{"id":2195397,"url":"https://alion.io/job/garrettmotion-iam-architect","title":"IAM Architect","company":{"id":2036820,"name":"Garrett Motion","domain":"garrettmotion.com","url":"https://alion.io/company/garrettmotion","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":84,"open_postings":8,"ghost_share":0,"stale_share":0.625,"repost_share":0,"time_to_fill_p50_days":51,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":25000,"max_usd":60000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":576},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Ping Identity","optional":false},{"name":"PKI","optional":false},{"name":"ServiceNow","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"closed","first_seen_at":"2026-07-21T14:02:44Z","employer_posted_date":"2026-07-21","last_verified_at":"2026-10-15T03:07:25Z","board_verified":false,"closed_at":"2026-10-15T03:07:25Z","days_open":85,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":85},"description":"1. Position Summary:\nIdentity & Access Management (IAM) Architect is a strategic Cyber Security leadership role responsible for designing, architecting, and implementing modern Identity and Access Management solutions across IT and OT environments. The role drives enterprise IAM transformation initiatives leveraging Microsoft Entra ID, AI-enabled security capabilities, Zero Trust architecture, and advanced authentication technologies to strengthen cyber resilience, privacy, and regulatory compliance for employees, partners, suppliers, and customers.\n2. Key Job Responsibilities\n2.1 Identity & Access Management Platform\nDefine and establish enterprise Authentication and Authorization reference architectures for current, emerging, and next-generation IAM technologies, and drive global adoption across IT, OT, cloud, and manufacturing environments.\nEnforce enterprise Cyber Security standards and controls including Identity Governance, Access Management, Encryption, Logging, Conditional Access, and Privileged Access controls as part of the IAM reference architecture.\nDesign and implement scalable Identity and Access Management solutions to strengthen Cyber Security posture across enterprise IT systems, manufacturing plants, and digital platforms.\nArchitect and deploy integrated IAM solutions for hybrid environments spanning on-premises and cloud platforms, ensuring scalability, reliability, reusability, and alignment with strategic business and technology roadmaps.\nDevelop, maintain, and align enterprise Information Security policies, standards, and governance processes with industry best practices, Zero Trust principles, regulatory requirements, and secure cloud adoption strategies.\nLead and champion modern Identity solutions for digital transformation initiatives including Data Lakes, Smart Manufacturing, Industry 4.0, eCommerce, Factory Digitization, SaaS modernization, and AI-enabled business platforms.\nDesign secure identity architecture leveraging Microsoft Entra ID, SailPoint, CyberArk, PKI, Single Sign-On, adaptive authentication, and passwordless technologies to enhance user experience and enterprise security resilience.\n2.2 Privileged Account Management\nDesign, implement, and mature the enterprise Privileged Access Management (PAM) program to secure privileged, administrative, and service accounts across global applications, infrastructure, cloud platforms, and OT environments.\nLead onboarding of critical and SOX-regulated applications into the CyberArk platform and standardize privileged access controls to ensure SOX ITGC compliance is implemented by design.\nEnsure secure password vaulting, credential rotation, privileged session monitoring, and secrets management capabilities are implemented for all onboarded administrative and privileged accounts.\nDefine and execute the enterprise roadmap for privileged identity governance and elevated access management leveraging CyberArk, Microsoft Entra PIM, and Zero Trust security principles.\nImplement least privilege, Just-In-Time (JIT), and Just-Enough-Administration (JEA) strategies to minimize identity attack surface and strengthen enterprise cyber resilience.\nDevelop and publish enterprise standards, architectural guidelines, and operational controls for Privileged Access Management platforms, ensuring consistent adoption and governance across global IT and business environments.\nEnhance privileged access security through integration with Identity Governance, Multi-Factor Authentication (MFA), PKI, adaptive authentication, and AI-driven risk analytics capabilities.\nDrive continuous improvement of PAM controls aligned to Confidentiality, Integrity, and Availability (CIA) principles, regulatory requirements, and industry best practices.\n2.3 Single Sign-on and Access Governance\nDesign and implement a unified enterprise authentication platform supporting Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across diverse enterprise, cloud, OT, and SaaS technology platforms.\nDefine secure authentication architecture leveraging Microsoft Entra ID, federation services, Conditional Access, adaptive authentication, and Zero Trust principles to protect against modern cyber threats, credential compromise, and MFA bypass techniques.\nEnsure all critical enterprise applications are integrated with secure SSO, centralized identity governance, and phishing-resistant authentication mechanisms.\nDrive enterprise-wide Least Privilege and Role-Based Access Control (RBAC) initiatives to strengthen identity security, regulatory compliance, and operational efficiency.\nImplement and enhance integrated Identity Governance and Administration (IGA) capabilities including automated provisioning, access certifications, Segregation of Duties (SoD), Joiner-Mover-Leaver (JML) processes, and policy-based access controls.\nImprove digital workplace experience by delivering seamless, secure, and frictionless authentication services for employees, partners, suppliers, and customers.\nEnhance passwordless authentication architecture using Kerberos, PKI, certificate-based authentication, Windows Hello for Business, FIDO2, biometrics, and device-based trust technologies.\nChampion enterprise security architecture best practices and promote global cross-functional collaboration for standardization, knowledge sharing, and continuous improvement of IAM and access governance capabilities.\nIntegrate AI-driven identity analytics, User and Entity Behavior Analytics (UEBA), and risk-based access controls to enable intelligent and adaptive authentication decisions.\n3. Education / Qualifications\nBachelor’s degree in Information Technology or related discipline\n4. Experience\n12+ years of IT experience and 8 years of Identity Management. Must have delivered the role of Identity Management Lead/ Identity Management Technical Manager for 3 years\n5. Key Skills and Knowledge\nStrong hands-on experience with Identity Governance and Administration (IGA) platforms such as SailPoint IdentityIQ, SailPoint Identity Security Cloud, IBM Tivoli Identity Manager, or equivalent IAM technologies, including workflow configuration, Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), birthright provisioning, access certifications, and user lifecycle management.\nDeep technical expertise in Microsoft Entra ID (Azure AD), Active Directory, hybrid identity integration, user and group provisioning, directory synchronization, and enterprise identity federation.\nStrong experience in designing and implementing Public Key Infrastructure (PKI), certificate lifecycle management, certificate-based authentication, and cryptographic security controls.\nHands-on experience with Privileged Access Management (PAM) solutions such as CyberArk including privileged credential vaulting, session monitoring, secrets management, and Just-In-Time privileged access.\nProven expertise in Single Sign-On (SSO) and federation technologies including Microsoft Entra ID, Ping Identity, Okta, SAML, OAuth2, OpenID Connect (OIDC), and SCIM integration frameworks.\nStrong experience implementing Multi-Factor Authentication (MFA), passwordless authentication, Windows Hello for Business, FIDO2, biometric authentication, and adaptive/risk-based access control solutions.\nGood understanding of contemporary and emerging identity security technologies including Zero Trust architecture, AI-driven identity analytics, Identity Threat Detection & Response (ITDR), blockchain-based identity models, decentralized identity, and machine identity security.\nExperience securing cloud and SaaS environments across platforms such as Microsoft Azure, AWS, Google Cloud Platform, ServiceNow, SAP, and Salesforce.\nStrong understanding of cybersecurity, governance, risk, and compliance frameworks including SOX, NIST, ISO 27001, GDPR, and global data privacy and security regulations.\nAbility to perform risk assessments, business impact analysis, identity security reviews, control assessments, and vulnerability analysis using manual and automated security tools.\nStrong leadership, stakeholder management, interpersonal, presentation, and communication skills with the ability to influence and collaborate effectively across all organizational levels globally.\nAbility to translate business requirements, cybersecurity objectives, and digital transformation strategies into scalable IAM architecture and actionable implementation plans.\nProven ability to work effectively within global and regional operational support models while promoting collaboration, innovation, and knowledge sharing across teams.\nHighly organized, analytical, and solution-oriented professional with strong problem-solving, service design, architecture, and implementation capabilities.","description_format":"text","description_chars":8746,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Education","Media & Entertainment","Identity Management"],"lifecycle":[{"event":"open","at":"2026-10-09T19:11:19Z"},{"event":"close","at":"2026-10-15T03:07:25Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/garrettmotion-iam-architect","json_url":"https://alion.io/job/garrettmotion-iam-architect.json","meta":{"generated_at":"2026-10-16T01:19:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2084,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2036820},"rest":"https://alion.io/mcp/rest/get_company?id=2036820"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgarrettmotion-iam-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgarrettmotion-iam-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgarrettmotion-iam-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/garrettmotion-iam-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgarrettmotion-iam-architect"}]}