iam architect

NTT DATA

Req ID: 366813
 
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
 
We are currently seeking a Active Directory/Azure AD-Senior Identity Access Management (IAM) Architect to join our team in Plano, Texas (US-TX), United States (US).
 
Systems Eng. Sr. Specialist Advisor– Active Directory/Entra ID
 
Role Overview
 
The NTT DATA Services Security organization is looking for talented security-oriented Systems SR. Engineering with strong Active Directory, DNS, DHCP, GPO, ADFS/Entra ID, MFA, SSO and related Identity skills. This role will be part of a larger dedicated security team dedicated to supporting, troubleshooting, upgrading Active Directory, Entra ID and related Identity technologies.
 
Role Responsibilities: 
<ul>
<li>Active Directory designing, Architecture Solutions, Integration with platforms Applications</li>
<li>Develop an architecture of directory solutions for Windows, Unix, and related platforms</li>
<li>Experience in consolidations of multiple forest and domains and demonstrated understanding on User accounts, machine accounts, GPOs</li>
<li>Understand the requirement and create a migration plan for any services i.e. DNS, DHCP, and Certificate Services (PKI) etc.</li>
<li>Analyzing the requirement and design a solution to fulfil the requirement with zero impact to other platforms</li>
<li>Develop a power shell scripting with AD modules or VB .Net based on the requirements</li>
<li>Manage Azure active directory design, Architect Solutions, Integration with platforms Applications and AD connector to Entra</li>
<li>Auditing the security logs and integrating with SIEM</li>
<li>Conducting POC with multiple vendors for AD solutions and prepare detailed test cases. Create a clear recommendation document with pros and cons for senior management</li>
<li>Vulnerability Assessment and Management related to Active Directory, DNS Windows platforms</li>
<li>Active Directory consolidations including application integration working with application teams</li>
<li>Recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results</li>
</ul>
Required Qualifications: 
<ul>
<li>Minimum 8 years relevant experience in Architecture and designing, solutions Migrating Active Directory, Entra ID ,Windows End points</li>
<li>Strong Demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains. Hands on experience in successful consolidation of AD Forests and Domains</li>
<li>Must have strong hands-on experience working on Entra ID (Azure Active Directory)</li>
<li>Extensive Experience working as Entra IDmin for enterprise Active Directory setup and maintenance</li>
<li>Strong experience in AD Trusts, two-way Trusts and one-way Trusts and deep knowledge of Active Directory Schemas and meta data</li>
<li>Strong Knowledge on Entra ID Identity Management Integration with on premise</li>
<li>Strong knowledge of Entra ID technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities.</li>
<li>Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices</li>
<li>Strong hands-on experience in coding in PowerShell scripting</li>
<li>Strong Knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk</li>
<li>Good knowledge on ADFS and Entra ID sync connectors</li>
<li>Strong familiarity with DNS Active Directory integrated, partitions and Infoblox DHCP systems and Migration of services from Active Directory any platform</li>
<li>Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc.,</li>
<li>Expertise in Active Directory versions 2003, 2008R2, 2012R2 2016, 2019 and Azure Active Directory</li>
<li>Good knowledge and hands on experience in setting up lab based on the solution requirements</li>
<li>Demonstrated working knowledge and hands on experience in AD disaster recovery, Replication issues and resolution using tools such as repadmin</li>
<li>Demonstrated experience in writing and applying GPOs, especially related to domain consolidations</li>
<li>Good Knowledge on Active Directory windows audit logs and levels and SIEM integration</li>
<li>Good knowledge on Networking, firewalls, including host firewalls, DNS, DHCP, DFS Network load balancers and Secure Global Directory or Secure LDAP</li>
<li>Good knowledge on Cryptography, certificates, PKI, symmetric, asymmetric keys, Encryption hash algorithms</li>
<li>Good knowledge on AD authentication protocols Kerberos, NTLM, LDAP, LDAPS LDAP-Start TLS</li>
<li>Good knowledge on Network log capturing analyzing the network packet captures through the tools Wireshark, Tshark, Microsoft NM etc.,</li>
<li>Good knowledge on application integration with LDAP Kerberos i.e. Keytab, krb5 etc.,</li>
<li>Good knowledge on AD migration tools like ADMT, Quest etc., knowledge on AD trusts, forest, domain tree structures, sites, DNS, GPOs, OU, FRS, DFSR.</li>
<li>Good knowledge on any Identity Access Management tools like FIM, MIM, OIM, Quest etc.,</li>
<li>Exposure to SAML, OAuth, OpenID and other security/IAM related standards</li>
<li>Strong hands-on familiarity with host-based security solutions, Forensic Investigation agents, and Compliance scanning and reporting, Hardening Active Directory</li>
<li>Knowledge of single sign-on, federation, active directory/LDAP, Kerberos/NTLM authentication integrated Windows authentication</li>
<li>Good knowledge on Identity management and Role based access control, attribute-based access control entitlement management</li>
<li>Good knowledge on power shell scripting with AD modules or VB .Net and ability to write scripts based on the requirement</li>
<li>Excellent communication skills, especially verbal and written</li>
<li>Good documentation skills to write a design configuration documents version controls</li>
<li>Excellent Interpersonal skill and ability to work as part of a team</li>
<li>Home office for remote work</li>
<li>Ability to work some weekends and late nights performing approved changes</li>
<li>ITIL V3 or later experience, experience in writing change request and attending Change Advisory Boards (CAB) meeting</li>
<li>Experience with Security Controls and compliance</li>
</ul>
About NTT DATA
 
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.
 
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
 
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

Active Directory/Azure AD-Senior Identity & Access Management (IAM) Architect

Req ID: 366994
 
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
 
We are currently seeking a Active Directory/Azure AD Senior Identity Access Management (IAM) Architect - to join our team in Plano, Texas (US-TX), United States (US).
 
Systems Eng. Sr. Specialist Advisor– Active Directory/Entra ID
 
Role Overview
 
The NTT DATA Services Security organization is looking for talented security-oriented Systems SR. Engineering with strong Active Directory, DNS, DHCP, GPO, ADFS/Entra ID, MFA, SSO and related Identity skills. This role will be part of a larger dedicated security team dedicated to supporting, troubleshooting, upgrading Active Directory, Entra ID and related Identity technologies.
 
Role Responsibilities: 
<ul>
<li>Active Directory designing, Architecture Solutions, Integration with platforms Applications</li>
<li>Develop an architecture of directory solutions for Windows, Unix, and related platforms</li>
<li>Experience in consolidations of multiple forest and domains and demonstrated understanding on User accounts, machine accounts, GPOs</li>
<li>Understand the requirement and create a migration plan for any services i.e. DNS, DHCP, and Certificate Services (PKI) etc.</li>
<li>Analyzing the requirement and design a solution to fulfil the requirement with zero impact to other platforms</li>
<li>Develop a power shell scripting with AD modules or VB .Net based on the requirements</li>
<li>Manage Azure active directory design, Architect Solutions, Integration with platforms Applications and AD connector to Entra</li>
<li>Auditing the security logs and integrating with SIEM</li>
<li>Conducting POC with multiple vendors for AD solutions and prepare detailed test cases. Create a clear recommendation document with pros and cons for senior management</li>
<li>Vulnerability Assessment and Management related to Active Directory, DNS Windows platforms</li>
<li>Active Directory consolidations including application integration working with application teams</li>
<li>Recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results</li>
</ul>
Required Qualifications: 
<ul>
<li>Minimum 8 years relevant experience in Architecture and designing, solutions Migrating Active Directory, Entra ID ,Windows End points</li>
<li>Strong Demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains. Hands on experience in successful consolidation of AD Forests and Domains</li>
<li>Must have strong hands-on experience working on Entra ID (Azure Active Directory)</li>
<li>Extensive Experience working as Entra IDmin for enterprise Active Directory setup and maintenance</li>
<li>Strong experience in AD Trusts, two-way Trusts and one-way Trusts and deep knowledge of Active Directory Schemas and meta data</li>
<li>Strong Knowledge on Entra ID Identity Management Integration with on premise</li>
<li>Strong knowledge of Entra ID technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities.</li>
<li>Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices</li>
<li>Strong hands-on experience in coding in PowerShell scripting</li>
<li>Strong Knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk</li>
<li>Good knowledge on ADFS and Entra ID sync connectors</li>
<li>Strong familiarity with DNS Active Directory integrated, partitions and Infoblox DHCP systems and Migration of services from Active Directory any platform</li>
<li>Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc.,</li>
<li>Expertise in Active Directory versions 2003, 2008R2, 2012R2 2016, 2019 and Azure Active Directory</li>
<li>Good knowledge and hands on experience in setting up lab based on the solution requirements</li>
<li>Demonstrated working knowledge and hands on experience in AD disaster recovery, Replication issues and resolution using tools such as repadmin</li>
<li>Demonstrated experience in writing and applying GPOs, especially related to domain consolidations</li>
<li>Good Knowledge on Active Directory windows audit logs and levels and SIEM integration</li>
<li>Good knowledge on Networking, firewalls, including host firewalls, DNS, DHCP, DFS Network load balancers and Secure Global Directory or Secure LDAP</li>
<li>Good knowledge on Cryptography, certificates, PKI, symmetric, asymmetric keys, Encryption hash algorithms</li>
<li>Good knowledge on AD authentication protocols Kerberos, NTLM, LDAP, LDAPS LDAP-Start TLS</li>
<li>Good knowledge on Network log capturing analyzing the network packet captures through the tools Wireshark, Tshark, Microsoft NM etc.,</li>
<li>Good knowledge on application integration with LDAP Kerberos i.e. Keytab, krb5 etc.,</li>
<li>Good knowledge on AD migration tools like ADMT, Quest etc., knowledge on AD trusts, forest, domain tree structures, sites, DNS, GPOs, OU, FRS, DFSR.</li>
<li>Good knowledge on any Identity Access Management tools like FIM, MIM, OIM, Quest etc.,</li>
<li>Exposure to SAML, OAuth, OpenID and other security/IAM related standards</li>
<li>Strong hands-on familiarity with host-based security solutions, Forensic Investigation agents, and Compliance scanning and reporting, Hardening Active Directory</li>
<li>Knowledge of single sign-on, federation, active directory/LDAP, Kerberos/NTLM authentication integrated Windows authentication</li>
<li>Good knowledge on Identity management and Role based access control, attribute-based access control entitlement management</li>
<li>Good knowledge on power shell scripting with AD modules or VB .Net and ability to write scripts based on the requirement</li>
<li>Excellent communication skills, especially verbal and written</li>
<li>Good documentation skills to write a design configuration documents version controls</li>
<li>Excellent Interpersonal skill and ability to work as part of a team</li>
<li>Home office for remote work</li>
<li>Ability to work some weekends and late nights performing approved changes</li>
<li>ITIL V3 or later experience, experience in writing change request and attending Change Advisory Boards (CAB) meeting</li>
<li>Experience with Security Controls and compliance</li>
</ul>
About NTT DATA
 
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.
 
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
 
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

Active Directory/Azure AD Senior Identity & Access Management (IAM) Architect -

Deloitte

Identity and Access Management ArchitectReference Code 1872
 
Country: United States (US)
 
US Locations: USA - Hermitage; USA - Cincinnati; USA - Cleveland; USA - Jacksonville; USA - Kansas City; USA - Nashville; USA - Pittsburgh; USA - Tampa
 
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
 
Work you'll do
 
We are seeking a Senior Manager-level IAM Architect to partner with Senior IAM leadership team to define and drive the technical strategy and architecture for Identity and Access Management (IAM) across the organization. This role combines strategic leadership, hands-on solution design with product owners, and senior level stakeholder engagement, to secure identities, enable business objectives, and improve user experience across digital channels. This individual must have a pulse on the emerging identity technology trends and best practices to coordinate with Product Owners for integrated IAM architectures and roadmaps.
 
Core Responsibilities
 
Partner with Senior IAM leadership team to define and own the enterprise IAM architecture, strategy, reference patterns, and roadmaps across authentication, authorization, identity lifecycle, privileged access, and account protection.
 
Engage in executive level leadership conversations, translate business goals into IAM requirements, coordinate with IAM product owners on technical feasibility to ensure solutions scale and interoperate across on-premises, cloud, and hybrid environments.
 
Partner with IAM product technical leads to assist with technical design and implementation for authentication (e.g. MFA, SSO, etc), authorization models (e.g. RBAC, ABAC, etc), identity provisioning, lifecycle management, and privileged access controls.
 
Champion innovation with Identity and Access Management tools, evaluate and provide recommendations to product owners for consideration and integration with the existing platform, while balancing security, privacy, and usability.
 
Architect secure integrations between IAM platforms and applications, directories, cloud services, and CI/CD pipelines, set standards and reusable patterns for developers.
 
Partner with IAM Sr. Leadership team and IAM product technical leads to address IAM risk assessments, threat modeling, and remediation strategies, partner with security, risk, and compliance teams to implement controls and measure risk reduction.
 
Partner with IAM product technical leads to oversee incident response activities as they relate to identity compromise, and lead post-incident root-cause analysis and remediation.
 
Drive adoption: create technical guidance, architecture diagrams, and executive-level briefings, mentor architects and senior engineers on IAM best practices.
 
Collaborate with product, engineering, and business leaders to prioritize roadmap items, measure outcomes (security posture, access-related incidents, time-to-provision), and demonstrate business value.
 
Ensure compliance with relevant regulations and internal policies, support audits and attestations related to identity and access controls.
 
The team
 
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
 
Qualifications
 
Do you possess the following?: 
10+ years of IAM experience with progressive technical leadership, experience in a consulting or large enterprise environment preferred.
 
Proven track record designing, delivering, and operating enterprise-scale IAM solutions across cloud and on-prem environments.
 
Deep technical knowledge of authentication/authorization protocols and standards (OAuth2/OIDC, SAML, SCIM, LDAP) and modern IAM architectures.
 
Hands-on experience with at least two major IAM technologies (e.g., Entra ID/Azure AD, Microsoft AD, CyberArk, SailPoint, Ping Identity).
 
Strong stakeholder management and communication skills, able to present technical concepts to executive audiences and translate business needs into technical requirements.
 
Experience leading vendors, technical teams, and cross-functional workstreams to successful outcomes.
 
Advanced degree (MS) or certifications (e.g., CISSP, CISM, SABSA, TOGAF, vendor-specific IAM certs).
 
Experience with zero-trust identity models, identity governance, privileged access management, and modern authentication modalities (passwordless, biometrics, adaptive MFA).
 
Prior experience building IAM programs or working in high-regulation industries (finance, healthcare, government).
 
Balance strategic thinking with the ability to roll up sleeves and deliver technically where needed.
 
Identity Providers / Directories: Entra ID/Azure AD, Microsoft AD
 
Identity Governance and PAM: SailPoint, CyberArk
 
Authentication & Federation: Ping Identity, OAuth2/OIDC, SAML, SCIM
 
Cloud & DevOps integration: AWS/Azure/GCP identity services, CI/CD tooling
 
Limited immigration sponsorship may be available.
 
Our culture
 
At Deloitte Global people are valued and respected for who they are - with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.
 
Professional development
 
From entry-level employees to senior leaders, we believe in investing in you, helping you identify and hone your unique strengths at every step of your career. We offer opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
 
Benefits
 
At Deloitte, we value our people and offer employees a broad range of benefits. Our Total Rewards program reflects our continued commitment to lead from the front in everything we do-that's why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being.
 
Recruiting for this role ends on 09/01/2026.
 
Deloitte Global is required by local law to include a reasonable estimate of the compensation range for this role for individuals applying to work in our (Open Cities Requiring Pay Disclosure) locations. This compensation range takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and delivery model. We would not anticipate that the individual hired into this role would land at or near the top end of the range, but such a decision will be dependent on the facts and circumstances of each case. A reasonable estimate of the range is - for individuals applying to work in these locations.

Identity and Access Management Architect

Riyadh Air

<div>About the Company:
<div>
Riyadh Air (RX), headquartered in the Saudi Capital, is the new national airline that&rsquo;s shaping the future of flying. It seeks to lead the aviation industry by transforming Saudi Arabia into a global aviation and trade hub &ndash; a digitally native airline that will connect the kingdom to more than 100 destinations.
</div>About the Role:

Are you a collaborative and strategic Enterprise Security Architect with the ability to create comprehensive security frameworks? 
This is a pivotal role where you will design and implement security architecture, ensuring robust protection across systems, data, and applications. 
You will be instrumental in security architecture development in alignment with TOGAF and SABSA frameworks, as well as supporting cloud security, identity management, data protection, API security; all while aligning security strategies with business objectives. 
A core component of this role is to conduct regular assessments against systems or designs to identify security gaps and vulnerabilities and provide recommendations to enhance the architecture security. 
To achieve security architecture objectives, you will work cross-functionally with IT, DevOps, business teams and vendors to integrate, embed and validate security by design. 
Here's your opportunity to shape the future of enterprise security, defining architecture strategies and fortifying cloud security and IAM frameworks.<div> 
</div>
About You:

Degree qualified, you will possess a minimum of 7 years of experience in cybersecurity, of which at least 2 years would have been in security architecture related roles. 
Your experience will include hands-on exposure to cloud platforms and related security solutions. 
Certifications such as TOGAF, SABSA, CISSP, CISM, CCSP, or MS Azure Certified Security will be viewed favourably. 
We&rsquo;d love to hear from you even more if you have experience in designing and implementing IAM, Cloud, Data and API security frameworks. 
This is your opportunity to shape the future of air travel. Bring your best and show us why you can own this position within Riyadh Air. 
Please submit your application by clicking on the Apply button. Our Talent Acquisition team will be reviewing applications shortly</div>

Enterprise Security Architecture Manager

Synnect Group L.L.C-FZ

Experience Required<ul><li>10+ years experience in Identity &amp; Access Management.</li><li>Proven experience architecting enterprise IAM solutions.</li><li>Deep Saviynt experience (implementation and governance).</li><li>Demonstrated RBAC and role modelling expertise.</li><li>Experience designing SoD frameworks in enterprise environments.</li><li>Experience integrating IAM with ERP systems (Oracle preferred).</li><li>Experience aligning IAM with ITSM platforms.</li><li>Experience operating in transformation or greenfield environments.</li></ul>INTERNALINTERNAL<ul><li>Experience designing privileged access governance frameworks.</li></ul>Job Type: Full-timePay: AED15,000.00 - AED18,000.00 per monthWork Location: In person

Senior Identity & Access Management Architect (Saviynt)

Newell Brands

<div>Job ID: 14555
Alternate Locations: 
Newell Brands is a leading consumer products company with a portfolio of iconic brands like Graco&reg;, Coleman&reg;, Oster&reg;, Rubbermaid&reg;, Sharpie&reg; and Yankee Candle&reg; - and 24,000 talented teammates around the world. Our culture is built on values in action: Integrity, Teamwork, Passion for Winning, Ownership, and Leadership. We work together to win, grow, and make a real impact&mdash;supported by a high-performing, inclusive, and collaborative environment where you can be your best, every day. 
Job location: Atlanta, GA preferred but will consider remote 
POSITION OVERVIEW: 
The Sr. IAM AI Solutions Achitect is responsible for two things. First, making sure that as Newell builds and adopts agentic and generative AI solutions, those solutions are identity-safe. Users and AI agents should only access data and transactions they are authorized for, non-human identities need proper governance, and the configuration layers behind agentic AI (especially MCP and A2A) must be protected and well-managed. Second, finding practical ways to apply AI within the IAM program itself to build better integrations, increase delivery speed, and improve the experience for both our team and our end users. 
This is not a tower ownership role. The IAM organization operates through established capability towers: IGA, PAM, AM, ILM, and others. This engineer works across all of them, bringing AI expertise and a cross-tower perspective. The day-to-day work happens in close partnership with tower leads and their engineers to define and build AI-related architecture and controls that fit each domain. 
We view IAM as a business accelerator, not just a security function. When identity is well-architected for AI, the company can move faster with greater confidence. This person is responsible for keeping our IAM capabilities aligned with and actively supporting Newell's AI ambitions. 
KEY RESPONSIBILITIES:
Pillar 1: Enabling Safe AI Development and Consumption<div> 
1. Access Governance for AI Solutions 
<ul><li>Work with AM and IGA tower leads to define and enforce access control policies for agentic and generative AI solutions, keeping users and agents within their authorized scope.</li></ul></div><ul><li>Partner with tower engineers to design authorization models for AI-enabled applications. Entitlements should be scoped correctly and reviewed through each tower's existing governance processes.</li><li>Serve as a resource on AI identity architecture for business and IT teams building AI solutions. Engage the appropriate IAM towers early so controls are part of the design, not added after the fact.</li></ul><div>
2. Non-Human Identity Governance 
<ul><li>Partner with IGA, ILM, and PAM towers to build governance around non-human identities (NHIs) used in AI solutions: agents, service accounts, machine identities, and automated workflows.</li><li>Work with ILM to define how NHIs are provisioned, attested, certified, rotated, and decommissioned. These should get the same lifecycle rigor as human identities.</li><li>Identify and remediate NHI sprawl, orphaned accounts, and over-privileged automated identities. Coordinate with PAM to confirm that secrets, tokens, and credentials are managed and rotated properly.</li></ul></div><div>
3. Agentic AI Configuration Governance (MCP &amp; A2A) 
<ul><li>Own the security and governance standards for MCP and A2A configuration layers, working with the AM and PAM towers on authentication, authorization boundaries, tool-use permissions, and logging.</li><li>Partner with IGA to govern agent-to-agent trust relationships, delegation scopes, and orchestration flows so they are authorized and auditable.</li><li>Work with IAM operations to monitor for configuration drift, unauthorized changes, and misconfigurations that could introduce identity or access risks.</li><li>Maintain documentation and operating procedures for agentic AI configuration controls in coordination with InfoSec and AI platform teams.</li></ul></div><div>
4. AI Identity Risk &amp; Compliance 
<ul><li>Work with tower leads and InfoSec to identify, assess, and address identity-related risks in AI architectures, covering authentication boundaries, authorization logic, and data access patterns.</li><li>Track the AI threat landscape, particularly around agent behavior anomalies, prompt injection attacks on identity controls, and unauthorized privilege escalation. Share findings with tower leads to inform their security posture.</li><li>Support audits and compliance activities related to AI identity governance, including access reviews, NHI inventories, and configuration attestations. Coordinate with Legal and Privacy as needed.</li></ul></div> 
Pillar 2: Applying AI to Strengthen and Accelerate IAM<div> 
5. AI-Assisted Integration &amp; Automation 
<ul><li>Work with tower leads and engineers to identify where AI (agentic, generative, vibe coding, rapid prototyping) can improve integrations between IAM platforms and IT solutions.</li><li>Support tower teams in using AI-assisted development to accelerate the build-out of onboarding connectors, access request workflows, provisioning logic, and monitoring and alerting.</li></ul></div><ul><li>Prototype AI-driven automation that reduces manual effort in lifecycle processes, certifications, privileged access operations, and incident triage.</li><li>Evaluate AI-powered tools that could improve IAM operations, shorten integration timelines, or improve data quality, and bring recommendations to leadership.</li></ul><div>
6. IAM Program AI Guidance 
<ul><li>Serve as the IAM program's primary resource on applying AI to improve security, delivery speed, and user experience. Work with each tower to apply AI in ways relevant to their domain.</li><li>Research and present emerging AI capabilities relevant to IAM: analytics, anomaly detection, intelligent access recommendations, natural language interfaces.</li><li>Develop playbooks and training so IAM staff across all towers can use AI tools effectively in their daily work, from prompt techniques to AI-assisted coding.</li><li>Establish development standards for AI-assisted IAM engineering so that quality, security, and consistency hold regardless of which tower does the work.</li></ul></div> 
REQUIRED QUALIFICATIONS:<ul><li>Experience in IAM, identity governance and related information security domains.</li><li>Strong understanding of authentication, authorization, access lifecycle management, and privileged access.</li><li>Broad knowledge of the IAM stack and how its components connect: client-server models, PAM, ILM, IGA, AM, and the dependencies between them.</li><li>Hands-on experience with AI/ML engineering, agentic frameworks, or rapid prototyping approaches like vibe coding.</li><li>Scripting or development skills (Python, JavaScript/TypeScript, or similar) for building IAM tooling and automation.</li><li>Working knowledge of agentic AI architecture, including MCP, A2A communication, orchestration patterns, and where identity controls fit in those layers.</li><li>Understanding of non-human identity types (AI agents, service accounts, machine identities) and the governance challenges they create.</li><li>Experience with or strong aptitude for AI-assisted development, including the use of generative AI tools for prototyping, building integrations, and solving technical problems.</li><li>Awareness of AI-specific security risks: how agentic and generative AI architectures introduce new attack surfaces for authentication, authorization, and access governance.</li><li>Hands-on experience with IAM platforms in hybrid or cloud environments.</li><li>Experience working in a matrixed or tower-based model where you drove outcomes through influence and partnership, not direct ownership.</li><li>Able to translate complex identity concepts into plain language for developers, business teams, and leadership.</li><li>Comfortable balancing innovation with risk, with an orientation toward finding a safe path to yes rather than defaulting to no.</li><li>Self-directed and able to manage multiple priorities without close supervision.</li></ul> 
PREFERRED QUALIFICATIONS:<ul><li>Experience securing AI-enabled platforms or workflows in an enterprise setting.</li><li>Familiarity with AI-driven analytics, anomaly detection, or intelligent recommendations in an IAM context.</li><li>Knowledge of machine identity frameworks (SPIFFE/SPIRE) and modern auth standards (OIDC, OAuth 2.0, SAML, SCIM).</li><li>Experience with audit, compliance, or regulatory stakeholders.</li><li>Relevant certifications: CISSP, CISM, or vendor-specific IAM certs.</li></ul> 
EDUCATION:
Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent professional experience. Demonstrated expertise and a strong delivery track record are valued equally. 
WHO YOU ARE:
You're naturally curious about AI and identity security, and you stay current because the space interests you, not because it's a requirement. You enjoy learning new things and you're just as motivated to teach what you've learned to others. Change and ambiguity don't slow you down; they're part of what drew you to this kind of work. 
You see IAM as something that enables the business to move, not something that holds it back. When someone brings you an AI use case, your first instinct is to figure out how to make it work safely. You're a builder. You'd rather prototype three approaches than spend the same time explaining why something is difficult. 
You recognize that the work done in this role directly affects how quickly Newell can adopt AI across the enterprise, and that responsibility is something you take seriously. 
Newell Brands (NASDAQ: NWL) is a leading global consumer goods company with a strong portfolio of well-known brands, including Rubbermaid, Sharpie, Graco, Coleman, Rubbermaid Commercial Products, Yankee Candle, Paper Mate, FoodSaver, Dymo, EXPO, Elmer&rsquo;s, Oster, NUK, Spontex and Campingaz. We are focused on delighting consumers by lighting up everyday moments. Newell Brands and its subsidiaries are Equal Opportunity Employers and comply with applicable employment laws. EOE/M/F/Vet/Disabled are encouraged to apply.</div>

Sr. IAM AI Solutions Architect

<div>
 
 Deloitte Innovation Hub
 
 
 I
 
 
 Identity and Access Management Tech Lead, Cairo, Egypt
 
 
 
 
 Connect to your career at Deloitte.
 
 
 
 Deloitte drives progress. Using our vast range of expertise, that covers audit, risk advisory, and consulting services across tax, legal, business, technology, and corporate finance, we help our clients&rsquo; become leaders wherever they choose to compete. To do this, we invest in outstanding people. We build teams of future thinkers, with diverse talents and backgrounds, and empower them all to reach for and achieve more.
 
 
 What brings us all together at Deloitte? It&rsquo;s how we approach the thousands of decisions we make every day. How we behave, our beliefs and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.Collaborate for measurable impact.
 
 
 
 Connect to your opportunity.
 
 
 
 
 Role
 
 
 
 We are seeking Identity and Access Management (IAM) architects and engineers. The candidate will have a strong background in architecture and engineering, with the ability to design and implement identity and access solutions, conduct testing of the solution, and optionally maintain and operate the technology. This role will involve working closely with cross-functional teams to ensure seamless deployment and integration of identity solutions, as well as contributing to the ongoing operation and maintenance of IAM technologies across our clients. As part of this role, you will be expected to:
 
 
 <ul>
 <li>
 Implement IAM solutions:
 </li>
 <li>
 Install solution components in on-premise environments where relevant, or configuration of cloud components (and scripting / coding of plug-ins / extensions for cloud solutions).
 </li>
 <li>
 Work with IT infrastructure teams (e.g, Networks, Entpoints) to ensure pre-requisites and dependencies have been met and are in place.
 </li>
 <li>
 Integrate IAM solutions with existing enterprise applications/systems such as directories, cloud applications, HR systems and third party identity providers.
 </li>
 <li>
 Execute unit, integration, functional and non-functional testing for IAM solutions. As part of this, troubleshoot and resolve issues (e.g, authentication failures, access policy conflicts, user provisioning errors etc.) by working with vendors.
 </li>
 <li>
 Deliver services post-implementation, from hyper-care support, resolving additional issues in production through advanced troubleshooting and debugging to ensure smooth operation.
 </li>
 <li>
 Conduct knowledge transfer to client IAM teams through technical training sessions on operating and maintaining the solution, empowering clients to effectively manage and support the IAM environment.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience.
 
 
 
 To succeed in this role, you will need the following:
 
 
 <ul>
 <li>
 7+ years of hands-on experience in the identity domain.
 </li>
 <li>
 Bachelor&rsquo;s degree in information technology, Cybersecurity, computer science or a related field.
 </li>
 <li>
 Experience in design and architecture, development, testing, deployment, and application support across one or more IAM technologies (e.g, SailPoint, Saviynt, ForgeRock, CyberArk, Beyond Trust, Okta, Active Directory, Azure AD, Angular, Springboot, and PingFederate etc). Note that experience in all technologies is not mandatory, but experience with some of them is expected.
 </li>
 <li>
 Experience in carrying out advanced integration with the IAM solution, and developing, configuring, leveraging out of the box and custom connectors to onboard applications (e.g., AD, LDAP, Exchange etc).
 </li>
 <li>
 Understanding of the software development life cycle processes.
 
 
 </li>
 </ul>
 
 The Following Skills Are Also Relevant
 
 
 
 <ul>
 <li>
 Understanding of OAUTH, JSON, REST, SOAP, and Network Protocols (e.g., SSL, SSH, FTP, SMTP, HTTP and HTTPS etc).
 </li>
 <li>
 Experience in identity and access configuration of container-based architectures and implementations (e.g., Kubernetes, Docker, etc.).
 </li>
 <li>
 Technical skills including scripting - Python/JAVA/ASP/C#/PowerShell, Coding frameworks.
 </li>
 <li>
 We welcome candidates with various security certifications and exposure to other security domains (e.g. Cloud).
 
 
 </li>
 </ul>
 
 Personal independence.
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect to your Industry.
 
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, Consulting
 
 
 
 Connect with your colleagues.
 
 
 
 Location: Cairo. Egypt
 
 
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 
 
 
 Our commitment to you.
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step.
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub I Cyber Security I Identity and Access Management Tech Lead, Cairo, Egypt

Search 1081+ Iam architect jobs near you this May. New roles added regularly across leading industries. Apply today.