Why Mizuho

At Mizuho, we provide the stability of an international industry leader with the career trajectory of a growing business. Our steady, strategic growth gives our people at all levels rewarding degrees of responsibility and richer work experience than a boutique firm or an established giant could offer alone.

It’s the local expertise of our employees that makes our global network so powerful. By collaborating with colleagues and clients who share the same ambition and drive, you can amplify your sphere of influence and base of knowledge as part of one of the largest banks in the world.

Role Overview:

We are seeking an experienced for Senior IAM Architect & PingFederate Operations Lead role to own the architecture, engineering and global production operations of enterprise Identity and Access Management platforms.

The role requires deep hands-on expertise in PingFederate and Microsoft Entra ID, complemented by experience with SailPoint and CyberArk. The successful candidate will combine enterprise IAM architecture with 24x7 global service ownership, personally leading complex implementations, integrations and production troubleshooting while providing technical leadership to globally distributed teams.

This is a hands-on technical leadership role. Candidates with primarily managerial, advisory or high-level architecture experience without recent practical implementation experience will not qualify.

Key Responsibilities:

IAM Architecture & Engineering

- Own enterprise IAM architecture, engineering, implementation and technical standards across PingFederate, Microsoft Entra ID and integrated identity platforms.
- Design and implement enterprise SSO, federation and authentication using SAML 2.0, OAuth 2.0, OIDC and related standards.
- Architect highly available, multi-region IAM environments with appropriate resilience, disaster recovery and business continuity.
- Drive Zero Trust, phishing-resistant MFA, passwordless authentication and least-privilege principles.
- Establish secure reference architectures, engineering standards, automation and operational runbooks.

PingFederate & Microsoft Entra ID

- Hands-on design, configuration and administration of PingFederate, including adapters, authentication policies, connections,



token management, certificates, clustering, upgrades and troubleshooting.
- Hands-on architecture and administration of Microsoft Entra ID, including Conditional Access, MFA, PIM, Identity Protection, enterprise applications, app registrations, Entra Connect/Cloud Sync and B2B.
- Design and troubleshoot PingFederate-Entra ID integrations, complex authentication flows, federation, token, certificate and synchronization issues.
- Use Microsoft Graph API, PowerShell and automation to improve IAM engineering and operations.

Global IAM Operations

- Own 24x7 IAM production operations across multiple regions, ensuring availability, resilience, service continuity and SLA/SLO performance.
- Lead globally distributed IAM engineering and operations teams using a follow-the-sun L1/L2/L3 support model.
- Personally lead critical incident troubleshooting, escalation, RCA, problem management and corrective actions.
- Oversee monitoring, capacity, patching, upgrades, certificate/key rotation, change management and production releases.
- Drive operational automation, continuous improvement and service reliability.

Identity Governance & Privileged Access

- Support and integrate SailPoint IdentityIQ / Identity Security Cloud for identity lifecycle, JML, provisioning, access certification, RBAC and SoD.
- Work with CyberArk capabilities including Vault, PSM, CPM and Privilege Cloud to strengthen privileged identity and secrets management.

Technical Leadership

- Provide technical direction and mentoring to IAM engineering teams globally.
- Partner with cybersecurity, infrastructure, application, audit and compliance teams.
- Communicate architecture decisions, operational performance and risks to senior stakeholders.
- Ensure IAM platforms meet applicable security, regulatory and audit requirements.

Required Experience





- 10-15 years of IT experience with 7+ years in IAM.
- 5+ years hands-on PingFederate experience.
- 5+ years hands-on Microsoft Entra ID / Azure AD experience.
- Deep knowledge of SAML 2.0, OAuth 2.0, OIDC, SSO and federation.
- Proven experience integrating PingFederate and Microsoft Entra ID.
- Experience architecting and operating highly available, enterprise-scale IAM platforms.
- Demonstrated ownership of 24x7 global IAM operations, including critical incident management, RCA, SLA/SLO management, DR and operational resilience.
- Strong hands-on technical troubleshooting, engineering leadership and stakeholder management capabilities.

Preferred:

Hands-on SailPoint IIQ/ISC and CyberArk experience; PingAccess, PingDirectory or PingID; AD FS migration; FIDO2/passwordless authentication; Terraform/IaC and CI/CD; Splunk or Microsoft Sentinel; and relevant CISSP, Microsoft SC-300, Ping Identity, SailPoint or CyberArk certifications.

Company Overview:

Mizuho Pune is an integral part of Mizuho Financial Group, one of the world’s leading financial institutions with a solid global presence across the Americas, EMEA, and Asia. Based in India, Mizuho Pune supports Mizuho’s international businesses by delivering high-quality, scalable, and resilient services across multiple functions.

Mizuho Pune plays a critical role in driving operational excellence, standardization, and innovation for Mizuho Americas. By combining deep domain expertise with strong process, technology, and analytical capabilities, it partners closely with regional and global teams to support corporate and investment banking, capital markets, and corporate services functions, while adhering to the highest standards of risk management, regulatory compliance, and control.

Mizuho Pune offers competitive compensation and benefits package aligned with industry standards and local market practices.

Mizuho Pune is an equal opportunity employer and is committed to fostering an inclusive and diverse workplace.

Employment is subject to applicable background verification checks in accordance with Indian laws and company policies.

https://www.mizuhogroup.com/asia-pacific/mizuho-global-services/careers

📌 Senior IAM Architect & PingFederate Operations Lead role (Pune)
🏢 Mizuho
📍 Pune