Job Summary
IAM Architect
Develop the overarching vision principles and architecture for the workload identity and access management system across all environments like Azure GCP hybrid on premises
Responsibilities
Define the types of workload identities e.g. Managed Identities Service Accounts SPIFFE identities their attributes and their lifecycle management processes.
Design the framework and specific policies for controlling workload access to resources based on the principle of least privilege.
Define and design secure methods for workloads to authenticate and communicate with each other.
Design the integration points and processes for connecting the workload IAM system with Fords current IAM infrastructure e.g. Entra ID
Drive the creation of the long-term workload IAM governance framework ensuring alignment with industry best practices and Fords policies.
Serve as the subject matter expert on workload identity concepts technologies e.g. Entra Workload Identity SPIFFE-SPIRE and best practices.
Assess and recommend appropriate workload identity features and tools available in Azure GCP and other relevant platforms.
Design the system to meet relevant security and compliance requirements