IAM

Position Summary

We are seeking an experienced Senior IAM, PAM, Azure DevOps & OT Security Architect to lead the design, implementation, and governance of enterprise-scale Identity and Access Management (IAM), Privileged Access Management (PAM), Microsoft Entra ID, Azure DevOps, DevSecOps, and Operational Technology (OT) Security solutions across complex IT and OT environments.

The ideal candidate will possess strong expertise in Microsoft Entra ID, CyberArk PAM, Active Directory, OT Domain Controller (OTDC), Azure DevOps, Kubernetes, Industrial Cybersecurity, and IT/OT Convergence, with a proven track record of delivering secure, scalable, and business-aligned enterprise architectures.

Key Responsibilities

Architected and implemented enterprise-scale Identity and Access Management (IAM), Privileged Access Management (PAM), Azure DevOps, and OT Security solutions across IT and industrial OT environments.

Designed and deployed Microsoft Entra ID solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Privileged Identity Management (PIM), Role-Based Access Control (RBAC), and Identity Governance capabilities.

Led the design and implementation of Active Directory and OT Domain Controller (OTDC) architectures to enable centralized authentication, secure access management, and identity integration across manufacturing environments.

Conducted OT infrastructure assessments to evaluate SSO readiness, domain join feasibility, authentication mechanisms, SCADA integration requirements, security risks, and compliance impacts.

Implemented and managed CyberArk PAM solutions, including Vault, PVWA, CPM, and PSM, for privileged account onboarding, credential lifecycle management, password rotation, session monitoring, and audit compliance.

Designed and developed secure Azure DevOps and DevSecOps platforms leveraging Azure Repos, Azure Pipelines, Azure Artifacts, and Azure Container Registry (ACR) to support automated and governed software delivery processes.

Built end-to-end CI/CD frameworks incorporating source code management, automated build and testing, security validation, artifact management, containerization, and controlled deployment workflows.

Defined secure IT-to-OT deployment architectures aligned with Purdue Model principles and Industrial DMZ requirements, ensuring controlled software promotion and cybersecurity governance across environments.

Designed and supported containerized platforms using Kubernetes, K3s, Docker, and GitOps methodologies (ArgoCD) for scalable, resilient, and secure application deployment within OT landscapes.

Established governance frameworks covering Joiner-Mover-Leaver (JML) processes, Access Reviews, Access Certifications, Segregation of Duties (SoD), Compliance Reporting, and Identity Lifecycle Management.

Collaborated with cybersecurity, infrastructure, automation, application, and business stakeholders to define future-state architectures, implementation roadmaps, and digital transformation strategies.

Conducted architecture reviews, technical workshops, risk assessments, and remediation planning sessions to improve security posture, operational efficiency, and regulatory compliance.

Delivered Industrial Cybersecurity and Compliance initiatives aligned with IEC 62443, GAMP5, 21 CFR Part 11, EU GMP Annex 11, and Computer System Validation (CSV) requirements for regulated manufacturing environments.

Produced high-quality solution architectures, technical design documents, assessment reports, implementation proposals, executive presentations, and governance documentation for client-facing engagements.

Provided technical leadership for initiatives involving IAM, PAM, DevSecOps, Cloud Adoption, OT Security, Identity Governance, and IT/OT Convergence, ensuring secure, scalable, and compliant enterprise solutions.

Responsibilities

8+ years of overall experience in Cybersecurity, IAM, PAM, Infrastructure, DevOps, or Enterprise Architecture.

5+ years of hands-on experience with Microsoft Entra ID, Active Directory, SSO, MFA, Conditional Access, PIM, RBAC, and Identity Governance.

4+ years of experience implementing and supporting CyberArk PAM solutions.

3+ years of experience in OT Security, SCADA, Industrial DMZ, Purdue Model, and IT/OT Convergence environments.

3+ years of experience with Azure DevOps, CI/CD, Kubernetes, K3s, Docker, ArgoCD, and GitOps platforms.

Strong experience in Solution Architecture, Technical Consulting, Security Governance, and Client-Facing Engagements

Requirements

Primary Skills:

IAM & PAM (Primary Skills)

Microsoft Entra ID (Azure AD)

Identity & Access Management (IAM)

Identity Governance & Administration (IGA)

Single Sign-On (SSO)

Multi-Factor Authentication (MFA)

Conditional Access

Privileged Identity Management (PIM)

Role-Based Access Control (RBAC)

Active Directory

CyberArk PAM

CyberArk PVWA

CyberArk CPM

CyberArk PSM

Privileged Access Management

Privileged Session Monitoring

Password Rotation & Credential Management ,


OT Security & Infrastructure

Azure DevOps & DevSecOps

Azure DevOps

Azure Repos

Azure Pipelines

Azure Artifacts

Azure Container Registry (ACR)

CI/CD


SCADA Environments

Industrial DMZ

Purdue Model

OT Cybersecurity

IT/OT Integration

OT Domain Controller (OTDC)

Active Directory Integration

Container & Platform Engineering

Kubernetes

K3s

Docker

ArgoCD

Container Security

GitOps Deployment Model

DevSecOps

Git Version Control