IAM/PAM Architect

Tata Consultancy Services; New York (NY); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Medical Coverage

Parental Leaves

Identity Theft Protection

Certification & Training Reimbursement

401K Plan

Job summary

Tata Consultancy Services in the United States is seeking an experienced Enterprise IAM/PAM architect to define strategy and reference architecture for modern identity platforms.

You will design SSO, MFA, RBAC/ABAC, and identity lifecycle solutions, and lead PAM architecture across cloud, on‑prem, and hybrid environments with governance controls and credentials management.

Qualifications

• Define the enterprise IAM/PAM strategy and roadmap.

Responsibilities

• Define the enterprise IAM/PAM strategy, reference architecture, standards, and roadmap.
• Design SSO, MFA, federation, RBAC, ABAC, and identity lifecycle solutions.
• Lead PAM architecture covering privileged account discovery, vaulting, rotation, and Just-in-Time access.
• Integrate identity platforms across cloud, SaaS, and on-premises environments.
• Design identity governance, access certification, role management, and segregation-of-duties controls.
• Develop controls for service accounts, secrets, machine identities, and other Non-Human Identities.
• Lead architecture reviews, product evaluations, proofs of concept, and design approvals.
• Conduct client workshops and support opportunity identification and IAM/PAM solution shaping.

Skills

Enterprise IAM

PAM architecture

SSO

MFA

RBAC

ABAC

OAuth 2.0

OIDC

SAML

Identity governance

Joiner-Mover-Leaver

CyberArk

ForgeRock

SailPoint

Entra ID

Non-Human identities

Education

Bachelor of Computer Science

Tools

CyberArk

BeyondTrust

Delinea

ForgeRock AM/IDM/DS

SailPoint or Saviynt

Microsoft Entra ID

Job description

Job Description

• Enterprise IAM and PAM architecture and strategy
• SSO, MFA, RBAC, ABAC, and identity federation
• OAuth 2.0, OpenID Connect, SAML, REST APIs, LDAP
• Identity Governance and Administration
• Joiner-Mover-Leaver lifecycle and access certification
• Privileged account discovery, onboarding, credential rotation, and session management
• CyberArk, with exposure to BeyondTrust or Delinea preferred
• ForgeRock AM, IDM, and DS, or comparable access-management platforms
• SailPoint or Saviynt for identity governance
• Active Directory and Microsoft Entra ID
• Secrets management and Non-Human Identity governance
• Cloud and workload identity across hybrid environments
• Financial services or regulated-industry experience

Must Have Technical/Functional Skills

• Enterprise IAM and PAM architecture and strategy
• SSO, MFA, RBAC, ABAC, and identity federation
• OAuth 2.0, OpenID Connect, SAML, REST APIs, LDAP
• Identity Governance and Administration
• Joiner-Mover-Leaver lifecycle and access certification
• Privileged account discovery, onboarding, credential rotation, and session management
• CyberArk, with exposure to BeyondTrust or Delinea preferred
• ForgeRock AM, IDM, and DS, or comparable access-management platforms
• SailPoint or Saviynt for identity governance
• Active Directory and Microsoft Entra ID
• Secrets management and Non-Human Identity governance
• Cloud and workload identity across hybrid environments
• Financial services or regulated-industry experience

Roles & Responsibilities

• Define the enterprise IAM/PAM strategy, reference architecture, standards, and roadmap.
• Design SSO, MFA, federation, RBAC, ABAC, and identity lifecycle solutions.
• Lead PAM architecture covering privileged account discovery, onboarding, vaulting, rotation, session monitoring, and Just-in-Time access.
• Integrate identity platforms across cloud, SaaS, and on-premises environments.
• Design identity governance, access certification, role management, and segregation-of-duties controls.
• Develop controls for service accounts, secrets, machine identities, and other Non-Human Identities.
• Lead architecture reviews, product evaluations, proofs of concept, and design approvals.
• Conduct client workshops and support opportunity identification and IAM/PAM solution shaping.

Generic Managerial Skills, If any

• Client-facing IAM/PAM advisory
• Architecture and design leadership
• Executive stakeholder communication
• Technical workshop facilitation
• Cross-functional coordination
• Product evaluation and solution development
• Presales and opportunity-shaping experience

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
• Salary Range: $120,000-130,000 a year

Qualifications:

BACHELOR OF COMPUTER SCIENCE