Architecte Sécurité – IAM & Identités Machines H/F - IBM France

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your role and responsibilities

Security Architect – IAM & Machine Identities
The Security Architect designs and implements the organization’s security infrastructure, with a particular focus on Identity and Access Management (IAM). The role ensures that both human and non-human identities (applications, workloads, APIs, AI agents) are properly governed and protected, while supporting innovation and digital transformation initiatives.

• Key Responsibilities
• Design and deploy secure network and system architectures.
• Ensure the security of hybrid environments (cloud and on-premises).
• Define and evolve the IAM architecture, including Identity Governance and Administration (IGA), Access Management (SSO, MFA, federation), Privileged Access Management (PAM), and Customer Identity and Access Management (CIAM).
• Secure machine-to-machine communications, including workload identities, service accounts, secrets and certificate management, OAuth2/OIDC authentication, mTLS, and PKI.
• Integrate AI into IAM processes through behavioral analytics, identity threat detection and response (ITDR), access recommendations, role mining, and automated access reviews.
• Define and govern the identity and permissions model for AI agents, including authentication, delegation, least-privilege principles, and auditability of actions.
• Recommend innovative security solutions to address business and technology requirements.
• Collaborate with IT and DevOps teams to embed security by design across projects and platforms.
• Ensure security architectures comply with applicable regulations and standards, including GDPR, PCI DSS, and ISO 27001.

Required education

Master's Degree

Preferred education

Master's Degree

Required technical and professional expertise

Required Profile
A minimum of 8 years of experience in security architecture design is required, including significant experience delivering IAM-related projects. Strong knowledge of cybersecurity standards, a keen interest in artificial intelligence, and the ability to work effectively in a collaborative team environment are essential assets.

• Key Skills
• Strong expertise in secure architecture design, including Zero Trust and IAM frameworks.
• Deep knowledge of identity protocols and standards, including SAML, OAuth2, OIDC, SCIM, and SPIFFE/SPIRE.
• Hands-on experience with leading IAM solutions covering IGA, PAM, Access Management, and secrets management platforms such as Hashi Corp Vault and Cyber Ark.
• Understanding of AI-related IAM use cases and the security challenges associated with AI agents.
• Expertise in cloud environments (IBM Cloud, AWS, Azure), including native identity and access management services.
• Solid understanding of cybersecurity standards and security best practices.
• Relevant certifications are highly desirable, including CISSP/ISSAP, CCSP, SABSA, and vendor certifications from Sail Point, Cyber Ark, Okta, or Microsoft.
• Fluent in French and English (spoken and written)

Preferred technical and professional experience

• Advanced Security Technologies:

Deep expertise in emerging security technologies, such as cloud security, artificial intelligence, and machine learning, to design and implement innovative security solutions.

• Industry-Specific Security Knowledge:

Experience with industry-specific security regulations and standards, such as HIPAA, PCI-DSS, and GDPR, to ensure compliance and risk management.

• Enterprise Security Architecture:

Experience with designing and implementing enterprise security architectures, including security information and event management (SIEM) systems, identity and access management (IAM) systems, and network security protocols.