Architect - Identity Lifecycle Management

Architect - Identity Lifecycle Management 

The Big Picture 

Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 56th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry.   

Sysco employs over 75,000 associates, has 337 smart distribution facilities worldwide and over 14,000 IoT-enabled trucks serving 730,000 customer locations. For fiscal year 2025 that ended June 29, 2025, the company generated sales of more than $81.4 billion.   

Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations. Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer. 

The Opportunity 

The Architect - Identity Lifecycle Management architects, maintains, and evolves our identity lifecycle platform (SailPoint IIQ hosted on AWS) and its integrations. This role will own upgrades, patching, connectivity, code reviews, environment stability, and compliance alignment across Microsoft Entra, MFA, App Proxy, and related systems. As a mid-senior member of the IAM team, the Architect will ensure the platform remains secure, scalable, and aligned with organizational needs while mentoring junior developers. This is an individual contributor role. 

​​Collaborating closely with global IAM lifecycle teams. This is a remote, Sri Lanka -based role working a second shift with a rotational third shift 7-3 CST. Most work is performed Mon-Fri virtually using collaboration tools and video conferencing. ​Our team has occasional on-call support. ​    ​ 

Responsibilities: 

• ​​Lead system upgrades, patches, and platform certifications. 

• ​​Review and validate code and configuration changes before production deployment. ​  

• ​​Design and maintain integrations with the identity stack and applications (APIs, rules, connectors). ​  

• ​​Monitor environment health, troubleshoot incidents, and ensure uptime. ​  

• ​​Collaborate with security, compliance, and audit teams to meet governance requirements. 

• ​​Provide mentorship, enforce architectural standards, and promote best practices within the team. ​  

Requirements:  

• ​A ​Bachelor’s Degree in Computer Science, Information Systems, or related field; or equivalent practical experience 

• An ​​advanced degree or IAM-related certifications 

• ​12+ years of experience in IAM/Identity Lifecycle roles with hands-on SailPoint IIQ 

• ​Strong knowledge of API integrations, directory services, and IAM protocols 

• ​Proficiency with cloud environments (preferably AWS) 

• A deep understanding of security, compliance, and auditing practices 

• ​The ability to lead architectural decisions and perform technical reviews 

• ​Excellent communication and stakeholder management skills 

• ​​Experience with Zero Trust, identity fabrics, and emerging IAM technologies 

• ​​Relevant certifications (e.g., SailPoint, CISSP) 

Benefits: 

• US dollar-linked compensation 

• Performance-based annual bonus 

• Performance rewards and recognition 

• Agile Benefits - special allowances for Health, Wellness & Academic purposes 

• Entertainment allowance 

• Team engagement allowance 

• Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws 

• Overseas travel opportunities and exposure to client environments 

• Hybrid work arrangement 

Sysco LABS is an Equal Opportunity Employer.