Principal Solution Architect

Roles and responsibilities

In today’s rapidly evolving digital landscape, an effective Identity and Access Management (IAM) program is crucial for organizations navigating multi-cloud environments. The role involves a strategic collaboration with stakeholders to design and deliver a comprehensive IAM strategy. This includes defining key performance indicators (KPIs) to measure the program’s success and impact on organizational security.

Developing a Strategic Roadmap for Multi-Cloud Platforms

The successful candidate will be responsible for establishing a strategic architecture roadmap that ensures IAM policies and standards align with the needs of multi-cloud environments. This requires a thorough understanding of how IAM interacts with various cloud services and the ability to create frameworks that provide seamless, secure access across platforms.

Ensuring Zero-Trust Alignment

A cornerstone of modern security practices is the Zero-Trust model, which necessitates stringent identity provisioning and deprovisioning processes. This role will focus on implementing end-to-end solutions that facilitate secure authentication and authorization. By fostering a culture of zero-trust, the IAM program will enhance the organization’s security posture and minimize risks associated with unauthorized access.

Integrating with Cybersecurity Frameworks

To strengthen the organization’s overall security framework, the IAM requirements must align with established cybersecurity standards, such as NIST, Hitrust, and the Cybersecurity Framework (CSF). The candidate will play a pivotal role in ensuring that IAM strategies are integrated within these frameworks, reinforcing security compliance and best practices.

Collaborating with Application Teams on IAM Roadmap Integration

Working closely with application teams, the candidate will guide the development and adoption of Privileged Access Management (PAM) solutions. Publishing best practices and providing guidance will encourage the consistent use of IAM services, promoting a secure environment for application development and deployment.

Promoting Just-In-Time Access

Incorporating Just-In-Time (JIT) access within Continuous Integration/Continuous Deployment (CI/CD) pipelines is essential for agile operations. This role will involve integrating JIT assurance into IAM strategies, ensuring that access is granted dynamically based on real-time requirements while adhering to cloud best practices.

Championing Modern IAM Security Principles

As a change agent, the candidate will advance security engineering practices across teams. Conducting design reviews will be essential for uncovering and addressing vulnerabilities in security architecture, ensuring that IAM solutions are not only secure but also scalable and efficient.

Desired candidate profile

Qualifications

Candidates should have a robust background with over 7 years in IAM service delivery, including a minimum of 5 years focused on zero-trust architecture within cloud platforms like Oracle, AWS, and Azure. Proficiency in Microsoft IAM solutions, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and PAM is essential. A deep understanding of Identity Federation, Access Management, and Directory Services, combined with expertise in SAML, OAuth, and Role-Based Access Control (RBAC), will be key to designing secure IAM solutions. Familiarity with IAM threats and agile methodologies, along with relevant certifications—especially in Azure—will further strengthen the candidate's profile. Proficient English communication skills are required to effectively convey IAM strategies across diverse teams.