Principal Security & IAM Architect

Accountabilities:

• • Define and own the future-state security and IAM architecture covering authentication, authorization, federation, access governance, and identity lifecycle management for customer and coworker populations.
  • Lead the consolidation of fragmented identity platforms, including Microsoft Entra ID, Okta, and native ServiceNow authentication, toward a unified and cost-effective identity model.
  • Architect the migration from SailPoint to Microsoft Entra ID Governance and establish appropriate RBAC, access tiers, certification, approval, and joiner/mover/leaver processes.
  • Design secure access request, approval, certification, and lifecycle workflows with clear ownership, traceability, and auditable controls.
  • Ensure security and identity architectures align with PCI DSS v4.0.1, SOC 2, corporate security policies, and enterprise hardening standards.
  • Establish IAM and security governance frameworks, including decision rights, ownership models, standards, and control mappings across the platform and ITSM processes.
  • Develop phased transition strategies that separate coworker and customer identity models while minimizing disruption and avoiding unnecessary identity changes.
  • Collaborate with application, integration, automation, engineering, infrastructure, compliance, and product architecture leaders to ensure IAM designs align with the broader target-state architecture.
  • Evaluate identity, security, and IGA technologies through benchmarking, proof-of-concept initiatives, risk assessments, and cost-benefit analysis.
  • Establish security monitoring, threat detection, identity analytics, and predictive risk capabilities to improve platform visibility and security posture.
  • Conduct threat modeling, security and identity risk assessments, architecture reviews, and remediation planning for legacy technical debt and emerging risks.
  • Lead, mentor, and establish technical standards for security engineering and IAM teams, providing architectural direction and hands-on guidance.
  • Communicate security strategies, architecture decisions, roadmaps, risks, and technical requirements effectively to technical teams, business stakeholders, and leadership.
  • Maintain comprehensive architecture documentation, including roadmaps, design decisions, technical specifications, and compliance control mappings.
  • Resolve complex security and identity challenges throughout design, migration, and operational phases while balancing security, user experience, budget, and business requirements.
  • Manage relationships with identity and security technology vendors, including technology evaluations, contract discussions, and ongoing partnership management.
  • Monitor emerging threats, identity standards, AI security developments, and industry trends to recommend innovative and defensible solutions.

  Requirements:

  • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline with 10+ years of IT experience including security architecture and IAM, or 14+ years of relevant IT, security, and IAM experience.
  • Extensive hands-on expertise designing enterprise security and IAM architectures, including SSO, MFA, authentication, authorization, federation, SAML, OAuth, OIDC, and privileged access management.
  • Strong experience with Microsoft Entra ID and Entra ID Governance, along with identity governance platforms such as SailPoint; experience leading migrations between IGA platforms is highly valuable.
  • Advanced knowledge of RBAC/ABAC, access certification, identity lifecycle automation, and joiner/mover/leaver processes.
  • Strong understanding of regulatory and compliance requirements, particularly PCI DSS v4.0.1, SOC 2, and enterprise security and hardening standards.
  • Experience securing SaaS and ITSM platforms, with ServiceNow experience strongly preferred, including platform authentication and integration security.
  • Knowledge of AI principles applied to cybersecurity, including identity analytics, anomaly and threat detection, and governance of AI agents and automated workflows.
  • Proven ability to develop security and IAM strategies that align with business objectives while reducing risk, complexity, and cost.
  • Demonstrated experience leading architecture initiatives and influencing strategic decisions across complex, matrixed organizations without relying solely on direct authority.
  • Strong track record driving security transformation, risk reduction, technology modernization, and organizational change.
  • Extensive understanding of network architecture, cloud security, infrastructure, applications, data, and broader enterprise technology environments.
  • Exceptional analytical, problem-solving, and strategic thinking skills, with the ability to anticipate threats and translate them into actionable security strategies.
  • Excellent communication, facilitation, leadership, influencing, and conflict-resolution abilities.
  • Ability to manage multiple complex initiatives in a fast-paced, evolving environment while maintaining strategic focus.
  • Experience designing and implementing large-scale security and identity solutions across multiple technology domains.
  • Relevant certifications such as CISSP, CISM, SailPoint certifications, or Microsoft Identity and Access Administrator (SC-300) are a plus.
  • Master’s degree is a plus.

  Benefits:

  • Base salary: $156,400–$218,920 annually, depending on experience, skills, and geographic location.
  • Annual bonus: Target of 10%, subject to applicable plan terms and conditions.
  • Comprehensive employee benefits and wellness offerings.
  • Remote work opportunity within the United States.
  • Salary may be adjusted based on geographic differentials.
  • Opportunity to work with evolving AI and security technologies in an AI-forward environment.
  • Collaborative culture focused on continuous learning, experimentation, and professional growth.
  • Opportunity to influence enterprise-wide security strategy and modernization initiatives.