Solution Architect IAM 

What you will do

As an IAM Solution Architect, you are responsible for designing, optimizing, and securing the company’s Identity and Access Management (IAM) landscape. You translate the strategic vision for identity governance, authentication, authorization, and privileged access into actionable implementations, ensuring compliance, security, and efficiency across the organization. You work closely with IT security, infrastructure, and business stakeholders to align IAM solutions with business needs and regulatory requirements. Additionally, you take ownership of the IAM budget, balancing cost-effectiveness with innovation and scalability.

Key Responsibilities: 

Solution Architecture: 

• Design and enhance IAM solutions to ensure secure and efficient identity and access management. 
• Define and implement identity governance and administration (IGA) strategies. 
• Ensure seamless integration of IAM solutions with IT infrastructure, applications, and cloud environments.
• Standardize and document IAM architectures for consistency and future scalability. 

Implementation and Management: 

• Oversee the deployment and optimization of IAM technologies, including Active Directory, Entra ID, and federated authentication solutions. 
• Define and enforce access control models for various user groups, including employees, partners, and contractors. 
• Ensure secure (remote) access solutions using technologies like CyberArk or other privileged access management (PAM) tools.
• Support the implementation of modern authentication mechanisms, such as MFA, conditional access, and passwordless authentication. 

Security and Compliance: 

• Implement a ‘security by design’ approach in all IAM solutions. 
• Define and enforce policies for privileged access management (PAM) using CyberArk, Microsoft PIM, or similar solutions. 
• Ensure compliance with regulatory and security standards, such as NIS2, ISO 27001, and GDPR. 
• Collaborate with security teams to detect, analyse, and mitigate identity-related risks. 

Operational Support and Governance: 

• Act as the highest escalation point for complex IAM-related incidents and issues. 
• Guide operational teams in managing and troubleshooting IAM platforms and policies. 
• Define governance processes and best practices for IAM lifecycle management. 
• Provide expertise in incident and change management related to IAM services. 

Solution Ownership: 

• Define and manage the IAM budget, ensuring cost-effective and scalable investments in identity and access technologies. 
• Evaluate emerging IAM technologies and trends to improve efficiency and security. 
• Align IAM strategies with business objectives, enabling seamless digital transformation and user experience improvements. 

What we do for you

We offer you the opportunity to join one of the world’s premier research centers in nanotechnology at its headquarters in Leuven, Belgium. With your talent, passion and expertise, you’ll become part of a team that makes the impossible possible. Together, we shape the technology that will determine the society of tomorrow.

We are committed to being an inclusive employer and proud of our open, multicultural, and informal working environment with ample possibilities to take initiative and show responsibility. We commit to supporting and guiding you in this process; not only with words but also with tangible actions. Through imec.academy, 'our corporate university', we actively invest in your development to further your technical and personal growth. 

We are aware that your valuable contribution makes imec a top player in its field. Your energy and commitment are therefore appreciated by means of a market appropriate salary with many fringe benefits such as bike allowances, partner coaching, parental leave. 

Who you are

Extensive experience with: 

• Identity and access management solutions, including Active Directory, Entra ID, and federated identity providers. 
• Privileged Access Management (PAM) tools such as CyberArk PAM, Microsoft PIM, or similar solutions. 
• Authentication and authorization frameworks, including MFA, SSO, RBAC, and ABAC. 
• Identity Governance and Administration (IGA) tools and methodologies. 
• Security best practices, identity lifecycle management, and compliance frameworks. 
• Cloud-based IAM strategies and hybrid identity management. 
• Strong analytical and problem-solving skills with a proactive mindset. 
• Excellent communication and collaboration skills to work effectively across IT and business teams. 

IMEC and its affiliates will not accept unsolicited resumes from any source other than directly from a candidate. IMEC will consider unsolicited referrals and/or resumes submitted by vendors such as search firms, staffing agencies, professional recruiters, fee-based referral services and recruiting agencies (hereafter “Agency”) to have been referred by the Agency free of charge. IMEC will not pay a fee to any Agency that does not have a prior written agreement with IMEC, validated by its HR department, in place regarding a specific job opening and allowing to submit resumes.