Identity & Access Management (IAM) Architect

Infosys•Houston, IN

About The Position

In the assigned role of Architecture Consultant 3, the IAM Architect creates business requirements documents based on workshops and interviews with client stakeholders, reviews and develops solution architectures, and ensures application designs align with scalable, reliable, and maintainable frameworks. The role evaluates technologies, tools, and platforms; plans integrations across systems; resolves technical challenges during build, deployment, and support; and promotes reusable frameworks and artifacts. The architect provides specialized guidance to development teams, builds productive client and internal relationships, identifies system risks and optimization opportunities, maintains a comprehensive knowledge base, and contributes architectural insights to proposals and RFPs. The position is part of Infosys’s Insurance unit, which delivers digital solutions using advanced AI technologies to help insurance clients address complex business problems, improve operational efficiency, and support growth. The role calls for a strategic, collaborative approach to aligning technology with business goals, supporting project execution and transition, and fostering mentoring and knowledge sharing. The role requires hands-on experience in identity governance and administration (IGA), privileged access management (PAM), and identity and authentication technologies. It also involves IAM architecture and governance, requirements and use-case discussions, solution implementation and support, integrations, testing, and troubleshooting. A bachelor’s degree or foreign equivalent is required, though three years of progressive specialty experience may substitute for each year of education. Relocation and/or travel to the work or project location may be required. Applicants must be authorized to work in the United States without employer-based visa sponsorship; Infosys cannot provide immigration sponsorship for this role now or in the future.

Requirements

Hands-on SailPoint IdentityNow and IdentityIQ experience, including Joiner-Mover-Leaver processes, access certifications, role-based access control (RBAC), segregation of duties (SoD), access requests, and compliance reporting.
CyberArk experience, including privileged credential vaulting, session management, secrets management, and privileged account security.
ForgeRock experience involving single sign-on (SSO), multifactor authentication (MFA), identity federation, authentication and authorization, OAuth, and OpenID Connect.
Bachelor’s degree or foreign equivalent from an accredited institution; three years of progressive experience in the specialty may be substituted for each year of education.
Authorization to work in the United States for any employer without employer-based visa sponsorship; Infosys is unable to provide immigration sponsorship for this role now or in the future.
Willingness to relocate and/or travel to the work or project location if required.

Nice To Haves

Experience designing, implementing, configuring, supporting, and enhancing SailPoint IdentityIQ/IdentityNow solutions and application integrations.
Experience supporting identity lifecycle management, identity governance, automated provisioning, access certifications, and PAM.
Experience leading IAM architecture, requirements gathering, governance, and use-case discussions.
Experience deploying and configuring IAM connectors across Windows and Unix/Linux environments.
Development or scripting experience with Java, BeanShell, JavaScript, Groovy, JSP/Servlets, and Angular.
Experience with XML, SCIM 2.0, SOAP/SPML, Web Services, and HTML.
Experience developing and executing functional, integration, performance, and automated testing.
Experience troubleshooting IAM platforms, integrations, and production issues while working with clients, partners, and vendors.
Experience working in ITIL and Agile environments.
Troubleshooting experience with SSO, SAML, OAuth, OpenID, ADFS, and AD Connect.
Strong planning, coordination, analytical, and client-facing communication skills.
Experience working in a global delivery environment.

Responsibilities

Create business requirements documents covering functional and non-functional requirements based on workshops and interviews with client stakeholders.
Review, propose, and develop solution architectures, ensuring application designs align with scalable, reliable, and maintainable frameworks.
Assess and recommend technologies, tools, and platforms to meet business requirements.
Review technical solutions and develop integration strategies for communication and data flow across technologies and systems.
Resolve complex technical challenges during build, deployment, and support, while promoting reusable frameworks and artifacts.
Provide specialized insights to development teams and build collaborative relationships with clients and internal teams to support successful project execution.
Identify system-landscape risks, monitor performance, and suggest optimization initiatives aligned with business requirements and long-term objectives.
Establish and maintain a comprehensive knowledge base so important information is recorded and readily available.
Contribute architectural insights to proposals and RFPs.
Design, implement, configure, support, and enhance SailPoint IdentityIQ and IdentityNow solutions and application integrations.
Support identity lifecycle management, identity governance, automated provisioning, access certifications, and privileged access management.
Lead IAM architecture, requirements gathering, governance, and use-case discussions.
Deploy and configure IAM connectors across Windows and Unix/Linux environments.
Develop and execute functional, integration, performance, and automated tests.
Troubleshoot IAM platform, integration, and production issues in collaboration with clients, partners, and vendors.
Support project planning and coordination, engage effectively with clients and internal teams, and promote mentoring and knowledge sharing.