IAM Software Architect

Overview

Own and evolve the architectural vision of Airbus's IAM Self-Service Platform, guiding the identity ecosystem toward Zero Trust Architecture as part of a leadership squad with the Product Manager, Technical Lead and Techno-Functional BA.

What you'll do

• Own the technical roadmap and target architecture for the IAM Self-Service Platform, ensuring high availability, security-by-design and modern design patterns.
• Lead the architectural shift toward Zero Trust principles, designing continuous authentication, dynamic authorization (ABAC/RBAC/PBAC), least-privilege access and micro-segmentation integration.
• Apply and adopt standard protocols (OIDC/OAuth2, SAML, SCIM, FIDO2) across enterprise web applications, APIs and services to ensure architectural compliance.
• Design scalable integration patterns between the self-service portal (Python/React) and identity systems, governance platforms and hybrid cloud environments.
• Define API-first governance, microservices architecture and secure data access layers for identity workflow engines and automation scripts.
• Establish non-functional requirements including scalability, latency targets, failover resilience and audit logging.
• Establish and mandate core architectural principles, enterprise design patterns and robust application frameworks.
• Lead Architecture Reference Document (ARD) management, translating IAM requirements into network models, Zero Trust security views and modular software architecture.
• Design observability and telemetry strategies (logging, tracing and monitoring) for real-time visibility into identity workflows, system health and security events.
• Partner with the Product Manager/Product Owner to translate business vision and security roadmaps into architecturally sound product epics.
• Work with the Technical Lead to guide engineering teams so implementation adheres to the master architectural design without creating technical debt.
• Collaborate with the Techno-Functional BA to validate technical feasibility, security constraints and boundary conditions for new self-service workflows.
• Collaborate with Enterprise, Cyber Security, Infrastructure, PSL Architects, Data Officers and Quality/Eco-Design Experts to drive architectural reviews.
• Partner with Enterprise, Product and PSL Architects to align platform design with the IAM domain strategy and enterprise architecture principles.
• Serve as the primary representative for the product on the internal Architecture Review Board (ARB) and Cybersecurity committees.
• Conduct Proofs of Concept (PoCs) for emerging identity technologies, passwordless access and identity threat detection and response (ITDR).
• Author and govern Architectural Requirements Dossiers (ARDs), technical standards, engineering specifications and integration patterns.
• Drive proactive threat modeling (e.g., STRIDE) and risk assessments during design to identify and mitigate vulnerabilities before development begins.

What you'll need

• Graduate or postgraduate degree in Computer Science, Information Technology, Cybersecurity or a related field.
• 12+ years of software engineering experience.
• At least 4+ years operating as an Enterprise/Software/Solution Architect in large-scale IAM or enterprise security environments.
• Expertise in microservices, event-driven architecture, API gateway patterns, RESTful APIs and cloud-native designs (Azure/AWS/GCP).
• Identity domain expertise, including familiarity with IGA, PAM or core IAM frameworks.
• Architectural knowledge of protocols: OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM, FIDO2/WebAuthn.
• Architectural knowledge of identity engines: Active Directory, Azure AD / Entra ID, Ping Identity, Okta or SailPoint.
• Architectural knowledge of Zero Trust Architecture (NIST SP 800-207), Identity Governance & Administration (IGA), Privileged Access Management (PAM) and RBAC/ABAC models.
• Strong architectural knowledge of Python, React, SQL Server and PowerShell/automation workflows.
• Exceptional communication and stakeholder management skills in a multi-cultural, international environment (India and Europe).

Nice to have

• CISSP, CCSP, TOGAF, Microsoft Certified: Cybersecurity Architect Expert, or AWS/Azure Solutions Architect Professional, Archimate.

Details

• Location: Bangalore, India.
• Department: Digital Infrastructure & Platforms (IAM).
• Employment type: Permanent.
• Experience level: Professional.
• Job family: Digital.
• Airbus supports flexible working arrangements wherever possible.