Senior architect

We are hiring for Senior Architect in IAM (Keycloak & Microsoft Entra ID) with hands on experience in IAM, 3+ in Keycloak, 3+ in Entra ID). Role: Senior Architect Experience: 12-16 Years Job Type: Full Time Employment IAM Architecture (SAML, OIDC, OAuth2, SCIM, MFA, Conditional Access) Keycloak realm design, custom providers (SPI), themes, LDAP/AD, clustering, HA Microsoft Entra ID app registrations, External ID (B2 C), IEF/custom policies, Graph API Identity governance & lifecycle (joiner–mover–leaver), Just In Time & SCIM provisioning Cloud security patterns, Zero Trust, secrets, certificates, Terraform/Git Ops, Kubernetes Azure, Kubernetes/containers, CI/CD, SOC2/ISO 27001/NIST experience, PAM Detailed Job Description Role: Senior Architect – Identity & Access Management (Keycloak & Microsoft Entra ID) About the Role We are seeking a seasoned IAM Architect to own the strategy, architecture, and delivery of our identity platform spanning Keycloak and Microsoft Entra ID. You'll define reference architectures, lead solution design for SSO/federation, govern access and lifecycle, and partner with product, security, and platform teams to deliver a secure, scalable, developerfriendly identity fabric. Architecture & Strategy Define and evolve the enterprise identity reference architecture (workforce, B2 B, B2 C). Create roadmaps for modernization (onprem cloud/hybrid), legacy deprecation, and consolidation. Build themes/branding for B2 C; configure JDBC storage, session policies, and crossrealm flows. Productionize Keycloak: clustering, HA, backup/DR, observability (Prometheus/Grafana), performance tuning. Microsoft Entra ID (Azure AD) Architect app registrations, enterprise apps, Conditional Access, MFA, Identity Protection. Lead External ID (formerly B2 C) designs using custom policies (IEF), user journeys, social logins, and OIDC/OAuth2 flows. Define target operating model for identity operations, auditability, and evidence collection. Security & Compliance Apply best practices aligned to NIST, ISO 27001, CIS, SOC2, and data protection obligations. Delivery & Leadership Lead solutioning, estimations, and architecture governance; 12+ years of overall experience, with 5+ years dedicated to IAM architecture/engineering. ~3+ years with Microsoft Entra ID (Azure AD), including Conditional Access/MFA and External ID (B2 C). ~ Experience with hybrid identity (onprem AD, Azure AD Connect/Cloud Sync) and identity federation. ~ Strong with Terraform, Kubernetes/Containers, CI/CD, Git Ops, REST/Graph APIs. ~ Proven track record producing HLD/LLD, architecture decision records (ADRs), and reference implementations. ~ Performance tuning of auth services; Regulatory experience: Tools & Technologies IAM: Keycloak (Quarkus), Microsoft Entra ID (Azure AD), Entra External ID, Entra ID Governance Standards: OIDC, OAuth2, SAML, SCIM, JWT/JWS/JWE, Web Authn/FIDO2 Integration: MSAL, Microsoft Graph API, Keycloak Admin API Infra/Dev Ops: Terraform, Helm, Kubernetes, Docker, Git Hub/Git Lab, Azure Dev Ops, Argo CD Observability: Education & Certifications Bachelor's/Master's in Computer Science, Information Security, or equivalent experience. ~ Microsoft Identity & Access Administrator (SC-300), Azure Solutions Architect (AZ305), CISSP/CCSP, Okta/Forgerock (for comparative architecture). Competitive salary and benefits package Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards Annual health check-ups Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents Persistent Ltd. is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We support hybrid work and flexible hours to fit diverse lifestyles. Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities. If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment Let’s unleash your full potential at Persistent - persistent.