Senior IAM Architect (Sailpoint)

Qode•Texas, TX

About The Position

Incedo is a US-based consulting, data science, and technology services firm with over 4,000 professionals across the US and India. We help organizations achieve competitive advantage through end-to-end digital transformation. Our strength lies in combining deep engineering expertise, data science capabilities, and domain knowledge. At Incedo, you will work with global clients, cutting-edge technologies, and highly collaborative teams. Our learning ecosystem (Incedo University) and flexible career paths empower professionals to evolve into architects, domain leaders, and transformation specialists. The Senior IAM Architect (SailPoint IdentityNow) is a strategic and technical leadership role responsible for designing, implementing, and governing enterprise-wide Identity & Access Management (IAM) solutions. This role will define future-state IAM architecture, lead RBAC and identity lifecycle transformation, and drive compliance-aligned identity governance programs across complex enterprise environments—particularly in Financial Services ecosystems. The architect will act as a trusted advisor to CISOs, CIOs, and business leaders, ensuring identity is positioned as a core security and business enabler.

Requirements

10+ years of experience in Identity & Access Management (IAM)
5+ years of hands-on experience with SailPoint IdentityNow / IdentityIQ
Proven experience in large-scale IAM transformation programs
Experience in Financial Services deployments (mandatory)
SailPoint Certified IdentityNow Engineer (mandatory) with preferred certifications including CISSP, CISM, TOGAF, and cloud credentials across AWS, Azure, or OCI.
Strong expertise in Identity Governance & Administration (IGA), RBAC/ABAC models, and end-to-end identity lifecycle management.
Proficient in APIs (REST, SCIM), directory services (AD, LDAP, Entra ID), and familiar with PAM, SIEM/SOAR integrations, and cloud IAM frameworks.
Solid understanding of financial regulatory requirements, audit frameworks, control validation, and identity risk and compliance metrics.
Strong analytical thinking, executive communication capability, strategic mindset with execution focus, and ability to perform in complex, high-pressure environments.

Nice To Haves

Experience with leading IGA tools (Saviynt, Oracle IAM, Okta), exposure to Zero Trust architecture, and familiarity with automation, AI-driven IAM, and identity analytics.

Responsibilities

Experience designing Enterprise IAM Architecture using SailPoint IdentityNow and leading IGA platforms, aligned to Zero Trust, Hybrid IAM (Cloud + On-Prem), and scalable identity governance models driving IAM transformation.
Experience as a SailPoint IdentityNow SME, implementing JML (Joiner-Mover-Leaver) workflows, Access Certifications, Policy-Based Access Controls, and developing connectors, ensuring platform optimization and performance tuning .
Proficiency in Identity Lifecycle Management, including automated provisioning/deprovisioning, integration with HR systems, AD/LDAP, and enabling real-time access governance.
Skills in RBAC design, role mining and engineering , defining business and IT roles, managing entitlements, enforcing least privilege, and implementing SoD (Segregation of Duties) frameworks.
Experience in connector architecture and integration, including API-based integrations (REST/SCIM) across AWS, Azure, OCI, enterprise applications (ERP/CRM), and directories (AD/LDAP/Entra ID).
Experience aligning IAM with regulatory frameworks such as FINRA, SEC, and SOC 2, along with NIST, ISO 27001, ensuring audit readiness and compliance reporting.
Skills in IAM migration and transformation , including legacy to SailPoint transitions, cloud IAM transformation, data mapping, entitlement reconciliation, and migration roadmap execution with risk mitigation.
Industry experience in Financial/Wealth Management IAM environments, supporting regulatory compliance, trading systems, payment platforms, and ensuring customer data security and auditability.
Experience integrating IAM with SIEM, SOAR, and PAM, enabling ITDR (Identity Threat Detection & Response) and risk-based access controls using contextual signals.
Experience in IAM leadership, engaging with CISO/CIO stakeholders, driving solution architecture, enabling cross-functional collaboration, and mentoring teams.