IAM Architect || Remote || Must have linkedin and 11+ years ||

IAM Architect

Remote

Must have linkedin and 11+ years

Responsibilities:

• Design and manage IAM policies, roles, and permissions across cloud platforms.
• Implement and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federated
• identity solutions.
• Design and implement Keycloak realms, clients, roles, and policies to replicate or enhance the
• existing setup.
• Configure SAML and OIDC providers in Keycloak for identity federation and SSO.
• Collaborate with product and customer success teams to onboard new clients and tenancies.
• Configure and validate IDP integrations and access flows for customer environments.
• Collaborate with security teams to enforce least privilege and zero-trust principles.
• Integrate and manage identity providers (IdPs).
• Onboard new tenancies and clients, ensuring proper configuration of access controls and federation.
• Perform end-to-end testing with customers to ensure successful onboarding and secure access.
• Document onboarding processes and provide technical guidance to internal and external
• stakeholders.
• Integrate IAM with CI/CD pipelines and infrastructure-as-code tools.
• Monitor and audit access controls, ensuring compliance with security standards.
• Conduct access reviews, audits, and compliance checks.
• Build and maintain CI/CD pipelines using tools like GitHub Actions, Azure DevOps, or Jenkins.
• Automate infrastructure provisioning using Terraform.
• Work with application teams and end users for user login issues.
• Skills Required:
• Strong understanding of IAM concepts and technologies.
• Experience with Keycloak, SAML, OIDC, and federated identity management.
• Familiarity with cloud platforms and their IAM services.
• Basic working knowledge of Microsoft Entra.
• Knowledge of CI/CD tools and infrastructure automation.
• Excellent communication and collaboration skills.

Preferred Tools:

• Keycloak
• GitHub Actions
• Azure DevOps
• Jenkins
• Terraform

Microsoft Entra

Thanks,

KK