Architect - Identity and Access Management - IAM SME

PepsiCo · Hyderabad

Apply on the company website

We are seeking an experienced IAM Architect to lead the design, architecture, and implementation of enterprise Identity & Access Management solutions across workforce, customer, cloud, application, and non-human identities. The role is responsible for defining IAM strategy, developing architecture standards, conducting technology evaluations and proof-of-concepts (POCs), and leading cross-functional IAM initiatives, M&A programs from inception through deployment.

The ideal candidate combines deep IAM technical expertise with strong architecture, cloud security, stakeholder management, and project leadership skills to drive secure, scalable, and business-aligned identity solutions.

• Lead solution design sessions and produce high-quality architecture deliverables including HLDs, LLDs, sequence diagrams, and integration specifications.
• Translate business requirements into scalable IAM solutions.
• Review and approve IAM designs produced by engineering teams and vendors.
• Provide technical oversight throughout the lifecycle of IAM implementations.
• Lead Proof-of-Concept (POC) initiatives and pilot programs for emerging IAM technologies.
• Present recommendations and business cases to leadership and architecture governance boards.
• Design IAM solutions for Azure, AWS, and GCP environments.
• Develop standards for cloud-native identity services and privileged access controls.
• Implement modern authentication mechanisms including OAuth, OIDC, SAML, FIDO2, Passkeys, and mTLS.
• Define cloud access governance and least-privilege models.
• Collaborate with cloud platform teams to enable secure cloud adoption and migration initiatives.
• Lead and manage IAM cross functional projects from initiation to completion, including:

Planning, Scope Management, Risk Management, Design Reviews, Execution Oversight, Deployment Support, Change Management, Project Closure

• Coordinate activities across security, infrastructure, network, cloud, application, and business teams.
• Manage vendors, integrators, and implementation partners.
• Track project milestones, dependencies, risks, and deliverables.

• 10- 12 years of Identity & Access Management experience.
• 5+ years in IAM Architecture or Technical Lead roles.
• Proven experience delivering enterprise-scale IAM transformation programs.
• Demonstrated experience leading cross-functional initiatives and large technology projects.
• Strong hands-on and architecture experience in: Authentication & Authorization, SSO & Federation, IGA, PAM, Directory Services, Access Certification & Governance, NHI Security.
• Experience designing IAM solutions across: Microsoft Entra ID / Azure, AWS IAM, Google Cloud IAM.   
• Knowledge of OAuth, 2.0 / OIDC, SAML, SCIM, FIDO2 / Passkeys, Conditional Access, PIM / JIT Access, Zero Trust Architecture.
• Experience managing multiple concurrent IAM projects.
• Strong program planning and execution capabilities.
• Experience working within Agile and Waterfall methodologies.
• Experience with one or more of Okta, Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, ForgeRock, HashiCorp Vault.
• Preferred certifications include CISSP, CISM, CCSP, Azure Security Engineer, AWS Security Specialty, Okta Certified Professional/Administrator, CyberArk Defender/Sentry.

• Lead solution design sessions and produce high-quality architecture deliverables including HLDs, LLDs, sequence diagrams, and integration specifications.
• Translate business requirements into scalable IAM solutions.
• Review and approve IAM designs produced by engineering teams and vendors.
• Provide technical oversight throughout the lifecycle of IAM implementations.
• Lead Proof-of-Concept (POC) initiatives and pilot programs for emerging IAM technologies.
• Present recommendations and business cases to leadership and architecture governance boards.
• Design IAM solutions for Azure, AWS, and GCP environments.
• Develop standards for cloud-native identity services and privileged access controls.
• Implement modern authentication mechanisms including OAuth, OIDC, SAML, FIDO2, Passkeys, and mTLS.
• Define cloud access governance and least-privilege models.
• Collaborate with cloud platform teams to enable secure cloud adoption and migration initiatives.
• Lead and manage IAM cross functional projects from initiation to completion, including:

Planning, Scope Management, Risk Management, Design Reviews, Execution Oversight, Deployment Support, Change Management, Project Closure

• Coordinate activities across security, infrastructure, network, cloud, application, and business teams.
• Manage vendors, integrators, and implementation partners.
• Track project milestones, dependencies, risks, and deliverables.

• 10- 12 years of Identity & Access Management experience.
• 5+ years in IAM Architecture or Technical Lead roles.
• Proven experience delivering enterprise-scale IAM transformation programs.
• Demonstrated experience leading cross-functional initiatives and large technology projects.
• Strong hands-on and architecture experience in: Authentication & Authorization, SSO & Federation, IGA, PAM, Directory Services, Access Certification & Governance, NHI Security.
• Experience designing IAM solutions across: Microsoft Entra ID / Azure, AWS IAM, Google Cloud IAM.   
• Knowledge of OAuth, 2.0 / OIDC, SAML, SCIM, FIDO2 / Passkeys, Conditional Access, PIM / JIT Access, Zero Trust Architecture.
• Experience managing multiple concurrent IAM projects.
• Strong program planning and execution capabilities.
• Experience working within Agile and Waterfall methodologies.
• Experience with one or more of Okta, Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, ForgeRock, HashiCorp Vault.
• Preferred certifications include CISSP, CISM, CCSP, Azure Security Engineer, AWS Security Specialty, Okta Certified Professional/Administrator, CyberArk Defender/Sentry.

More jobs at PepsiCo · Security jobs in Hyderabad