Dir. DDIT ISC Functional Sec. Arch IAM

Salary Range: €69,000.00 - €128,100.00   Job Description Summary Dir. DDIT ISC Functional Security Architect role provides enterprise-level architectural leadership and specialist security expertise for Identity and Access Management (IAM). The role partners closely with Functional Security Architects, Enterprise Architects, Platform Architects, business stakeholders and IAM capability teams to ensure that solutions implement secure, scalable and reusable identity patterns aligned with enterprise security standards. It also contributes to the strategic development and maturity of enterprise IAM capabilities, including Identity Governance and Administration (IGA), authentication, authorization, federation, Privileged Access Management (PAM), machine/workload identities and emerging identity requirements associated with AI and autonomous agents. A key focus of the role is developing IAM architecture for AI-enabled applications and Agentic AI, including identities for AI agents, delegated authority, agent-to-agent and agent-to-application access, human-to-agent delegation, workload identities, least-privilege authorization, JIT access, credential and secret management, lifecycle governance, auditability and accountability.   Job Description Key Responsibilities: • Review, approve and govern IAM technology variants and architecture patterns against agreed enterprise security and architecture standards. • Drive IAM technology and architecture standards in close collaboration with Enterprise Architecture, Security Architecture, IAM capability teams and Architecture Governance. • Act as the IAM subject-matter expert for Functional Security Architects, providing IAM-specific architecture guidance, design reviews, reusable patterns and risk advice for projects and programmes. • Support development and evolution of enterprise IAM capabilities and their associated target architectures, roadmaps and reference architectures. • Advance the maturity of IAM architecture and governance processes, ensuring IAM architectural decisions and standards remain relevant as business, security and technology requirements evolve. • Drive relevant architecture KPIs and metrics to assess adoption, architectural compliance, exceptions and maturity of IAM capabilities. • Identify opportunities for consolidation, standardisation and retirement of overlapping IAM technologies and patterns. Proactively communicate IAM risks and architectural considerations to business, security and technology stakeholders. • Participate in evaluation of new IAM and security technologies, providing a holistic assessment of security, architecture, interoperability, lifecycle and operational considerations. • Engage early in solution and demand governance to ensure IAM requirements are identified before detailed solution design and implementation. • Promote reuse of approved enterprise IAM capabilities and patterns rather than creation of application-specific identity solutions. Build and maintain an IAM architecture Community of Practice, facilitating knowledge sharing and continuous improvement. Essential Requirement: • Strong experience in Identity and Access Management architecture, security architecture or enterprise security architecture. • Deep understanding of identity lifecycle management, authentication, authorisation, federation, access governance and privileged access. • Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, SCIM and modern identity-federation patterns. • Experience architecting enterprise SSO, MFA and passwordless authentication solutions. • Strong understanding of RBAC, ABAC, policy-based access control, least privilege and separation of duties. • Experience with identity governance and administration and privileged access managem