Security Architect - IAM & Machine Identities The Security Architect designs and implements the organization’s security infrastructure, with a particular focus on Identity and Access Management (IAM). The role ensures that both human and non-human identities (applications, workloads, APIs, AI agents) are properly governed and protected, while supporting innovation and digital transformation initiatives. Key Responsibilities * Design and deploy secure network and system architectures. * Ensure the security of hybrid environments (cloud and on-premises). * Define and evolve the IAM architecture, including Identity Governance and Administration (IGA), Access Management (SSO, MFA, federation), Privileged Access Management (PAM), and Customer Identity and Access Management (CIAM). * Secure machine-to-machine communications, including workload identities, service accounts, secrets and certificate management, OAuth2/OIDC authentication, mTLS, and PKI. * Integrate AI into IAM processes through behavioral analytics, identity threat detection and response (ITDR), access recommendations, role mining, and automated access reviews. * Define and govern the identity and permissions model for AI agents, including authentication, delegation, least-privilege principles, and auditability of actions. * Recommend innovative security solutions to address business and technology requirements. * Collaborate with IT and DevOps teams to embed security by design across projects and platforms. * Ensure security architectures comply with applicable regulations and standards, including GDPR, PCI DSS, and ISO 27001.