Senior Identity Security Architect

Accountabilities:

• • Serve as a trusted advisor to enterprise customers implementing Identity Attack Path Management programs and help translate attack path findings into actionable remediation strategies.
  • Analyze identity attack paths and help customers prioritize remediation based on risk, business impact, dependencies, and operational constraints.
  • Facilitate collaboration across Security, Infrastructure, IAM, Endpoint Management, Engineering, and other stakeholder groups to drive remediation initiatives forward.
  • Provide architectural and operational guidance across Active Directory, Microsoft Entra ID, and hybrid identity environments.
  • Advise on delegated administration, privileged access management, administrative tiering, identity governance, service account security, and broader identity modernization initiatives.
  • Assist customers with the development and operationalization of Privilege Zones and evaluate identity architectures through an adversary-focused, attack-path lens.
  • Develop remediation frameworks, playbooks, reference architectures, and repeatable guidance covering prioritization, ownership, implementation, and validation.
  • Identify recurring customer challenges and codify successful remediation patterns to strengthen scalable delivery methodologies.
  • Partner with security researchers to translate emerging tradecraft and attack path research into practical customer guidance.
  • Support consultants and Technical Account Managers through training, mentorship, and technical guidance while contributing to the evolution of identity security best practices.
  • Help establish and mature enterprise remediation methodologies and architectural frameworks that improve customer outcomes and enable measurable reductions in identity-related risk.

  Requirements

  • 8+ years of experience designing, operating, securing, modernizing, or remediating enterprise identity environments.
  • Deep expertise in Active Directory and Microsoft Entra ID, including hybrid identity architectures and identity synchronization technologies.
  • Practical experience with BloodHound or comparable attack path analysis methodologies.
  • Demonstrated success leading enterprise remediation, modernization, migration, or security improvement initiatives.
  • Strong understanding of administrative tiering, delegated administration, privileged access management, identity governance, and enterprise identity operations.
  • Experience working directly with technical and business stakeholders, ideally in consulting, professional services, or customer-facing advisory environments.
  • Proven ability to develop methodologies, frameworks, operational programs, and repeatable remediation practices.
  • Excellent written and verbal communication skills, with the ability to translate complex security concepts into clear recommendations for varied audiences.
  • Experience supporting large-scale enterprise Active Directory environments, particularly environments with 50,000+ users, is highly desirable.
  • Familiarity with offensive security principles, adversary tradecraft, or red team operations is a plus.
  • Experience with identity platforms such as Okta, Ping Identity, CyberArk, or SailPoint is advantageous.
  • Familiarity with endpoint management technologies such as Microsoft Intune, SCCM, Tanium, or Jamf is beneficial.
  • Knowledge of PKI, virtualization, cloud infrastructure, and other critical enterprise technologies is a plus.
  • Must be authorized to work and reside in the United States; immigration sponsorship is not currently available for this position.

  Benefits

  • Base salary: $175,000–$200,000 USD, with actual compensation depending on experience, location, and other relevant factors.
  • Additional compensation: Eligibility for bonus and equity opportunities.
  • Healthcare: 100% company-paid health, dental, vision, and life insurance for employees and their families.
  • Retirement: 401(k) with up to a 4% company match.
  • Time off: Flexible time-off policy plus 13 paid holidays annually.
  • Remote work: $1,500 first-year home-office setup allowance and $500 annual home-office allowance thereafter.
  • Connectivity: $150 monthly reimbursement for cell phone and internet expenses.
  • Professional development: $5,000 annual professional development allowance.
  • Education support: Up to $5,250 toward continuing education or student loan repayment.
  • Wellness: $1,200 annual benefit supporting lifestyle, wellness, pet insurance, and related expenses.
  • Family support: One-time $10,000 benefit toward family planning.
  • Work environment: Fully remote U.S.-based position with optional quarterly travel for in-person company events and occasional meetings.
  • Culture and collaboration: Opportunities to participate in virtual and in-person employee events while working with experienced security professionals on impactful identity security challenges.