Senior Identity Security Architect

Job Title: Senior Identity Security Architect

Location: Seattle, WA

Job Summary

Key Responsibilities

• Define and own the target-state architecture and reference designs for enterprise identity security platforms, including:
• BeyondTrust (Password Safe, Endpoint Privilege Management, Privileged Remote Access)
• Microsoft Entra ID
• Active Directory
• SailPoint IdentityNow (IDN)
• Lead architecture and deployment strategies for enterprise identity modernization initiatives, including:
• Privileged Access Management (PAM) transformation
• Identity Governance & Administration (IGA) modernization
• Cloud identity adoption
• Active Directory and hybrid identity modernization
• Zero Trust identity architecture
• Establish enterprise architecture standards, design patterns, and best practices while serving as the design authority through architecture and design reviews.
• Develop migration and deployment strategies, including sequencing, cutover planning, rollback procedures, and risk mitigation for large-scale identity platform migrations.
• Design secure integrations across Azure, AWS, Google Cloud Platform, on-premises, and SaaS applications using:
• SAML
• OAuth 2.0 / OpenID Connect (OIDC)
• SCIM
• Kerberos
• LDAP
• Drive enterprise-wide phishing-resistant authentication, least-privilege access, and Privileged Access Management (PAM) architecture.
• Collaborate with engineering, cloud, security architecture, platform teams, and program management to translate architecture into executable delivery roadmaps.
• Provide technical leadership and mentorship to engineering teams through design reviews and implementation guidance.
• Identify architectural risks, dependencies, and trade-offs while presenting recommendations to engineering leadership and executive stakeholders.
• Ensure all identity solutions comply with organizational security, compliance, governance, and data protection requirements.
• Leverage AI-powered tools to accelerate architecture analysis, solution evaluation, and technical documentation.

Required Qualifications

• Bachelor''s or Master''s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent experience).
• 15+ years of experience in Identity & Access Management (IAM), cybersecurity, or security engineering.
• Extensive experience serving as an Identity or Security Architect within large enterprise environments.
• Proven experience leading enterprise-scale identity security modernization programs from architecture through production deployment.
• Deep expertise in at least two of the following platforms, with strong working knowledge of the others:
• BeyondTrust
• Microsoft Entra ID
• Active Directory
• Okta
• SailPoint IdentityNow (IDN)
• Strong knowledge of identity architecture and security principles, including:
• Authentication & Authorization
• Federation
• Multi-Factor Authentication (MFA)
• Phishing-resistant authentication
• RBAC & ABAC
• Least Privilege
• Tiered Administration
• Zero Trust
• Strong expertise with identity protocols including:
• SAML
• OAuth 2.0
• OpenID Connect (OIDC)
• SCIM
• Kerberos
• LDAP
• Experience designing and implementing identity integrations across hybrid and multi-cloud environments (Azure, AWS, Google Cloud Platform).
• Experience establishing enterprise architecture standards and serving as the design authority across multiple delivery teams.
• Excellent communication, leadership, stakeholder management, and presentation skills.
• Ability to manage multiple workstreams in fast-paced enterprise transformation programs.

Preferred Certifications

• CISSP
• TOGAF
• SABSA
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• SailPoint Certified Engineer