{"id":1282925,"url":"https://alion.io/job/hcltech-domain-architect-iam-operations","title":"Domain Architect - IAM Operations","company":{"id":225,"name":"HCLTech","domain":"hcltech.com","url":"https://alion.io/company/hcltech","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Jersey City, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":123000,"max_usd":245000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":344},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PCI DSS","optional":false},{"name":"Ping Identity","optional":false},{"name":"PowerShell","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-09-26T03:43:44Z","employer_posted_date":"2026-09-26","last_verified_at":"2026-10-14T17:55:45Z","board_verified":true,"closed_at":null,"days_open":18,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":18},"description":"Job Summary\n\nYears of Experience\n\n10+ years of experience designing, architecting, implementing, and leading enterprise Identity Governance & Administration (IGA) and Single Sign-On (SSO) solutions. \nProven experience delivering large-scale IAM transformations across cloud, on-premises, and hybrid environments.\n\nGeneral Description\n\nServe as the Subject Matter Expert (SME) for Identity Governance, Access Management, Authentication, and Federation technologies. \nDefine enterprise IAM strategy, target architecture, operating models, and governance frameworks aligned with business and security objectives. \nLead customer workshops, architecture assessments, discovery sessions, and solution design engagements. \nCollaborate with security, infrastructure, application, cloud, and business teams to deliver scalable identity governance and access management solutions. \nAssess existing IAM environments and define modernization roadmaps focusing on automation, compliance, identity lifecycle management, and Zero Trust principles. \nProvide architectural governance, solution reviews, technical leadership, and implementation oversight for IGA and SSO initiatives.\n\nKey Responsibilities\n\nGeneral Description\n\nServe as the Subject Matter Expert (SME) for Identity Governance, Access Management, Authentication, and Federation technologies. \nDefine enterprise IAM strategy, target architecture, operating models, and governance frameworks aligned with business and security objectives. \nLead customer workshops, architecture assessments, discovery sessions, and solution design engagements. \nCollaborate with security, infrastructure, application, cloud, and business teams to deliver scalable identity governance and access management solutions. \nAssess existing IAM environments and define modernization roadmaps focusing on automation, compliance, identity lifecycle management, and Zero Trust principles. \nProvide architectural governance, solution reviews, technical leadership, and implementation oversight for IGA and SSO initiatives.\n\nTechnical Requirements\n\nSkill Requirements\n\nTechnical Requirements\n\nExtensive experience designing and deploying Identity Governance solutions using Saviynt, Microsoft Entra ID Governance, or equivalent platforms. \nStrong expertise in identity lifecycle management including provisioning, de-provisioning, birthright access, role management, certifications, access requests, and SoD controls. \nExperience designing Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), governance groups, and entitlement management frameworks. \nDeep understanding of SSO, authentication, authorization, federation, and identity protocols such as SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, Kerberos, LDAP, and WS-Federation. \nHands-on experience with Microsoft Entra ID, Okta, Ping Identity, ForgeRock, or similar IAM platforms. \nDesign High-Level Design (HLD) and Low-Level Design (LLD) documents for IAM solutions supporting cloud, on-premises, and hybrid architectures. \nLead application onboarding strategies for SaaS, custom, legacy, cloud, and enterprise applications. \nExperience integrating IAM platforms with Active Directory, Entra ID, HR systems, ServiceNow, MFA solutions, SIEM tools, and enterprise applications. \nExpertise in governance reporting, compliance management, certification campaigns, access reviews, and audit remediation activities. \nStrong understanding of Zero Trust Architecture and modern identity-centric security models. \nExperience developing integration solutions using REST APIs, web services, SCIM, PowerShell, java, or other automation technologies. \nKnowledge of regulatory and compliance frameworks including SOX, GDPR, HIPAA, PCI-DSS, ISO 27001, NIST, and CIS Controls. \nAbility to support RFPs, solution proposals, architecture reviews, and customer-facing technical discussions.\n\nSoft Skills\n\nExcellent Verbal and written communication skills in English.\nAbility to present solutions to clients in person and remotely if needed.\nGood documentation skills that will enable creation of design documents for the technical solutions proposed.\nExcellent problem-solving skills.\nGood collaboration skills in working with virtual and distributed teams.\n\nCertifications\n\nGood to have relevant IAM certifications such as:\nSaviynt L100, L200 trainings\nMicrosoft Azure Security Engineer\nAZ- 900 Azure Fundamentals\n\nEducational Qualifications\n\nUniversity degree in IT or/and IT Security\n\nOther Requirements","description_format":"text","description_chars":4480,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-09-26T03:43:44Z"}],"visa":[],"liveness":{"score":71,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.787,"p_room":0.9,"age_days":18,"expected_fill_days":27,"reasons":["conf:0","velocity","win:mid","comp:brand"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/hcltech-domain-architect-iam-operations","json_url":"https://alion.io/job/hcltech-domain-architect-iam-operations.json","meta":{"generated_at":"2026-10-14T22:02:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29589,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":225},"rest":"https://alion.io/mcp/rest/get_company?id=225"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhcltech-domain-architect-iam-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhcltech-domain-architect-iam-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhcltech-domain-architect-iam-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hcltech-domain-architect-iam-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhcltech-domain-architect-iam-operations"}]}