Manager IAM Architecture

Overview

The IAM Security Assurance Architect serves as the IAM security review authority within technology delivery and change processes, reviewing new applications, platforms, cloud services and technology changes against baseline IAM security requirements, and builds automation to provide continuous assurance of identity and access controls.

What you'll do

• Serve as the IAM security review authority for new applications, technology platforms, cloud workloads and infrastructure changes.
• Review designs and change requests through project lifecycle and design checkpoint governance processes.
• Assess and approve applications against baseline IAM security requirements, including authentication standards, MFA requirements, privileged access controls, role-based access models, Segregation of Duties requirements, identity lifecycle (joiner / mover / leaver), account provisioning and deprovisioning controls, service account and non-human identity management standards, and federation and Single Sign-On requirements.
• Review application access models, role structures, entitlement designs and access matrices.
• Classify application criticality and confirm IAM onboarding requirements are met.
• Identify security risks, control gaps and remediation actions, and confirm closure before deployment.
• Provide clear, documented review decisions and risk-based approvals to delivery teams.
• Design and build automation that continuously validates whether applications and platforms meet baseline IAM security requirements.
• Automate evidence collection and control checks to reduce manual review effort and provide always-on assurance.
• Establish automated, continuous monitoring for orphaned accounts, stale and dormant identities, excessive or unused privileges, toxic access combinations, service account and non-human identity risks, privileged account misuse, and deviations from approved access baselines.
• Integrate assurance checks with IAM platforms and security tooling (e.g., SailPoint, Entra ID, Active Directory, CyberArk, cloud CIEM).
• Define Key Risk Indicators (KRIs), Key Performance Indicators (KPIs) and IAM assurance health metrics.
• Build and maintain dashboards that surface control effectiveness and non-compliance for remediation.
• Drive an automate-first approach to control validation, minimising point-in-time manual checks.
• Track and drive closure of IAM security review findings and assurance exceptions.
• Review IAM-related risk assessments, exceptions and remediation plans.
• Support internal and external audits with review evidence and assurance data.
• Report on review throughput, control coverage and residual risk to IAM leadership.
• Partner with application, engineering, cloud and change teams to embed security-by-design in delivery.
• Advise project teams on how to meet baseline IAM requirements early in the lifecycle.
• Collaborate with Security, Risk and Audit functions on assurance outcomes and control gaps.

What you'll need

• Bachelor's degree in Computer Science, Information Security, Engineering or a related field (or equivalent practical experience).
• 8+ years of overall experience in information security or IT, with 5+ years focused on Identity & Access Management.
• 3+ years performing IAM / security design reviews or control assurance for applications and platforms.
• Demonstrated hands-on experience building automation for control validation, evidence collection or continuous assurance.
• Experience performing IAM or security design reviews for applications and platforms.
• Experience assessing applications against baseline IAM / access control requirements.
• Experience building automation for control validation, evidence collection, or continuous assurance.
• Experience integrating assurance checks with IAM and security tooling.
• Experience tracking and driving remediation of identity and access control gaps.
• Experience engaging with delivery, engineering, risk and audit stakeholders.
• Technical expertise in Identity Governance & Administration (IGA) – SailPoint ISC / IdentityIQ.
• Technical expertise in Microsoft Entra ID and Active Directory.
• Technical expertise in CyberArk Privileged Access Management.
• Technical expertise in authentication & federation protocols (OIDC, OAuth 2.0, SAML).
• Technical expertise in cloud identity security and CIEM (Azure, AWS, GCP).
• Technical expertise in service account and non-human identity management.
• Technical expertise in IAM automation, scripting and orchestration (e.g., Power Automate, Python, APIs).
• Technical expertise in security analytics, monitoring and continuous assurance tooling.
• Capability in baseline IAM security requirements and control testing, security design review and change assessment processes, secure-by-design and baseline requirement validation, automated control testing and evidence collection, technology risk assessment and remediation tracking, metrics and KRI/KPI definition and assurance reporting, and audit support and control effectiveness validation.

Nice to have

• One or more of the following certifications: CISSP, CISM, CIAM / identity certifications (e.g., SailPoint, Okta, Microsoft Entra / Identity & Access Administrator SC-300), CyberArk Defender / Sentry, cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft SC-100 / AZ-500, GCP Professional Cloud Security Engineer), CCSP, CISA.

Details

• Location: Bangalore.