Identity & Access Management (IAM) Security Architect

TCS•Chicago, IL

About The Position

Design Identity-centric Workforce Security solutions for secure authentication, authorization, and access management. Develop identity architectures aligned with security frameworks and regulatory standards. Provide architecture guidance for hybrid and cloud identity solutions. Act as a subject matter expert for Identity, Authentication, Authorization (IAA), and Identity Governance. Design secure identity solutions following Zero Trust and least-privilege principles. Support modern identity architectures, cloud security, and agentic identity solutions.

Requirements

Strong expertise in: Identity & Access Management (IAM), Authentication & Authorization, Identity Governance & Administration (IGA), Workforce Identity.
Experience designing identity solutions aligned with: NIST CSF, COBIT, SOC, GDPR.
Strong understanding of: Zero Trust Architecture, Least Privilege, Defense-in-Depth, Modern access patterns.
Expertise in: Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Passwordless Authentication, Device-based Authentication, Identity Federation.
Hands-on experience with: Microsoft Entra ID (Azure AD), Microsoft EPM, Microsoft Sentinel, Microsoft Azure, Microsoft 365 Security, AWS Security Services.
Knowledge of: Okta, PingFederate, CIEM (Cloud Infrastructure Entitlement Management), Entitlement Management solutions.
Strong understanding of: OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, Kerberos, Identity Federation.
Experience securing: Java-based Microservices, React-based web applications, Android applications, iOS applications.
Strong knowledge of: Secrets Management, Certificate Management, Token handling, Session management, Credential vaulting, Cryptography, Authorization patterns, Cloud-native security.
Experience with: Privileged Identity Management (PIM), Role-Based Access Control (RBAC), Just-in-Time (JIT) Access, VPN solutions, Desktop virtualization, Network segmentation, Data protection solutions.
Understanding of: Threat Modeling, Cybersecurity Risk Management, Supply Chain Risk, Third-party Risk Assessment, Security Governance and Compliance.
Excellent communication and presentation skills.
Strong stakeholder and executive management capabilities.
Ability to influence architectural and security decisions.
Strong analytical and problem-solving skills.
Experience leading cross-functional security initiatives.
Ability to mentor architects and engineering teams.
Strong collaboration across security, infrastructure, application, and business teams.
High level of ownership, accountability, and strategic thinking.
Ability to balance business requirements with security and compliance objectives.

Responsibilities

Design secure Identity and Access Management architectures for enterprise environments.
Develop authentication and authorization solutions for hybrid and cloud platforms.
Review and provide architectural guidance for IAM-related security solutions.
Advise stakeholders and IT leadership on identity and security best practices.
Design secure access controls using Zero Trust and least-privilege principles.
Implement and govern: SSO, MFA, Conditional Access, Passwordless Authentication, Identity Federation.
Architect solutions for: Entra ID, Azure, AWS, Microsoft 365, Okta, PingFederate.
Design secure identity integrations for cloud-native, web, and mobile applications.
Provide guidance on: Secrets management, Certificate management, OAuth/OIDC flows, Session management, Token security.
Design IAM roadmaps aligned with security frameworks and audit requirements.
Evaluate and improve cloud entitlement management (CIEM) and overall security posture.
Perform threat modeling and security architecture reviews.
Collaborate with cross-functional teams to deliver secure enterprise solutions.
Ensure compliance with organizational security standards and regulatory requirements.