Description

TECHNICAL REQUIREMENTS

• 10+ years of experience in Identity, IAM, Cybersecurity, Infrastructure, or Enterprise Architecture.
• 7+ years of hands-on IAM Architecture or Senior IAM Engineering experience in a large enterprise environment.
• Strong experience with Microsoft Active Directory, Microsoft Entra ID, hybrid identity, directory synchronization, authentication, authorization, Conditional Access, MFA and privileged access.
• Experience with at least 2 enterprise IAM platforms; Saviynt preferred and SailPoint accepted.
• Experience with CyberArk or comparable PAM platforms, Privileged Access Management, secrets management and privileged identity controls.
• Strong IAM governance and identity lifecycle management experience, including Joiner/Mover/Leaver, access requests, access reviews, roles, entitlements, RBAC, Segregation of Duties, least privilege, privileged access and exception management.
• Experience designing identity architecture for human identities, service accounts, application identities, workload identities, privileged identities and other non-human identities.
• Strong experience with SSO, MFA, Conditional Access, federation, identity proofing, adaptive access and application integration.
• Experience with APIs, connectors, SCIM, SAML, OAuth 2.0, OpenID Connect and related identity protocols.
• Strong experience with Azure and AWS identity and security models, including cloud identity, account structures, roles, permissions and governance.
• Experience translating business, security, regulatory and operational requirements into architecture decisions, detailed requirements, implementation sequencing and transition plans.
• Experience reviewing IAM designs for least privilege, resiliency, supportability, auditability and security standards.
• Experience with IAM target-state architecture, reference patterns, principles, standards, technology roadmaps, operating models and governance.
• Experience creating architecture documentation, decision records, data flows, integration diagrams, control mappings and operational standards.
• Experience addressing identity data quality, orphaned accounts, stale identities, over-provisioned access, service-account ownership and privileged-access risks.
• Experience with identity monitoring, detection, incident response and security-tool integration.
• Hands-on experience with PowerShell, Python, APIs, data exports and automation.
• Strong stakeholder management across IAM, identity engineering, application, cloud, security operations, audit, compliance and organizational change management.
• Ability to analyze complex environments, make architecture decisions, document solutions and influence technical and business stakeholders.

PREFERRED

• Experience with electric utilities, critical infrastructure, NERC CIP, SOX, IT General Controls, or similarly regulated environments.
• Experience with Identity Threat Detection and Response (ITDR), Identity Security Posture Management, service-account governance and non-human identity programs.
• Experience building identity standards, operating models, roadmaps and governance forums.
• Certifications: CISSP, CISM, CISA, CRISC, Microsoft Identity/Security, Saviynt, SailPoint, CyberArk, AWS, or Azure.
• Must be able to work onsite 2–3 days/week in the Dallas-Fort Worth area

Key Skills

Education

Bachelor's degree