IdentITy and Access Management Architect

Good co India; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Good co India is seeking an experienced IAM Architect to design and implement enterprise-wide identity and access management solutions. You will shape governance, lifecycle workflows, and secure integration across on-premises and cloud systems.

The role requires hands-on expertise with leading IAM platforms, strong governance knowledge, and the ability to lead cross-functional teams through complex deployments while maintaining security standards.

Qualifications

• 5–10 years of IAM experience including enterprise IAM solution design and implementation.
• Strong expertise in at least one major IAM platform (e.g., SailPoint, Saviynt, CyberArk, Okta, or Entra).
• Hands-on IAM architecture, identity lifecycle management, access governance, SSO, MFA, federation and PAM.
• Experience with SAML, OAuth 2.0, OIDC, SCIM, LDAP and REST APIs.
• Knowledge of RBAC, ABAC, Zero Trust, least privilege, SoD and access certifications.
• Familiarity with scripting (PowerShell, Python, Java) and REST API integrations.
• Cloud IAM across AWS, Azure, GCP; security/compliance frameworks.
• Certifications such as CISSP, CCSP, SailPoint, Saviynt or CyberArk preferred.

Responsibilities

• Design and implement enterprise IAM architecture, solutions and security standards.
• Develop IAM strategies covering IGA, PAM, SSO and MFA.
• Architect and implement IAM solutions using SailPoint, Saviynt, CyberArk, Entra ID and Okta.
• Design identity lifecycle processes: provisioning, deprovisioning, access requests, approvals and reviews.
• Integrate enterprise apps, cloud directories using SAML, OAuth, OIDC, SCIM, LDAP, REST APIs.
• Define RBAC, ABAC, SoD and least-privilege policies.
• Align IAM with Zero Trust and regulatory requirements.
• Lead IAM assessments, architecture reviews, solution design, documentation and PoCs.
• Collaborate with security, infrastructure, development, cloud and compliance teams.
• Troubleshoot IAM integration issues and oversee production support.
• Mentor IAM engineers and communicate risks and recommendations.

Skills

IAM architecture

Identity governance

Access management

Zero Trust

RBAC/ABAC/SoD

SSO/MFA

SAML/OIDC/OAuth

REST API integrations

Stakeholder management

Automation scripting

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

SailPoint IdentityIQ/IdentityNow

Saviynt

CyberArk

Okta

Microsoft Entra ID

Job description

Role & responsibilities

• Design and implement enterprise-wide Identity and Access Management (IAM) architecture, solutions and security standards.
• Develop IAM strategies covering Identity Governance and Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO) and Multi-Factor Authentication (MFA).
• Architect and implement IAM solutions using platforms such as SailPoint, Saviynt, CyberArk, Microsoft Entra ID and Okta.
• Design identity lifecycle management processes, including user provisioning, deprovisioning, access requests, approvals and periodic access reviews.
• Integrate enterprise applications, cloud platforms and directories using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP and REST APIs.
• Define role-based access control (RBAC), attribute-based access control (ABAC), segregation of duties (SoD) and least-privilege access policies.
• Ensure IAM solutions align with Zero Trust principles, enterprise security policies and regulatory requirements.
• Lead IAM assessments, architecture reviews, solution design, technical documentation and proof-of-concept implementations.
• Collaborate with security, infrastructure, application development, cloud and compliance teams to deliver secure identity solutions.
• Troubleshoot complex IAM integration issues, optimize identity workflows and oversee technical implementation and production support.
• Mentor IAM engineers, establish architectural best practices and communicate technical risks and recommendations to stakeholders.

Preferred candidate profile

• Bachelors degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• 5 to 10 years of experience in IAM, identity governance, access management or cybersecurity, including enterprise IAM solution design and implementation.
• Strong expertise in at least one major IAM platform, such as SailPoint IdentityIQ/IdentityNow, Saviynt, CyberArk, Okta or Microsoft Entra ID.
• Hands‑on experience with IAM architecture, identity lifecycle management, access governance, SSO, MFA, federation and privileged access management.
• Strong understanding of identity protocols, including SAML, OAuth 2.0, OIDC, SCIM, LDAP and Active Directory.
• Experience integrating enterprise applications, directories, cloud environments and HR systems with IAM platforms.
• Knowledge of RBAC, ABAC, Zero Trust, least-privilege principles, SoD and access certification processes.
• Familiarity with scripting and automation using PowerShell, Python, Java or BeanShell, along with REST API integrations.
• Understanding of cloud IAM across AWS, Microsoft Azure and Google Cloud Platform, along with relevant security and compliance frameworks.
• Relevant certifications such as CISSP, CCSP, Microsoft SC-300, SailPoint, Saviynt or CyberArk are preferred.
• Excellent analytical, problem-solving, communication and stakeholder-management skills, with the ability to lead technical teams and translate business requirements into scalable IAM architectures.