As an IAM Designer, you work at the forefront of identity management. You design end-to-end IAM landscapes, evaluate platforms, and ensure that access governance is demonstrably secure and compliant. You help organizations migrate from older systems to modern, cloud-first IAM architectures. You advise on RBAC/ABAC models, JML lifecycles, and integrations with cloud environments.
Your impact: stronger oversight of who can do what, faster user provisioning, lower compliance risks, and a firmer foundation for zero-trust security.
What you do
- Design IAM architectures based on business needs, compliance requirements, and technical constraints
- Evaluate and select IAM platforms (SailPoint, CyberArk, Okta, ForgeRock, Entra ID, Saviynt) and integration systems
- Define RBAC/ABAC models, identity governance workflows, and JML (Joiner-Mover-Leaver) processes
- Lead migrations from legacy IAM systems to cloud-native architectures
- Advise on access policies, entitlement management, and compliance with ISO 27001, NIS2, and sector-specific regulations
- Ensure secure integration between on-premises and cloud identity sources (Active Directory, Entra ID, cloud IDPs)
- Work closely with architects, engineers, and operations teams on implementation and testing
- Document designs, guidelines, and best practices for knowledge transfer
Tech Stack & Tools.
- Platforms & Tooling: SailPoint IdentityIQ/IdentityNow, CyberArk Identity, Okta, ForgeRock Identity Platform, Microsoft Entra ID, Saviynt, Ping Identity, Active Directory
- Frameworks & Standards: RBAC (Role-Based Access Control), ABAC (Attribute-Based Access Control), JML (Joiner-Mover-Leaver) lifecycle, ISO 27001, NIST IAM guidelines, COBIT 2019
- Cloud & Infrastructure: Azure Entra ID, AWS Identity Services, GCP Cloud Identity
- Methodologies: Identity governance design, Zero-trust architecture, Access risk analysis, Capability maturity modeling
What they ask
- 10+ years of experience in identity & access management, of which at least 3 years as an architect or designer at a strategic level
- In-depth knowledge of IAM platforms (SailPoint and/or CyberArk) and their implementation lifecycle
- Strong grasp of RBAC/ABAC models, access governance, provisioning workflows, and compliance requirements (ISO 27001, NIS2)
- Proven ability to design architectures for large, complex organizations and lead migrations
- Excellent communication skills: you clearly explain technical concepts to stakeholders and the board
Nice-to-haves.
- CISSP or CISM certification
- Hands-on experience with cloud-IAM (Azure Entra ID, AWS Identity, GCP Cloud Identity)
- Experience with implementing zero-trust architectures
- Knowledge of cloud-native and hybrid IAM migrations
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.