Security IAM Domain Architect
Role details
Job location
Tech stack
Job description
Assesses ASML's security posture, identifies risks and vulnerabilities and leads the development of strategies to mitigate them effectively across sectors.
Shapes a security approach / strategy based on understanding the business and business objectives in detail, and liaises with executive stakeholders in their own field.
Functional expert, who is perceived as go-to person and is recognized by others as authority in own discipline. Role models effective behavior.
Identifies new external developments and emerging issues within an area of technology or business function and evaluate their potential impact on, or usefulness to, own Security area of expertise.
Has a deep understanding of stakeholder dynamics and organizational politics, which allows to navigate in complex stakeholder environments.
Is at the forefront of advancements and strategies in the field of Security, and is able to make implement the latest technologies in their field of work.
Is able to present about the topic of expertise to large audiences and is able to bring complex topics across in a clear, understandable and engaging way, supported by storytelling.
Roles and responsibilities
- Design, develop, and maintain IAM domain architecture aligned with enterprise security architecture.
- Define IAM principles, patterns, and reference architectures for identity lifecycle, authentication, authorization, and privileged access.
- Ensure IAM solutions comply with security policies, regulatory requirements, and industry best practices.
- Bridge Enterprise and System Architecture:
- Translate enterprise IAM principles into domain-level architectures.
- Provide guidance and reusable patterns for system architects and implementation teams.
- Document impacts of new IAM technologies on ASML's security posture.
- Maintain governance over IAM architecture and standards.
- Collaborate with enterprise architects, security architects, and product teams to ensure consistent IAM integration.
- Evaluate IAM technologies, tools, and vendors for strategic fit.
- Define implementation standards for IAM controls and processes.
- Support risk assessments and advise on IAM-related risks.
- Stay current with emerging IAM trends, standards, and threats.
Requirements
Do you have a Master's degree?, * Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field (Master's preferred).
- 8+ years of experience in IAM architecture or related security architecture roles.
- Proven experience with Security (e.g., TOGAF, SABSA) and/or IAM (NIST Digital Identity Guidelines, ISO/IEC 24760, Kantara Initiative standards, FIDO Alliance protocols, OAuth 2.0, OpenID Connect, SAML, etc.) frameworks and methodologies
- Hands-on experience with IAM technologies such as:
- Identity Governance & Administration (IGA)
- Privileged Access Management (PAM)
- Single Sign-On (SSO) and Multi-Factor Authentication (MFA)
- Directory Services (Active Directory, LDAP)
- Experience in defining IAM architecture in large, complex organizations.
- Familiarity with cloud IAM (Azure AD, AWS IAM) and hybrid identity models.
- Experience with agile practices (SAFe/Agile environments).
- Knowledge of regulatory and compliance frameworks impacting IAM; ISO 27001/2, NIST CSF, NIS2, etc.
- Strong conceptual understanding of IAM in OT/ICS/IoT environments is a plus., * Ability to think conceptually and strategically about IAM.
- Strong visualization skills for creating architectural diagrams.
- Excellent communication and stakeholder management skills.
- Analytical and problem-solving mindset.
- Strategic planning and content leadership.
- Project management and adaptability
About the company
ASML is a high-tech company, headquartered in the Netherlands. We manufacture the complex lithography machines that chipmakers use to produce integrated circuits, or computer chips. Over 30 years, we have grown from a small startup into a multinational company with over 60 locations in 16 countries across Europe, Asia and the US.