IAM Architect

Tata Consultancy Services; Alpharetta (GA); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Discretionary incentive

Comprehensive medical coverage

Family support leaves

Insurance options

Commuter benefits

Certification & training reimbursement

Vacation & holidays

401K & financial planning

Job summary

Tata Consultancy Services is seeking an IAM Architect to design, implement, and govern identity and access management across enterprise systems. You will bridge security, IT architecture, and business needs to enforce governance and compliance.

Responsibilities include designing IAM solutions, implementing platforms like Azure AD, Okta, SailPoint, CyberArk, and Ping Identity, and coordinating with security, IT operations, and application teams. Strong collaboration and leadership are essential.

Qualifications

• Bachelor of Computer Science is required.
• Experience with IAM platforms and governance is expected.

Responsibilities

• Design and develop enterprise IAM architecture aligned with security and business goals.
• Define identity lifecycle management processes (joiner, mover, leaver).
• Architect solutions for authentication (SSO, MFA, passwordless) and authorization (RBAC, ABAC).
• Implement and integrate IAM systems with cloud and on‑prem environments (AWS, Azure, GCP, AD/LDAP).
• Establish Identity Governance, risk/compliance controls, and audit logging.

Skills

IAM Architecture

Security design

Stakeholder communication

Education

Bachelor's Degree in Computer Science

Tools

Azure AD Entra ID

Okta

SailPoint

CyberArk

Ping Identity

AWS

Azure

GCP

Active Directory

LDAP

SAP

Salesforce

Workday

Job description

Job Description

Role Overview

An IAM Architect is responsible for designing, implementing, and governing identity and access management solutions that ensure secure access to enterprise systems, applications, and data. This role bridges business requirements, cybersecurity, and IT architecture to enforce robust identity governance and compliance.

Key Responsibilities

• Architecture & Design
• Design and develop enterprise IAM architecture aligned with security and business goals
• Define identity lifecycle management (joiner, mover, leaver processes)
• Architect solutions for:
• Authentication (SSO, MFA, passwordless)
• Authorization (RBAC, ABAC)
• Federation (SAML, OAuth, OIDC)
• Develop zero trust security models for identity
• Implementation & Integration
• Lead implementation of IAM platforms such as:
• Azure AD / Entra ID
• Okta
• SailPoint
• CyberArk
• Ping Identity
• Integrate IAM systems with:
• Cloud platforms (AWS, Azure, GCP)
• On-prem systems (Active Directory, LDAP)
• Enterprise applications (SAP, Salesforce, Workday)
• Enable API security and identity federation
• Governance, Risk & Compliance
• Establish Identity Governance & Administration (IGA) frameworks
• Design role models and access certification campaigns
• Ensure compliance with standards:
• SOX, GDPR, HIPAA, ISO 27001
• Implement audit logging, monitoring, and reporting
• Security & Risk Management
• Enforce least privilege & segregation of duties (SoD)
• Design solutions to mitigate identity-based threats
• Integrate IAM with:
• SIEM (e.g., Splunk, Sentinel)
• PAM (Privileged Access Management)
• Conduct risk assessments and threat modeling
• Strategy & Roadmap
• Define IAM strategy and technology roadmap
• Evaluate and recommend IAM tools and platforms
• Drive cloud identity transformation initiatives
• Promote adoption of passwordless and Zero Trust frameworks
• Stakeholder Collaboration
• Work with:
• Security teams
• IT operations
• Application owners
• Compliance and audit teams
• Provide technical leadership and mentorship to IAM engineers
• Communicate complex IAM concepts to non-technical stakeholders

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, Colleg e Fund, Student Loan Refinancing.

Salary Range: $120,000- 130,000 a year

Qualifications:

BACHELOR OF COMPUTER SCIENCE