Senior IAM Architect

Job Purpose
We are seeking an experienced Senior IAM Architect specializing in privileged access management as well as enterprise directory services to join our team. As an IAM Architect you will be responsible for designing, implementing, and managing identity and access management solutions using the Entra ID platform including MS Active Directory, as well as supporting the deployment and management of privileged access management solutions across the enterprise. The chosen candidate will work closely with stakeholders to understand business requirements and translate them into scalable and secure identity solutions. Your role involves defining architecture standards, implementing best practices, and ensuring compliance with security and regulatory requirements.

Main Tasks and Responsibilities

• Lead the planning, execution, and delivery of the PAM & Enterprise Directory service roadmap, ensuring adherence to best project management practices
• Manage and monitor project progress, track milestones, and proactively identify potential roadblocks. Implement mitigation strategies and take corrective action to keep projects on track for successful delivery.
• Define service portfolio, including service catalog and service level agreements (SLAs).
• Lead the planning process, including scope definition, resource allocation, timeline development, and risk assessment. Collaborate with stakeholders to gather requirements and ensure project objectives are clearly defined and aligned with business goals
• Create and maintain documentation for governance, standards, and procedures, as well as system documentation
• Conduct regular assessments to identify service improvement opportunities and develop corresponding plans.
• Provide expertise in resolving escalated issues related to PAM & Enterprise Directory Services
• Stay informed about the latest security trends, tools, and technologies

Profile
Education

• Bachelor’s degree in Computer Science, Information Security, or a related field
• While not mandatory, certifications can enhance your credentials and demonstrate your expertise in PAM & EntraID and related technologies. Some certifications that are valuable as a Service Owner include CyberArk Sentry and/or Industry certifications such as Microsoft Certified: Azure Solutions Architect Expert, Microsoft Certified: Identity and Access Administrator Associate, or equivalent certifications in cloud security and identity management are preferred.

Experience

• Proven experience (5+ years) in architecting, implementing, and managing identity and access management & privileged access management solutions using Microsoft Azure Entra ID & CyberArk.
• In-depth knowledge of PAM/IAM technologies and solutions, particularly CyberArk and Azure Entra ID
• Expertise in Microsoft Azure services, including Entra ID, Entra ID Connect, Entra ID B2B/B2C, Azure Multi-Factor Authentication, Conditional Access, Azure Identity Protection, Azure Federation Services, Application Proxy & App registration
• Strong understanding of identity standards and protocols, such as OAuth, OpenID Connect, SAML, LDAP, and Kerberos.
• Demonstrated experience in implementing and managing CyberArk environments, including components such as Enterprise Password Vault(EPV), Central Policy Manager (CPM), Privileged Session Manager (PSM), and Application Identity Management (AIM)
• Strong understanding of cybersecurity principles, frameworks, and standards such as NIST, ISO/IEC 27001
• Excellent communication and collaboration skills, with the ability to work effectively with stakeholders at all levels of the organization.
• Excellent problem-solving skills and ability to work under pressure

Personal Attributes

• You have a positive mindset and a curious nature
• Being open-minded and receptive to new ideas, feedback, and perspectives is essential
• Effective communication skills. You are able to clearly articulate ideas, requirements, and project updates to both technical and non-technical stakeholders
• You are able to adapt to changing priorities, project requirements, and technologies
• Show outstanding teamwork abilities to foster effective collaborations with various internal teams
  

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability.

Employment Type: Full Time

Alternative Locations: Switzerland : Basel || Spain : Madrid

TravelPercentage: 0 - 20%

Requisition ID: 13373