Iam Architect

Identity & Access Management Architect is critical and strategic Cyber Security role driving key initiatives such as design, architecture & implementation of standardized Active Directory environment for the Manufacturing Plants, deploying new contemporary technologies such as Blockchain to enable Cyber Security protection, privacy & compliance for suppliers & customers, architect new system to enable role based access provisioning to improve Security & Productivity for Access provisioning on engineering and IT systems for employees on day one of joining & during role changes. Design & Implement defense in depth-strategy on Identity Management solutions. Develop strategy & Implement next generation authentication technology such as Risk Based Access Control and Biometric authentication. IAM architect will play a key role in unifying and standardizing Identity Management systems globally, enable digital workplace experience for Employees, Partners, customers and stakeholders.

**2.1 Identity & Access Management Platform**

Define Authentication and Authorization reference architectures for existing, new, and emerging IAM technologies & drive adoption globally across all IT Systems
Enforce Garrett Cyber Security Controls such as Access Management, Encryption, Logging requirements in the reference architecture.
Design Identity and Access Management architecture & solutions to enhance Cyber Security on IT and Manufacturing Plant systems
Architect & implement Identity Management solutions for both on-premise & Cloud based systems that are coherent, reusable, reliable, and phased architecture to help the IT & business systems to scale while aligning to strategic vision
Create, maintain, and align the organization’s Information Security policies, standards, and processes with industry best practices and business needs in the adoption of cloud services and technologies
Architect & Champion right Identity solutions for Digital transformation initiatives such as Data Lake, eCommerce, Factory Digitization, etc

**2.3 Single Sing-on and Access Governance
Design & Enable unified platform for second factor authentication that can be integrated to the diverse technology platforms in the Garrett systems using Single Sign on platform

Drive the least privileged Access control programs across the organization
Implement and Drive Integrated and Automated Access governance programs across the organization
Enhance the Digital workspace experience for the workforce by implementing Secure and Seamless authentication
Enhance password-less architecture using Kerberos, Single-Sign-on, certificate, and Windows Hello features to enhance authentication user experience and Cyber Security
Champion technical security configuration architecture expertise by advancing cross-organizational information sharing globally

**2.4 Differentiated technology**

Architect & implement the contemporary Identity protection technologies that leverages use of technologies such as Blockchain-based Identity Management solution across the organization.
Define & implement roadmap on de-centralized identity management services across the organization
Implement and Enhance Risk-based Dynamic access control technology to mitigate identity compromises. Implement dynamic risk score using Artificial Intelligence / Machine Learning to address the Identity-related risks
Evaluate & implement the suitability of enhancing device based authentication along with Identity to ensure the endpoint security is accounted in the access validation

**Education**:

- Bachelor’s degree in Information Technology or related discipline

**Key Skills**:

- Must have 10+ years hands-on experience on Identity Management platform such as SailPoint, Tivoli in configuring workflows, Role-based Access Control, Birth Right Provisioning, User Life Cycle, etc.
- Must have hands-on experience in Active directory User provisioning, group provisioning, PKI services.
- Must have hands-on experience on Single Sign-On services such as PING, OKTA, etc.
- Understanding of contemporary technologies such as Blockchain based identity management, Risk based authentication, etc
- Must have hands-on experience in deploying multi-factor authentication services
- Strong leadership, interpersonal and communication skills (written and oral) with the ability to communicate at all organizational levels.
- Ability to translate business issues/requirements and objectives into action plans.
- Ability to promote strong teamwork in a global/regional operational support model.
- Strong knowledge of the global data security regulatory environment.
- Proficiency in performing risk, business impact, control, and vulnerability assessments using manual or automated tools.
- Organized, responsive, and highly thorough problem solver.
- Executing Service Design and implementation.