Iam Architect

Tata Consultancy Services; Alpharetta (GA); Presencial; USD 120.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Comprehensive Medical Coverage

401K Plan

Certification & Training Reimbursement

Time Off & Holidays

Descripción de la vacante

Tata Consultancy Services Limited in Alpharetta, GA seeks an IAM Architect to design, implement, and govern enterprise identity solutions. You will bridge business requirements with cybersecurity and IT architecture to enforce identity governance and compliance.

Responsibilities include architecture design, lifecycle management, platform implementation (Azure AD, Okta, SailPoint, CyberArk), cloud/on-prem integration, and risk-based controls.

Formación

• Deep knowledge of SSO, MFA, Federation protocols (SAML, OAuth 2.0, OpenID Connect).
• Identity lifecycle management.
• Hands-on experience with IAM tools: Azure AD / Entra ID, Okta, SailPoint, Ping, CyberArk.
• Strong understanding of Active Directory / LDAP; Cloud security (AWS IAM, Azure RBAC); API security.
• Scripting/programming: PowerShell, Python, Java, or similar.

Responsabilidades

• Design enterprise IAM architecture aligned with security and business goals.
• Define identity lifecycle management processes (joiner, mover, leaver).
• Lead implementation of IAM platforms and integrate with cloud/on-prem systems.
• Establish IGA frameworks, role models, and access certification campaigns.
• Enforce least privilege, SoD, and risk modelling; ensure audit logging and monitoring.

Conocimientos

SSO

MFA

Federation protocols

Identity lifecycle management

Azure AD / Entra ID

Okta

SailPoint

Ping Identity

CyberArk

Active Directory / LDAP

Cloud security

API security

PowerShell

Python

Java

Educación

Bachelor of Computer Science

Herramientas

Azure AD / Entra ID

Okta

SailPoint

Ping Identity

CyberArk

Descripción del empleo

Must Have Technical/Functional Skills

An IAM Architect is responsible for designing, implementing, and governing identity and access management solutions that ensure secure access to enterprise systems, applications, and data. This role bridges business requirements, cybersecurity, and IT architecture to enforce robust identity governance and compliance.

1. Architecture & Design

• Design and develop enterprise IAM architecture aligned with security and business goals
• Define identity lifecycle management (joiner, mover, leaver processes)
• Architect solutions for:
  • Authentication (SSO, MFA, passwordless)
  • Authorization (RBAC, ABAC)
  • Federation (SAML, OAuth, OIDC)
• Develop zero trust security models for identity

2. Implementation & Integration

• Lead implementation of IAM platforms such as:
  • Azure AD / Entra ID
  • Okta
  • SailPoint
  • CyberArk
  • Ping Identity
• Integrate IAM systems with:
  • Cloud platforms (AWS, Azure, GCP)
  • On-prem systems (Active Directory, LDAP)
  • Enterprise applications (SAP, Salesforce, Workday)
• Enable API security and identity federation

3. Governance, Risk & Compliance

• Establish Identity Governance & Administration (IGA) frameworks
• Design role models and access certification campaigns
• Ensure compliance with standards:
  • SOX, GDPR, HIPAA, ISO 27001
• Implement audit logging, monitoring, and reporting

4. Security & Risk Management

• Enforce least privilege & segregation of duties (SoD)
• Design solutions to mitigate identity-based threats
• Integrate IAM with:
  • SIEM (e.g., Splunk, Sentinel)
  • PAM (Privileged Access Management)
• Conduct risk assessments and threat modeling

5. Strategy & Roadmap

• Define IAM strategy and technology roadmap
• Evaluate and recommend IAM tools and platforms
• Drive cloud identity transformation initiatives
• Promote adoption of passwordless and Zero Trust frameworks

6. Stakeholder Collaboration

• Work with:
  • Security teams
  • IT operations
  • Application owners
  • Compliance and audit teams
• Provide technical leadership and mentorship to IAM engineers
• Communicate complex IAM concepts to non-technical stakeholders

Required Skills & Qualifications Technical Skills

• Deep knowledge of:
  • SSO, MFA, Federation protocols (SAML, OAuth 2.0, OpenID Connect)
  • Identity lifecycle management
• Hands-on experience with IAM tools:
  • Azure AD / Entra ID, Okta, SailPoint, Ping, CyberArk
• Strong understanding of:
  • Active Directory / LDAP
  • Cloud security (AWS IAM, Azure RBAC)
  • API security
• Scripting/programming:
  • PowerShell, Python, Java, or similar

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
• Salary Range: $120,000 - $130,000 a year

Location

Alpharetta, GA

Function

TECHNOLOGY

Role

Technical Architect

ID

431564

Skills

IAM

Salary Range

$120,000 - $130,000

Desired Candidate Profile

Qualifications

BACHELOR OF COMPUTER SCIENCE