Identity and Access Management Architect

About the role

Must have technical/functional skills including in-depth knowledge delivering IAM and cloud security capabilities in a hybrid hosting model. Extensive knowledge of IAM technologies and protocols (SSO, MFA, Federation, PAM, OIDC, OAuth, SAML, and SCIM) and the ability to automate/streamline identity workflow scenarios. Knowledge of NIST CSF and HIPAA/HITECH security concepts with the ability to review/perform security assessments for project solutions. Ability to work effectively under pressure and function in a fast-paced collaborative team setting, acquire new skills efficiently, blend technical expertise with business perspective, make logical decisions guided by precedent and policy, coordinate and obtain cooperation with others, and handle controversial issues tactfully.

Responsibilities

• At least ten (10) years of experience in a technical services function in a complex distributed enterprise network and application environment.
• Hands-on experience managing and designing IAM technologies and services (e.g., SailPoint IdentityIQ, Active Directory/EntraID IAM solutions in a large environment).
• Ability to automate complex access management and authentication policies for on-prem and cloud-hosted applications at an expert level.
• Skilled at collaborating with peers and socializing IAM governance and strategy with senior leadership and executives.
• Working knowledge of Microsoft Purview, Azure IaaS security, and data protection controls (e.g., data loss prevention, encryption, conditional access, data classification).
• Experienced in security architecture, design, implementation, and integration management for full-stack IT infrastructure (applications, scripting, databases, operating systems, hardware, IP network, and test planning in a dynamic continuous improvement environment).
• Responsible for the evaluation, architecture, and delivery of advanced technology solutions with a high level of financial awareness and consideration of final objectives.
• Determine requirements, develop, and recommend security solutions, capabilities, and controls aligned with business objectives, technology, and threat drivers.
• Evaluate, assess, and recommend improvements to statements of work and proposals from vendors to ensure adequate security protections, reporting findings to the CISO and vendor management teams.
• Develop and maintain security architecture, design, and roadmap documents; present detailed strategies, designs, and implementation plans to management.
• Deliver complex customized designs and solutions aligned to defense-in-depth strategies independently and by collaborating with peers, vendors, and stakeholders.
• Test, evaluate, and review security technologies, tools, and services aligned to business goals; recommend their use to the broader security team based on security, financial, and operational metrics.
• Track developments and changes in the digital business and threat environments to ensure adequate protection of healthcare applications.
• Set technical direction, scope, quality metrics, planning, execution, and closing of technical projects.
• Determine baseline security configuration standards for operating systems, applications, network segmentation, and identity and access management.
• Provide a high level of technical skill to enable resolution of complex security and identity/access-related technology problems throughout the project lifecycle.
• Work collaboratively across technical, customer, and management constituencies to ensure quality and timely service delivery.

Pay

$100,000–$130,000 per year