Job description

About Company Papigen is a fast-growing global technology services company, delivering innovative digital solutions through deep industry experience and cutting-edge expertise. We specialize in technology transformation, enterprise modernization, and dynamic areas like Cloud, Big Data, Java, React, DevOps, and more. Our client-centric approach combines consulting, engineering, and data science to help businesses evolve and scale efficiently. About the Role We are seeking a Cloud Solutions Architect (Azure IAM) with deep expertise in and Access Management (IAM), Data Privacy, and Enterprise Cloud Security. This role will lead the design and implementation of secure, scalable, and compliant access management and data governance solutions across the enterprise. You'll collaborate with stakeholders, security teams, and developers to deliver modern IAM frameworks and cloud- architectures. Seniority level: Senior/Lead (expected 8+ years of relevant hands-on experience); suitable for candidates who can operate as a strong individual contributor or as a technical lead guiding small architecture teams. Key Responsibilities • Architect and design enterprise-grade IAM and data privacy solutions. • Develop and maintain reference architecture, process models, and runbooks. • Implement Policy-Based Access Control (PBAC, ABAC, RBAC) using tools such as PlainID and Microsoft Entra ID. • Integrate Entra ID Governance Administration (IGA) for: • lifecycle • Entitlement management • Delegated user administration • Access governance automation • Architect unified application onboarding workflows with SailPoint. • Integrate Microsoft Purview for unified data governance and compliance. • Design secure cloud architectures using Azure services aligned to CIS, NIST, ISO 27001. • Implement data protection strategies (encryption, secure storage, recovery). • Automate deployments using CI/CD pipelines (Azure DevOps) and Infrastructure-as-Code (Terraform). • Provide developer guidance, documentation, and runbooks for IAM/authorization. • Collaborate with cross-functional teams using Agile/Scrum methodologies. • Present architecture and solution progress to senior management and stakeholders. Required Skills & Experience • 8+ years of experience in IAM and Cloud Architecture. • Hands-on expertise with: • Azure (primary); AWS/GCP experience is a plus. • IAM tools: Entra ID, SailPoint, PlainID. • Authorization frameworks: PBAC, ABAC, RBAC. • Data governance privacy tools: Microsoft Purview. • Strong experience with .NET, APIs, OAuth/JWT, Git, C#, JavaScript, Python. • Familiarity with Salesforce data authorization and enterprise IAM integration. • Proficiency with data protection, encryption, and compliance frameworks. • Knowledge of network security, firewalls, and continuous security monitoring. • Solid understanding of enterprise architecture frameworks (TOGAF, Zachman). • Excellent communication, documentation, and presentation skills. Nice to Have • Cloud certifications such as Microsoft Certified: Azure Solutions Architect Expert, Azure Security Engineer Associate, CISSP, AWS/GCP Cloud Architect. • Experience with Oracle, Postgres, MSSQL, Cosmos DB security. • Prior exposure to data loss prevention (DLP), classification, and labeling strategies. Soft Skills • Strong problem-solving and troubleshooting ability. • Ability to engage with senior leadership and cross-functional teams. • Excellent stakeholder communication and documentation skills. • Highly organized, proactive, and collaborative. Equal Opportunity Statement Papigen is an equal opportunity employer. We celebrate and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to, veteran status, or any other characteristic protected by applicable law. We encourage candidates from underrepresented groups to apply. Web Reference : AJF/888596605-202 Posted Date : Sat, 06 Sep 2025 Please note, to apply for this position you will complete an application form on another website provided by or on behalf of ZipRecruiter. Any external website and application process is not under the control or responsibility of IT JobServe

Requirements