IAM Lead Designer, AVP
Deutsche Bank · Pune
Job Description:
Job Title: IAM Lead Designer
Location: Pune, India
Corporate Title: AVP
Role Description
- Assistant Vice President – IAM Lead Designer, responsible for end‑to‑end solution and detailed design ownership of the Accessio IAM platform (Day 2 enhancements), operating within a regulated banking environment.
- The role is accountable for shaping, owning, and governing high‑quality IAM solution designs across SailPoint (IGA) and ForgeRock (Access Management), ensuring that all designs are secure by design, resilient, scalable, operable, and audit‑ready. As a senior design authority, the Lead Designer owns design outcomes, translates complex business and regulatory requirements into clear, implementable technical designs, and ensures that delivery teams execute consistently against approved design intent. The role operates as a key contributor in senior design and governance forums (including SDA), working closely with CIO organizations, Enterprise Architecture, Security, Risk, Audit stakeholders, delivery leadership, and strategic vendors to ensure alignment with enterprise standards, regulatory expectations, and long‑term platform strategy.
- This position emphasizes hands‑on design leadership and delivery accountability, with selective architectural alignment responsibilities, and provides Level 3 design ownership to support production stability, root‑cause resolution, and continuous platform improvement.
What we’ll offer you
As part of our flexible scheme, here are just some of the benefits that you’ll enjoy
- Best in class leave policy
- Gender neutral parental leaves
- 100% reimbursement under childcare assistance benefit (gender neutral)
- Sponsorship for Industry relevant certifications and education
- Employee Assistance Program for you and your family members
- Comprehensive Hospitalization Insurance for you and your dependents
- Accident and Term life Insurance
- Complementary Health screening for 35 yrs. and above
Your key responsibilities
- Accountable for end‑to‑end solution and detailed design ownership for Accessio Day 2 enhancements, ensuring solutions meet business outcomes, security controls, regulatory obligations, and operational standards across ForgeRock and SailPoint platforms.
- Act as the Lead Designer and design sign‑off authority for IAM initiatives, ensuring functional, non‑functional, and control requirements are translated into robust, reusable, and supportable designs.
- Produce, own, and govern design artefacts, including:
- Functional Specification Documents (FSDs)
- Technical Design Documents (TDDs)
- Integration, configuration, and interface designs
- Critically review and challenge vendor‑provided designs & effort ensuring solutions meet bank standards, avoid unnecessary complexity, and are fit for long‑term operation and audit scrutiny.
- Design and govern integration patterns across:
- SailPoint (IGA) – identity lifecycle, access requests, certifications, RBAC
- ForgeRock (AM / IDM) – authentication, authorization, federation, access enforcement
- Directory services (AD / LDAP), cloud platforms, APIs, and enterprise applications
- Partner with business analysts to refine requirements and ensure design traceability, and with engineering leads to ensure designs are implementation‑ready and delivery‑feasible.
- Identify, document, and manage design‑level risks (security, performance, scalability, resilience, operability), ensuring mitigations are embedded within approved designs.
- Ensure all designs adhere to identity lifecycle governance, RBAC principles, segregation of duties, and access control policies, in collaboration with the RBAC Architect.
- Provide design leadership for migration and transition initiatives from legacy IAM platforms to Accessio, ensuring continuity of controls and minimal operational risk.
- Maintain high‑quality, audit‑ready design documentation, ensuring alignment with risk, compliance, and regulatory control frameworks.
- Work in partnership with Day 2 Project Management to ensure design deliverables meet defined quality gates, timelines, and governance milestones.
- Continuously improve the design maturity of the Accessio platform by driving reuse, simplification, and standardization across SailPoint and ForgeRock implementations.
Technical Governance, Engineering Oversight & Operations
- Provide senior design leadership and governance oversight for IAM Day 2 enhancements delivered by internal and vendor engineering teams.
- Review and approve FSDs and TDDs with a focus on design completeness, control effectiveness, clarity, and reuse.
- Guide engineering teams on design intent, configuration standards, extensibility models, and integration approaches, ensuring fidelity to approved designs.
- Ensure all configurable components and extensions are designed for reuse, stability, maintainability, and performance, avoiding point‑in‑time or tactical solutions.
- Define and enforce design quality standards that support effective testing, deployment, and release readiness.
- Support defect triage and root‑cause analysis, providing design‑level direction for systemic or recurring issues.
- Promote reuse of approved design patterns, shared services, and common integration frameworks across IAM initiatives.
- Provide Level 3 design ownership for production incidents, ensuring corrective actions address root design causes and strengthen platform resilience.
- Review design‑relevant code artefacts and documentation at a governance level to ensure alignment with approved designs, security standards, and compliance expectations.
Note: Direct coding is expected only on an exception basis (e.g., proof‑of‑concepts, complex design validation, or critical issue diagnosis).
Your skills and experience
Required Skills & Experience
- 10–12 years of overall experience, with 6+ years of relevant professional experience in IAM, security architecture, or enterprise platforms.
- At least 2 years of proven experience in a senior IAM Architect / Lead Designer role with design ownership responsibilities.
- At least 2 years of experience across IAM domains, including:
- Identity Governance (IGA)
- Access Management and Federation
- RBAC and identity lifecycle management.
- Demonstrated experience with SailPoint and/or ForgeRock in an architectural or design authority capacity.
- Proven skills demonstrated through interviews, design reviews, references, or recognized certifications.
Nice to Have
- Experience working in banking or financial services, particularly within regulated environments.
- Strong exposure to SailPoint and ForgeRock architectures.
- Experience with IAM tools OIM, Active Directory
- Exposure to audit‑driven IAM controls, access certifications, and regulatory environment.
- Experience working with global and distributed delivery teams.
- Strong stakeholder management, governance, and architectural decision‑making skills.
Why Join Us
- Strong focus on learning, certifications, and career growth
- Inclusive benefits including gender‑neutral parental and childcare support
- Comprehensive health, life, and insurance coverage
- Opportunity to work on strategic, enterprise‑wide IAM platforms
Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.
How we’ll support you
- Training and development to help you excel in your career
- Coaching and support from experts in your team
- A culture of continuous learning to aid progression
- A range of flexible benefits that you can tailor to suit your needs
About us and our teams
Please visit our company website for further information:
https://www.db.com/company/company.html
We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.
Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.
We welcome applications from all people and promote a positive, fair and inclusive work environment.