Architect, Cybersecurity, Identity Security

This is a fully remote position, open to applicants in Michigan.

📋 Description

• Design and uphold the enterprise identity security architecture, standards, and reference designs.

• Create identity strategies that support Zero Trust Architecture and the digital transformation of the enterprise.

• Architect solutions for authentication, authorization, federation, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity lifecycle management.

• Lead architecture evaluations for Identity and Access Management (IAM) projects, cloud implementations, and business applications.

• Design and oversee Privileged Access Management (PAM) solutions and privileged identity controls.

• Integrate identity security controls with teams in infrastructure, cloud engineering, enterprise architecture, application development, and security operations.

• Develop identity governance processes for Role-Based Access Control (RBAC), least privilege, segregation of duties, and access certification.

• Perform identity threat modeling, architecture risk assessments, and security design reviews.

• Assess emerging identity technologies and propose architectural enhancements.

• Ensure compliance with relevant cybersecurity and regulatory requirements.

• Create architecture documentation, technical standards, implementation guidance, and operational procedures.

• Offer technical leadership and mentorship to engineering teams.

• Evaluate complex identity security challenges and translate insights into architectural decisions.

• Convey identity architecture standards, risks, and implementation guidance to both technical and business stakeholders.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field.

• At least 8 years of experience in cybersecurity or identity management.

• A minimum of 3 years of experience in designing enterprise IAM architectures.

• Experience in implementing Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), Identity Governance and Administration (IGA), and directory services.

• Familiarity with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, CyberArk, Delinea, or similar technologies.

• Experience with cloud identity security across platforms such as Azure, AWS, or Google Cloud.

• Knowledge of Zero Trust Architecture, RBAC, least privilege, segregation of duties, access certification, NIST Cybersecurity Framework, ISO 27001, HIPAA, SOX, and FDA Cybersecurity Guidance.

🏝️ Benefits

• Remote work flexibility.

• No travel required (Travel Percentage: None).