Senior Identity Security Architect

<p><span data-contrast="auto">We are seeking a Senior Identity Security Architect to help build and scale SpecterOps' remediation and architecture advisory capabilities. This role sits at the intersection of identity architecture, attack path analysis, and enterprise remediation. You will work with customers, researchers, consultants, and product teams to translate attack path findings into practical security outcomes.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></p>

<p><span data-contrast="auto">The ideal candidate has significant hands-on experience operating, securing, modernizing, or remediating large enterprise identity environments and understands the realities of implementing security improvements within complex organizations. This individual will play a key role in developing SpecterOps' attack-path-centric remediation methodologies, architectural guidance, and delivery frameworks.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></p>

<p><strong><span data-contrast="auto">Salary Range</span></strong><span data-contrast="auto">: Expected base salary range: $</span><span data-contrast="auto">175,000 - $200,000 USD, </span><span data-contrast="auto">plus bonus/equity and benefits depending on experience and location.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></p>

<p><strong><span data-contrast="auto">Location: </span></strong>This position is remote, based in the U.S. with optional travel quarterly for in person company events and other ad hoc meetings</p>

<ul>

<li> Candidate must be authorized to work and reside in the United States; we do not currently sponsor immigration visas.</li>

</ul>

<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Responsibilities</span></span></strong><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":80}"> </span></p>

<p><span data-contrast="none"><span data-ccp-parastyle="heading 3">Customer Advisory & Remediation</span></span></p>

<ul>

<li><span data-contrast="auto">Serve as a trusted advisor to enterprise customers implementing Identity Attack Path Management programs.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Translate BloodHound Enterprise findings and attack path analysis into actionable remediation strategies.</span></li>

<li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1">Help customers prioritize remediation activities based on risk, impact, dependencies, and operational constraints.</li>

<li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1">Facilitate discussions across Security, Infrastructure, IAM, Endpoint Management, Engineering teams, and other stakeholders.</li>

<li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1">Advise customers on architectural and operational improvements that reduce attack path risk.<span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

</ul>

<p><span data-contrast="none"><span data-ccp-parastyle="heading 3">Architecture & Identity Security</span></span><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":80}"> </span></p>

<ul>

<li><span data-contrast="auto">Provide guidance on Active Directory, Microsoft Entra ID, and hybrid identity architectures.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Advise on delegated administration, privileged access management, administrative tiering, identity governance, service account security, and identity modernization initiatives.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Assist customers with Privilege Zone development and operationalization.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Evaluate identity architectures through an adversary and attack path lens.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

</ul>

<p><span data-contrast="none"><span data-ccp-parastyle="heading 3">Methodology Development</span></span><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":80}"> </span></p>

<ul>

<li><span data-contrast="auto">Develop attack-path-centric remediation frameworks, playbooks, and reference architectures.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Create repeatable guidance for remediation prioritization, ownership, implementation planning, and validation.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Identify recurring customer challenges and codify successful remediation patterns.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Help establish scalable delivery methodologies across BloodHound Scentry.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

</ul>

<p><span data-contrast="none"><span data-ccp-parastyle="heading 3">Internal Enablement</span></span><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":80}"> </span></p>

<ul>

<li><span data-contrast="auto">Partner with researchers to operationalize emerging tradecraft and attack path research.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Support consultants and TAMs through training, mentorship, and guidance.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Contribute to the evolution of Identity Attack Path Management methodologies and best practices.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

</ul>

<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Requirements</span></span></strong><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":80}"> </span></p>

<ul>

<li><span data-contrast="auto">8+ years of experience designing, operating, securing, or modernizing enterprise identity environments.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Deep expertise in Active Directory and Microsoft Entra ID.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Experience with BloodHound or attack path analysis.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Experience with hybrid identity architectures and identity synchronization technologies.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Demonstrated experience leading enterprise remediation, modernization, migration, or security improvement initiatives.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Strong understanding of administrative tiering, delegated administration, privileged access management, identity governance, and enterprise identity operations.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Experience working directly with technical and business stakeholders.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Excellent written and verbal communication skills.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Experience in consulting, professional services, or customer-facing advisory roles.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Experience building methodologies, frameworks, or operational programs.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

</ul>

<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Preferred Qualifications</span></span><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":80}"> </span></strong></p>

<ul>

<li><span data-contrast="auto">Experience supporting large-scale enterprise Active Directory environments (50,000+ users).</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Familiarity with offensive security concepts, adversary tradecraft, or red team operations.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>

<li><span data-contrast="auto">Experience with Okta, Ping Identity, CyberArk, SailPoint, or similar identity platforms.</span><span data-ccp-props="{"335551550":6,"335551620":6}"> </span></li>