Identity & Access Management (IAM) Architect

Infosys

About The Position

The Infosys Insurance unit delivers digital solutions to the insurance industry, using AI-driven insights and consulting and technology expertise to help clients address complex business problems and accelerate transformation. The role is assigned the job designation of Architecture Consultant 3 and focuses on IAM architecture for insurance clients. The architect gathers client requirements and develops solution architectures that align with business goals and are scalable, reliable, and maintainable. The role includes assessing technologies and platforms, designing integrations, resolving technical challenges across build, deployment, and support, and advising development teams and clients. The architect also identifies risks and optimization opportunities, maintains project knowledge, contributes architectural input to proposals and RFPs, and supports project execution and transition. The role requires hands-on experience with SailPoint IdentityNow and IdentityIQ, CyberArk, and ForgeRock. Preferred experience includes IAM implementation and integration, identity lifecycle and governance capabilities, IAM connectors, relevant development and scripting technologies, IAM protocols, testing, production support, and ITIL and Agile environments. A bachelor's degree or foreign equivalent is required, although three years of progressive specialty experience may substitute for each year of education. The position may require relocation and/or travel to the work or project location. Applicants must be authorized to work in the United States without employer-based visa sponsorship; Infosys cannot provide sponsorship for this role.

Requirements

Hands-on experience with SailPoint IdentityNow and IdentityIQ, including Joiner-Mover-Leaver processes, access certifications, role-based access control (RBAC), segregation of duties (SoD), access requests, and compliance reporting.
Experience with CyberArk, including privileged credential vaulting, session management, secrets management, and privileged account security.
Experience with ForgeRock, including single sign-on (SSO), multi-factor authentication (MFA), identity federation, authentication and authorization, OAuth, and OpenID Connect.
Bachelor’s degree or foreign equivalent from an accredited institution, or three years of progressive experience in the specialty in lieu of each year of education.
Authorization to work in the United States for any employer without employer-based visa sponsorship.
Willingness to relocate and/or travel to the work or project location if required.

Nice To Haves

IAM experience with SailPoint IdentityIQ, IdentityNow, CyberArk PAM, and ForgeRock.
Experience designing, implementing, configuring, supporting, and enhancing SailPoint IIQ/IdentityNow solutions and application integrations.
Experience supporting identity lifecycle management (Joiner/Mover/Leaver), identity governance, automated provisioning, access certifications, and PAM.
Experience leading IAM architecture, requirements gathering, governance, and use-case discussions.
Experience deploying and configuring IAM connectors across Windows and Unix/Linux environments.
Development or scripting experience with Java, BeanShell, JavaScript, Groovy, JSP/Servlets, and Angular.
Experience with XML, SCIM 2.0, SOAP/SPML, web services, and HTML.
Experience developing and executing functional, integration, performance, and automated tests.
Experience troubleshooting IAM platforms, integrations, and production issues while working with clients, partners, and vendors.
Experience working in ITIL and Agile environments.
Troubleshooting experience with SSO, SAML, OAuth, OpenID, ADFS, and AD Connect.
Strong planning, coordination, analytical, and client-facing communication skills.
Experience working in a global delivery environment.

Responsibilities

Create business requirements documents covering functional and non-functional requirements based on workshops and interviews with client stakeholders.
Review, propose, and develop solution architectures that align application design with the proposed framework and are scalable, reliable, and maintainable.
Assess and recommend technologies, tools, and platforms to meet business requirements.
Review technical solutions and develop integration strategies for different technologies and systems to ensure communication and data flow.
Resolve complex technical challenges during build, deployment, and support, while promoting reusable frameworks and artifacts.
Provide specialized guidance to development teams and build collaborative relationships with clients and internal teams to support project execution.
Identify system-landscape risks, monitor system performance, and recommend optimization initiatives aligned with business requirements and long-term objectives.
Establish and maintain a comprehensive knowledge base so important information is recorded and available.
Contribute architectural insights to proposals and RFPs.
Lead IAM architecture, requirements-gathering, governance, and use-case discussions.
Design, implement, configure, support, and enhance SailPoint IIQ and IdentityNow solutions and application integrations.
Support identity lifecycle management, identity governance, automated provisioning, access certifications, and privileged access management.
Deploy and configure IAM connectors across Windows and Unix/Linux environments.
Develop and execute functional, integration, performance, and automated tests.
Troubleshoot IAM platform, integration, and production issues with clients, partners, and vendors.
Mentor others and foster knowledge sharing.