Architect - Identity Lifecycle Management
The Big Picture
Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 56th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry.
Sysco employs over 75,000 associates, has 337 smart distribution facilities worldwide and over 14,000 IoT-enabled trucks serving 730,000 customer locations. For fiscal year 2025 that ended June 29, 2025, the company generated sales of more than $81.4 billion.
Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations. Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer.
The Opportunity
The Architect - Identity Lifecycle Management architects, maintains, and evolves our identity lifecycle platform (SailPoint IIQ hosted on AWS) and its integrations. This role will own upgrades, patching, connectivity, code reviews, environment stability, and compliance alignment across Microsoft Entra, MFA, App Proxy, and related systems. As a mid-senior member of the IAM team, the Architect will ensure the platform remains secure, scalable, and aligned with organizational needs while mentoring junior developers. This is an individual contributor role.
Collaborating closely with global IAM lifecycle teams. This is a remote, Sri Lanka -based role working a second shift with a rotational third shift 7-3 CST. Most work is performed Mon-Fri virtually using collaboration tools and video conferencing. Our team has occasional on-call support.
Responsibilities:
Lead system upgrades, patches, and platform certifications.
Review and validate code and configuration changes before production deployment.
Design and maintain integrations with the identity stack and applications (APIs, rules, connectors).
Monitor environment health, troubleshoot incidents, and ensure uptime.
Collaborate with security, compliance, and audit teams to meet governance requirements.
Provide mentorship, enforce architectural standards, and promote best practices within the team.
Requirements:
A Bachelor’s Degree in Computer Science, Information Systems, or related field; or equivalent practical experience
An advanced degree or IAM-related certifications
12+ years of experience in IAM/Identity Lifecycle roles with hands-on SailPoint IIQ
Strong knowledge of API integrations, directory services, and IAM protocols
Proficiency with cloud environments (preferably AWS)
A deep understanding of security, compliance, and auditing practices
The ability to lead architectural decisions and perform technical reviews
Excellent communication and stakeholder management skills
Experience with Zero Trust, identity fabrics, and emerging IAM technologies
Relevant certifications (e.g., SailPoint, CISSP)
Benefits:
US dollar-linked compensation
Performance-based annual bonus
Performance rewards and recognition
Agile Benefits - special allowances for Health, Wellness & Academic purposes
Entertainment allowance
Team engagement allowance
Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws
Overseas travel opportunities and exposure to client environments
Hybrid work arrangement
Sysco LABS is an Equal Opportunity Employer.
