Identity Security Architect – Cybersecurity Consulting

About the role

PwC Switzerland is looking for a Manager - Identity Security Architect to join its fast-growing Cyber Technology and Transformation team. The team supports clients through the whole cyber security journey, from technology assessments and solution selection to defining cyber strategy. The role defines and implements IAM architecture strategies aligned with clients' business and security objectives.

Key responsibilities

• Design scalable and secure identity solutions covering authentication, authorization, identity lifecycle management, CIAM and PAM.
• Serve as technical authority for IAM tools and platforms such as Azure AD, ADFS, SailPoint, Saviynt, Okta and CyberArk.
• Lead the client project integrating legacy and modern identity providers into a unified IAM framework.
• Develop architecture principles and guidelines, including scalability, resilience, modularity and security-by-design.
• Lead deployment and configuration of IAM solutions in cloud and on-premises environments.
• Provide IAM designs and guidelines for new applications, including APIs, SSO and federation protocols (SAML, OAuth, OpenID Connect).
• Review IAM systems for performance, availability and security, and drive adoption of reference architectures.
• Enforce IAM policies and standards, and help clients meet regulatory requirements such as GDPR, SOX and HIPAA.
• Participate in enterprise architecture governance and strategic planning.

Required profile

• Bachelor's or Master's degree in Computer Science, Information Technology, Engineering or a related field.
• 8+ years of experience in IAM architecture and implementation.
• Proven experience with IAM platforms such as SailPoint, ForgeRock, Okta or CyberArk.
• Strong understanding of directory services (Active Directory, LDAP), PKI and identity federation.
• Understanding of public, private and hybrid cloud architectures.
• Certifications such as CISSP or CISM are a plus.

Required skills

• IAM protocols and standards: SAML, OAuth2, OpenID Connect, SCIM.
• Familiarity with Azure, AWS and GCP and hybrid identity models.
• Knowledge of Zero Trust Architecture and modern security frameworks.
• Experience with CI/CD pipelines and DevSecOps is a plus.
• Strong analytical skills, stakeholder management and ability to lead cross-functional teams.