IAM Architect

• Senior experience in Identity & Access Management (IAM) architecture.
• Experience in CIAM (Customer Identity & Access Management) projects.
• Proficiency in OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and JWT.
• Experience in identity federation.
• Solid knowledge of ADFS.
• Experience with LDAP/OpenDJ directories or equivalents.
• Experience in defining authorization models based on roles, scopes, and claims.
• Experience in integrating IAM solutions with APIs and API Gateway.
• Knowledge of designing authentication flows, MFA, refresh tokens, and step-up authentication.
• Ability to prepare architecture documentation (HLD/LLD).
• Experience working with Architecture, Security, and Development teams.
• Ability to manage technical risks and dependencies.

• Experience with Microsoft Entra ID.
• Experience with Microsoft Entra External ID or Azure AD B2C.
• Experience with DUO MFA.
• Knowledge of OpenDJ LDAP.
• Experience with Flex Gateway or MuleSoft.
• Experience in banking environments or digital channels.
• Experience in transactional authorization.
• Security knowledge for web and mobile applications.
• Experience in migrations from legacy directories to cloud solutions.
• Experience in hybrid identity architectures.

Are you looking for an opportunity to lead innovative projects in the field of IT service management? Join a leading company in the information technology sector, recognized for its commitment to innovation, professional development, and a dynamic work environment. Here, you will be able to enhance your skills, collaborate with multidisciplinary teams, and make a difference in projects that impact large organizations.

• Lead the functional and technical design of the end-to-end IAM architecture.
• Define the target identity and access architecture aligned with client needs.
• Design and implement authentication, authorization, and identity federation models.
• Act as a technical reference among the Architecture, Security, Development, API Gateway, and identity platform teams.
• Design models for roles, scopes, claims, and identity attributes.
• Define authentication flows (login, logout, refresh, MFA, step-up, and transactional authorization).
• Design the integration between Microsoft Entra External ID, ADFS, OpenDJ LDAP, API Gateway, and applications.
• Guarantee the security, scalability, and governance of the IAM solution.
• Prepare functional and technical documentation (HLD, LLD, diagrams, decision and risk matrices).
• Lead workshops, gather requirements, and coordinate the different teams involved.
• Advise on the transition from legacy architectures toward hybrid or cloud models.

We are currently looking for an IAM (Identity & Access Management) Architect profile to join an important project in a 100% remote modality.

Duties

Mandatory requirements

Preferred qualifications