPR, HIPAA, PCI-DSS, ISO 27001, NIST, and CIS Controls.
• Ability to support RFPs, solution proposals, architecture reviews, and customer-facing technical discussions.

Soft Skills

• Excellent Verbal and written communication skills in English.
• Ability to present solutions to clients in person and remotely if needed.
• Good documentation skills that will enable creation of design documents for the technical solutions proposed.
• Excellent problem-solving skills.
• Good collaboration skills in working with virtual and distributed teams.

Certifications

Good to have relevant IAM certifications such as:

• Saviynt L100, L200 trainings
• Microsoft Azure Security Engineer

Educational Qualifications

• University degree in IT or/and IT Security