Senior IAM Architect (Team Lead)

Top-level Architecture Design: Lead the overall strategic planning, technical roadmap, and architectural design for the company's global IAM system, covering account lifecycles, authentication, authorization, SSO, identity governance, risk control, and Privileged Access Management (PAM).

Architecture Standardization: Establish unified technical specifications, architecture standards, and implementation guidelines to support complex business scenarios, including hybrid cloud, multi-business lines, and international expansion.

Core System 0-1 Build & Refactoring: Spearhead the zero-to-one construction of an enterprise-level unified IAM platform, or lead the comprehensive architectural upgrade, refactoring, and security enhancement of existing legacy identity systems to resolve bottlenecks and compliance gaps.

Team Management: Build, mentor, and manage the IAM R&D team; oversee task breakdown, technical reviews, talent development, and the implementation of standardized workflows.

End-to-End Delivery: Take full ownership of the project lifecycle—from requirements and design to R&D, testing, deployment, and operations—ensuring 100% successful delivery, stable launches, and efficient iterations.

Technical Problem Solving: Tackle core technical challenges such as high concurrency, high availability, data consistency, fine-grained access control, cross-domain access, federated identity, and multi-tenant isolation.

Security & Optimization: Optimize RBAC/ABAC models, MFA, passwordless authentication, and automated governance capabilities based on Zero Trust principles, ensuring the platform complies with international security and data protection standards.

Cross-Functional Enablement: Author IAM architecture whitepapers and integration standards; collaborate with business, security, frontend, and cloud teams to provide standardized identity solutions for internal systems, SaaS products, and overseas businesses.

International Collaboration: Autonomously draft technical documentation in English, present technical solutions, and seamlessly collaborate with overseas teams on international requirements and technical discussions.

Core Experience: Must possess core architecture/R&D experience in top-tier public cloud IAM platforms (e.g., Alibaba Cloud RAM, Volcengine IAM, Tencent Cloud CAM), with deep involvement in product iteration and architectural evolution.

Proven Track Record: Extensive experience in building large-scale IAM platforms from scratch (0-1), or leading the comprehensive architectural refactoring of enterprise IAM systems for tens of millions of users, with the ability to independently deliver end-to-end solutions.

Professional Background: 8+ years of experience in backend development, cloud-native, or network security architecture, with at least 5 years focused on enterprise-level IAM/IDaaS/4A identity governance platform design.

Leadership Skills: 3+ years of technical team management experience, demonstrating strong capabilities in independent top-level architecture design, tackling complex technical challenges, and team leadership with quantifiable, successful delivery results (no failed projects or major live incidents).

Language Proficiency: Fluent in English (both spoken and written), with the ability to independently conduct technical communications, author English technical specifications, and collaborate seamlessly with global teams without barriers.

IAM Mastery: Deep expertise in core IAM frameworks, including account lifecycle management, SSO, federated identity, permission models (RBAC/ABAC/PBAC), principle of least privilege, access auditing, and privileged account management.

Protocol & Security Expertise: Mastery of mainstream identity and security protocols (OAuth 2.0, OIDC, SAML, CAS, JWT), and strong familiarity with Zero Trust architecture, multi-tenant isolation, and fine-grained access control design.

System Design: Proficiency in distributed, microservices, and cloud-native architectures, with strong expertise in designing high-concurrency and high-availability systems for large-scale B2B enterprise middle-office platforms.

Soft Skills: Exceptional business acumen and architectural foresight, strong logic, excellent cross-departmental collaboration skills, and a results-oriented mindset focused on high-quality delivery.

Experience building and delivering global identity middle-office or IDaaS platforms for top-tier internet companies, cloud vendors, or large enterprise groups.

Previous experience delivering overseas IAM projects or building identity systems for international SaaS products.

Familiarity with cutting-edge identity technologies such as Information Technology Application Innovation (Xinchuang), Zero Trust security, privacy computing, and passwordless authentication.

Experience in building commercialized IAM products from scratch and empowering external customers with end-to-end implementation.