IAM Security Architect

We are seeking an experienced IAM Security Architect to design and implement security architectures and controls for Identity and Access Management systems across enterprise, cloud and hybrid environments. In this role, you will shape IAM capabilities, strengthen access control models, and collaborate with cross-functional teams to embed identity security into enterprise solutions, while exploring AI-assisted tools to enhance IAM processes.

Responsibilities Design and implement security architectures and controls for IAM systems across enterprise, cloud and hybrid environments Gather business, technical and compliance requirements to design IAM solutions for new implementations, migrations and security improvements Define and improve IAM capabilities, including identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, privileged access management and access governance Design and improve authentication, authorization and access control models, including RBAC, ABAC, least privilege and Zero Trust principles Conduct IAM security architecture reviews, risk assessments and access control design evaluations Develop IAM reference architectures, security standards, access control policies and identity governance guidelines Evaluate IAM technologies and solutions, including identity providers, IGA, PAM, federation platforms and cloud-native identity services Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories and APIs Collaborate with cloud, infrastructure, development, security operations, compliance and enterprise architecture teams to integrate IAM security into enterprise solutions Support IAM automation using PowerShell, Python, REST APIs, SCIM or Terraform Apply AI-assisted tools and workflows to improve identity and access risk analysis, access reviews, entitlement analysis, role and policy analysis, provisioning workflow optimization, compliance reporting and security scripting Identify opportunities for AI-assisted IAM automation while ensuring appropriate validation, data protection, auditability and human oversight Communicate IAM security risks, architectural decisions and remediation plans to stakeholders and security leadership Requirements Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience 5+ years of information security experience, with a focus on IAM, identity security architecture or IAM engineering Background in delivering or significantly contributing to IAM implementation, migration, integration or modernization projects Expertise in at least one enterprise IAM, IGA, PAM or identity federation platform Understanding of IAM principles, including identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access Practical experience with IAM architecture design, identity security controls, access policies or identity governance processes Knowledge of common IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP or Kerberos Skills in IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt or CyberArk Understanding of cloud IAM concepts and identity security controls across at least one major cloud platform such as Azure, AWS or GCP Working knowledge of related security domains, including cloud security, network security, application security, data protection and security operations Understanding of security architecture principles and frameworks such as Zero Trust, NIST or ISO 27001 Familiarity with IAM automation, scripting, APIs and identity integration workflows Intermediate practical experience with AI-assisted tools and automation, including structured prompting, generating and validating scripts, queries, access policies and documentation with AI Understanding of safe AI usage, including sensitive identity data protection, access control, auditability and validation of AI-generated outputs Strong communication and collaboration skills Nice to have Experience with Identity Governance and Administration (IGA), Privileged Access Management (PAM), CIAM or B2B/B2C identity scenarios Experience with cloud identity, workload identities, service principals, managed identities and hybrid identity architectures Experience integrating IAM solutions with SIEM/SOAR, security monitoring and automated response workflows Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain or Power Automate Understanding of AI security risks, including sensitive data exposure, prompt injection, excessive permissions and insecure AI tool usage CISSP, CISM, CISA, CCSP, CCSK, Microsoft SC-300, Microsoft SC-100, Okta Certified Professional/Administrator/Consultant, SailPoint, Saviynt, CyberArk or Ping Identity certifications Claude Certified Architect, AI-900: Microsoft Azure AI Fundamentals or AWS Certified AI Practitioner certifications Georgia (Production) We connect like-minded people Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers We cover it all Participation in the Employee Stock Purchase Plan Monetary bonuses for engaging in the referral program Comprehensive medical & family care package Five trust days per year (sick leave without a medical certificate) Benefits package (sports activities, a variety of stores and services) Kazakhstan (Prod) We connect like-minded people: Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth: Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers Discounts in local language schools, including online courses for the Kazakh language We cover it all: Participation in the Employee Stock Purchase Plan Monetary bonuses for engaging in the referral program Medical & family care package Six trust days per year (sick leave without a medical certificate) Coverage of psychology sessions of your choice Benefits package (sports activities, a variety of stores and services) Housing support program: preferential mortgage access via Otbasy Bank partnership Uzbekistan (Prod) We connect like-minded people: Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth: Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers Discounts in local language schools, including offline courses for the Uzbek language We cover it all: Monetary bonuses for engaging in the referral program Medical & family care package Four trust days per year (sick leave without a medical certificate) Discounts for fitness clubs, dance schools and sports programs Benefits package (sports activities, a variety of stores and services) Armenia (Prod) We connect like-minded people Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers We cover it all Participation in the Employee Stock Purchase Plan Monetary bonuses for engaging in the referral program Comprehensive medical & family care package Four trust days per year for personal needs Discounts for fitness clubs Benefits package (hotels, restaurants, stores and services) Kyrgyzstan (Prod) We connect like-minded people: Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth: Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers We cover it all: Monetary bonuses for engaging in the referral program Medical & family care package Six trust days per year (sick leave without a medical certificate) Coverage of psychology sessions of your choice Discounts for fitness clubs and sports programs Benefits package (sports activities, a variety of stores and services)