Job description

Job Title: Cloud Solutions Architect Access Management & Data Privacy Location: Washington, D.C. (Onsite) Duration: Contract About the Role We are seeking a Cloud Solutions Architect with deep expertise in Microsoft Azure, Identity and Access Management (IAM), and data privacy to lead the design, architecture, and implementation of enterprise-wide access management and security solutions. This is a senior, hands-on technical role within IFC's Architecture and Technology Group (CITDE), focused on designing secure, scalable, and compliant cloud architectures that meet the organization's security and regulatory requirements. Key Responsibilities • Solution Architecture & Design • Architect and implement enterprise access management and data privacy solutions. • Create and maintain architecture diagrams, documentation, HLD/LLD policies, and runbooks. • Design and enforce RBAC, ABAC, and PBAC frameworks leveraging tools like PlainID and Entra ID. • Integrate identity governance solutions (SailPoint) for identity lifecycle, entitlement, and delegated administration. • Cloud & Security Engineering • Build secure Azure cloud architectures following CIS, NIST, ISO 27001 standards. • Implement data encryption strategies (at rest/in transit) with Azure Key Vault, Azure Disk Encryption, and Purview for compliance. • Integrate cloud-native security tools for data protection, DLP, and continuous monitoring. • Automation & DevOps • Design and automate CI/CD pipelines in Azure DevOps for deployment and testing. • Utilize Terraform and IaC practices for consistent infrastructure deployment. • Implement ADF Pipelines for policy migration and automated governance. • Access Policy & Governance • Develop authorization policies and frameworks with clear documentation. • Manage unified onboarding workflows and enforce lifecycle management across enterprise systems. • Build advanced access management reporting and dashboards. • Collaboration & Stakeholder Engagement • Collaborate with engineering, QA, DevOps, and security teams for seamless integration. • Provide executive-level presentations, technical reports, and progress updates to senior leadership. Required Skills & Experience • 8+ years in IAM architecture, design, and implementation with deep expertise in: • Entra ID, SailPoint, PlainID • Azure Cloud Security & Identity Governance • RBAC, ABAC, PBAC authorization policies • Strong knowledge of enterprise architecture frameworks (TOGAF, Zachman) • Hands-on experience with .NET, APIs, C#, JavaScript, Python, Git • API security knowledge (OAuth, JWT, Swagger/OpenAPI) • Experience with Azure-native security tools, network security design, firewalls, and security groups. • Expertise in data encryption, classification, and compliance tools (Microsoft Purview). • Proficiency in Terraform, Azure DevOps, CI/CD, and automation. • Strong database security knowledge (Oracle, Postgres, MSSQL, Cosmos DB). • Exceptional communication, documentation, and presentation skills. Preferred Certifications • Microsoft Certified: Azure Solutions Architect Expert, Azure Security Engineer Associate CISSP, AWS Solutions Architect, Google Cloud Professional Architect or equivalent Please share your Updated Resume at yashwant@kanakits.com

Requirements