全职 IAM Solution Architect 工作, 薪水, Argyll Scott 公司招聘中 - Ricebowl

Role Summary

We are seeking an experienced Identity & Access Management (IAM) Solution Architect to lead the design and implementation of enterprise-scale identity security solutions. The successful candidate will possess deep expertise in Microsoft Active Directory (AD) and Microsoft Entra ID (Azure AD) and demonstrate strong capabilities in designing and delivering Identity Governance & Administration (IGA) and Privileged Access Management (PAM) solutions. This role requires an architect who can define scalable, secure, and resilient IAM architectures supporting hybrid and cloud-first environments.

Key Responsibilities

Solution Architecture & Design

• Lead the architecture, design, and implementation of enterprise IAM solutions across hybrid and cloud environments.
• Design scalable and highly available identity platforms supporting business growth and digital transformation initiatives.
• Develop IAM reference architectures, standards, roadmaps, and best practices.
• Translate business and regulatory requirements into secure IAM solutions and technical designs.
• Conduct architecture reviews and provide technical governance throughout project lifecycles.

Microsoft Identity Platform

• Architect and optimize Microsoft Active Directory environments, including:
• Forest and domain design
• Trust relationships
• Group Policy management
• AD Federation Services (AD FS)
• Directory synchronization
• Design and implement Microsoft Entra ID solutions including:
• Hybrid Identity
• Single Sign-On (SSO)
• Conditional Access
• Multi-Factor Authentication (MFA)
• Identity Protection
• B2B and B2C integrations
• Zero Trust architectures

Identity Governance & Administration (IGA)

• Design and implement IGA capabilities including:
• Joiner-Mover-Leaver processes
• Access request and approval workflows
• Role-based access control (RBAC)
• Access certifications and recertifications
• Segregation of Duties (SoD)
• Automated provisioning and deprovisioning
• Integrate IAM platforms with HR systems, directories, and enterprise applications.

Privileged Access Management (PAM)

• Design and deploy enterprise PAM solutions to secure privileged identities and accounts.
• Implement privileged session management, credential vaulting, just-in-time access, and privileged access governance.
• Drive adoption of least-privilege principles and privileged access controls aligned with Zero Trust frameworks.

Stakeholder Engagement

• Collaborate with security, infrastructure, cloud, application, and compliance teams.
• Provide technical leadership and mentorship to IAM engineering and operational teams.
• Support vendor evaluations, solution selection, and technology roadmaps.

Technical Skills (Must Have)

• 8+ years of experience in Identity and Access Management.
• Strong hands-on architecture and design experience with:
• Microsoft Active Directory (AD)
• Microsoft Entra ID (Azure AD)
• Proven experience designing and implementing:
• Identity Governance & Administration (IGA) solutions
• Privileged Access Management (PAM) solutions
• Experience designing scalable enterprise IAM architectures for large, complex environments.
• Strong understanding of:
• SSO
• MFA
• Conditional Access
• RBAC
• Federation (SAML, OAuth 2.0, OpenID Connect)
• Zero Trust security principles