IAM Architect

Stack

Responsibilities

• ▹Define and guarantee the IAM architecture of the Cloud Avenue platform (performance, resilience, security, compliance: GDPR, NIS2, SecNumCloud, Zero Trust)
• ▹Design and evolve authentication and authorization solutions (OIDC, OAuth 2.0/Token Exchange, SAML)
• ▹Lead IAM integration with cloud-native components (AWS IRSA, Azure Workload Identity, GKE Workload Identity) and API Gateways
• ▹Implement advanced ReBAC authorization models (OpenFGA, Authzed, Zanzibar-style) for multi-tenant environments
• ▹Write and validate HLD/LLD architectures during build and run phases, industrialized via Infrastructure as Code (Terraform, Crossplane)
• ▹Ensure consistency and security of deployed solutions: access management, encryption, KMS integration, audit, vulnerability management
• ▹Support technical teams (France, India, Egypt) in upskilling on IAM solutions and act as reference during major incidents
• ▹Contribute to technology watch on cloud IAM solutions and continuous improvement

Requirements

• ▹Minimum 8 years of experience in IAM and/or cybersecurity
• ▹Proven experience in integration architecture within large-scale cloud or data center environments
• ▹Knowledge of OIDC, OAuth 2.0/Token Exchange, SAML
• ▹Knowledge of Keycloak and/or Ory
• ▹Experience with at least two hyperscalers' workload identity (AWS IRSA, Azure Workload Identity, GKE Workload Identity)
• ▹Knowledge of ReBAC (OpenFGA, Authzed, Zanzibar-style)
• ▹Terraform, Crossplane (IAM scope)
• ▹Knowledge of SecNumCloud, NIS2, GDPR, Zero Trust
• ▹Strong analytical and complex problem-solving skills
• ▹Excellent communication in French and English

Soft skills

About the company

Orange Business is a network and digital integrator covering the entire digital value chain, with over 51,000 employees in nearly 30 countries, known for consulting, services and digital solutions.