Enterprise Solution Architect – Digital Identity Platform

Enterprise Solution Architect to lead the design and implementation of a next-generation Digital Identity Platform supporting CIAM, IGA, PAM, AI Identity Governance, and Multi-Cloud Security capabilities. This strategic role will define enterprise-wide identity architecture, govern technology decisions, and drive the integration of modern identity, security, authorization, and AI governance services across cloud and on-premises environments. The ideal candidate will bring deep expertise in Keycloak, IAM/CIAM, Zero Trust Architecture, AI Agent Identity Governance, API Security, Kubernetes, and Cloud Platforms (Azure/AWS/GCP), along with a proven track record of delivering large-scale enterprise transformation initiatives. Key Responsibilities • Define target-state architecture for Digital Identity and Access Management platforms. • Architect solutions across CIAM, IGA, PAM, AI Identity Governance, and Fine-Grained Authorization. • Lead integration strategy involving Keycloak, MidPoint, OpenBao, Teleport, OpenFGA, OPA, and cloud-native platforms. • Establish security, governance, observability, and compliance frameworks. • Provide technical leadership, architecture governance, and stakeholder advisory. • Drive adoption of Zero Trust, AI governance, and multi-cloud architecture best practices. Required Skills • Enterprise & Solution Architecture • Keycloak, CIAM, IAM, IGA, PAM • OAuth2, OIDC, SAML, SCIM • OpenFGA, OPA, Policy-as-Code • AI Identity Governance & Responsible AI • Azure, AWS, GCP, Kubernetes • API & Integration Architecture • Security Architecture & Zero Trust • TOGAF and Cloud Architecture Frameworks Qualifications • 15+ years of IT experience with 10+ years in Enterprise/Solution Architecture. • Proven experience delivering large-scale IAM or Digital Identity programs. • Strong leadership, stakeholder management, and architecture governance experience. • Cloud, Security, and Architecture certifications preferred (TOGAF, Azure/AWS/GCP Architect, CISSP, CCSP).