Cymmetri
Website:
cymmetri.com
Job details:
Role Overview
We are looking for an experienced Solution Architect – IAM / Identity Security with 8–15 years of overall experience and strong expertise in Identity and Access Management, Identity Governance, and enterprise identity security.
The role will be responsible for architecting complex enterprise identity environments and translating business and security requirements into scalable, secure, and implementable identity solutions using the Cymmetri platform.
The ideal candidate will be comfortable working directly with CIOs, CISOs, enterprise security teams, customers, partners, Product, Engineering, and Delivery teams. The role requires someone who can think beyond implementation and own the complete journey from Business Requirement → Identity Architecture → Integration → Security → Deployment → Successful Production Rollout.
Key Responsibilities
- Identity Architecture & Solution Design: Understand complex business, security, and technical requirements and design scalable end-to-end IAM/IGA and Identity Security architectures.
- IAM & Identity Governance: Design solutions covering Identity Governance, Joiner-Mover-Leaver (JML), Access Governance, RBAC, Segregation of Duties (SoD), Access Reviews, provisioning, and de-provisioning.
- Authentication & Federation: Design and guide enterprise authentication and federation solutions involving SSO, MFA, SAML, OAuth 2.0, OIDC, SCIM, and LDAP.
- Enterprise Integrations: Architect integrations with Active Directory/Entra ID, HRMS platforms, SAP, databases, cloud platforms, and enterprise applications, ensuring secure and reliable identity and access flows.
- Security Architecture: Incorporate security principles across identity solutions, including PAM, Identity Risk, Identity Threat Detection & Response (ITDR), Zero Trust, least privilege, and access controls.
- Infrastructure & Deployment Architecture: Design solutions across on-premise, cloud, and hybrid environments, including considerations for High Availability (HA), Disaster Recovery (DR), scalability, performance, and business continuity.
- Customer & Stakeholder Engagement: Lead architecture discussions, workshops, requirement-gathering sessions, and technical presentations with CIOs, CISOs, enterprise architects, security teams, and other senior stakeholders.
- Pre-Sales & Solution Consulting: Support Sales and Pre-Sales teams with technical discovery, RFP/RFI responses, solution proposals, architecture presentations, demonstrations, and Proofs of Concept (POCs).
- Implementation & Production Rollout: Work closely with Product, Engineering, and Delivery teams to translate architecture into implementation plans and provide technical guidance through integration, testing, deployment, and production rollout.
- Technical Problem Solving: Identify architectural risks, integration challenges, and technical dependencies and work with relevant teams to develop effective solutions.
- Architecture Documentation: Create and maintain solution architecture documents, integration designs, data flows, deployment architectures, security designs, and technical specifications.
- Technology & Product Collaboration: Work with Product and Engineering teams to identify product capabilities, technical gaps, and opportunities to improve enterprise solution design.
Preferred Qualifications
- 8–15 years of overall experience with significant experience in IAM, IGA, Identity Security, Cybersecurity, or Enterprise Security Architecture.
- Strong hands-on understanding of:
o Identity Governance & Administration (IGA)
o Joiner-Mover-Leaver (JML)
o Access Governance
o Role-Based Access Control (RBAC)
o Segregation of Duties (SoD)
o Access Reviews / Certifications
o Identity Lifecycle Management
o Provisioning & De-provisioning
- Strong knowledge of SSO, MFA, SAML, OAuth 2.0, OIDC, SCIM, and LDAP.
- Experience designing integrations with Active Directory/Entra ID, SAP, HRMS, databases, cloud platforms, and enterprise applications.
- Understanding of PAM, Identity Risk, ITDR, Zero Trust, least privilege, and identity security principles.
- Experience designing HA/DR, on-premise, cloud, and hybrid architectures.
- Knowledge of Docker, Kubernetes, OpenShift, AKS/EKS or similar container and orchestration technologies is an advantage.
- Experience with enterprise IAM/IGA platforms is preferred.
- Strong understanding of APIs, application integration patterns, databases, networking, and enterprise infrastructure.
- Excellent communication, presentation, documentation, and stakeholder management skills.
- Ability to explain complex technical concepts clearly to both technical and business stakeholders.
- Strong problem-solving and analytical capabilities with an ability to assess technical trade-offs and recommend appropriate solutions.
Location - Mumbai
Role - Full time in office
Click on Apply to know more.
