Identity Security Architect – Cybersecurity Consulting

About the role

PwC is looking for an experienced Identity and Access Management (IAM) Architect to lead the design, implementation and governance of enterprise-wide IAM solutions for its clients within the Cyber Technology and Transformation advisory team. The role is client-facing and sits at manager level.

Key responsibilities

• Define and implement IAM architecture strategies aligned with clients' business and security objectives.
• Design scalable, secure identity solutions covering authentication, authorization, identity lifecycle management, CIAM and PAM.
• Act as technical authority for IAM tools and platforms such as Azure AD, ADFS, SailPoint, Saviynt, Okta, CyberArk and Forgerock.
• Lead the client project integrating legacy and modern identity providers into a unified IAM framework.
• Establish architecture principles and guidelines, including scalability, resilience, modularity and security-by-design.
• Lead deployment and configuration of IAM solutions in cloud and on-premises environments.
• Provide integration designs and architectural guidance for new applications, including APIs, SSO and federation protocols (SAML, OAuth, OpenID Connect).
• Review IAM systems for performance, availability and security, and promote reference architectures for emerging IAM technologies.
• Develop and enforce IAM policies, standards and best practices, and help clients meet regulatory requirements such as GDPR, SOX and HIPAA.
• Participate in enterprise architecture governance and contribute to strategic planning.

Required profile

• Bachelor's or Master's degree in Computer Science, Information Technology, Engineering or a related field.
• 8+ years of experience in IAM architecture and implementation.
• Proven experience with IAM platforms such as SailPoint, ForgeRock, Okta or CyberArk.
• Strong understanding of directory services (Active Directory, LDAP), PKI and identity federation.
• Understanding of public, private and hybrid cloud architectures.
• Certifications such as CISSP or CISM are a plus.

Required skills

• IAM protocols and standards: SAML, OAuth2, OpenID Connect, SCIM.
• Familiarity with Azure, AWS and GCP and hybrid identity models.
• Knowledge of Zero Trust Architecture and modern security frameworks.
• Experience with CI/CD pipelines and DevSecOps is a plus.
• Strong analytical, communication and stakeholder management skills, and the ability to lead cross-functional teams.