IAM Architect (Microsoft Entra ID & Active Directory)

Experience: 8 20 Years (Senior candidates also acceptable)

Location: Bangalore / Indore / Pune

Primary Skills: IAM Architect, Microsoft Entra ID, Active Directory

Positive to Have: SailPoint ISC / IIQ

Immediate Joiner Only

Job Overview

We are looking for an experienced IAM Architect to lead enterprise Identity and Access Management (IAM) architecture, design and implementation. The ideal candidate should have strong hands-on expertise in Microsoft Entra ID and Active Directory, along with experience in hybrid identity environments, Identity Governance and Administration (IGA), and enterprise security architecture.

Experience with SailPoint (ISC/IIQ), Okta, CyberArk, Saviynt or other IAM/PAM platforms will be an added advantage.

Key Responsibilities

- Define and implement enterprise IAM architecture, strategy and roadmap.
- Design and manage Microsoft Entra ID and Active Directory environments.
- Architect hybrid identity solutions using Entra Connect / Cloud Sync.
- Implement Conditional Access, MFA, SSO, Passwordless Authentication and PIM.
- Lead Identity Lifecycle Management processes (Joiner, Mover and Leaver).
- Design identity governance, access reviews, RBAC and entitlement management.
- Integrate IAM solutions with HR systems, ServiceNow,



cloud platforms and enterprise applications.
- Work on federation and authentication protocols such as SAML, OAuth 2.0, OIDC and SCIM.
- Drive Zero Trust security architecture and identity transformation initiatives.
- Provide architectural guidance on IAM and PAM platforms.
- Collaborate with security, infrastructure, cloud and application teams.
- Mentor technical teams and support security audits and compliance requirements.

Mandatory Technical Skills

- Strong experience in IAM Architecture and Identity Management.
- Microsoft Entra ID (Azure Active Directory).
- Active Directory and Hybrid Identity.
- Entra Connect / Azure AD Connect / Cloud Sync.
- Conditional Access, MFA, SSO and PIM.
- Identity Governance and Administration (IGA).
- SAML, OAuth 2.0, OpenID Connect and SCIM.
- PowerShell, Microsoft Graph API and REST APIs.
- RBAC, Access Reviews and Zero Trust Architecture.

Good to Have

- SailPoint Identity Security Cloud (ISC) / IdentityIQ (IIQ).
- Okta, CyberArk, Delinea, Saviynt, Ping Identity or ForgeRock.
- Privileged Access Management (PAM).
- Microsoft Identity and Access Administrator certification.
- Microsoft Cybersecurity Architect or CISSP/CISM certification.

📌 IAM Architect (Karnataka)
🏢 SWITS DIGITAL Private
📍 Karnataka