Senior Lead Cybersecurity Architect - Cloud IAM
Role details
Job location
Tech stack
Job description
- Architect and oversee identity provisioning, role management, and entitlement processes for cloud infrastructure.
- Architect and manage RBAC, ABAC, PBAC, and role certification frameworks.
- Lead threat hunting initiatives and develop threat models for cloud IAM environments and collaborate with security operations to proactively identify and mitigate risks.
- Design and implement workload identity solutions and privileged access management for cloud workloads and Integrate, manage privileged access tools and processes.
- Deploy and manage IAM solutions such as EntraID, Ping, ForgeRock, CyberArk, Hashicorp Vault, and Dileania.
- Evaluate and recommend IAM products and integrations for cloud environments.
- Ensure IAM architectures align with NIST, OWASP, MITRE, and encryption standards and maintain compliance with regulatory requirements and internal policies.
- Develop and execute multi-cloud IAM strategies supporting platforms and lead large-scale IAM implementations and migrations.
- Design and develop custom IAM workflows to automate provisioning, certification, and access reviews.
- Integrate IAM with data security controls and risk management frameworks and conduct risk assessments and implement mitigation strategies.
Requirements
- Formal training or certification on Cybersecurity concepts and 5+ years applied experience in cybersecurity architecture, with a focus on cloud IAM.
- Proven experience in identity provisioning, role management, and entitlement management for cloud infrastructure.
- Hands-on experience in threat hunting, threat modeling, and privileged access management.
- Deep expertise with IAM products: EntraID, Ping, ForgeRock, CyberArk, Hashicorp Vault, Delinea.
- Strong knowledge of RBAC, ABAC, PBAC, role certification, and cloud provisioning.
- Familiarity with security standards: NIST, OWASP, MITRE, encryption protocols.
- Experience with multi-cloud strategies and large-scale IAM implementations.
- Proficiency in developing custom IAM workflows and automation.
- Solid understanding of data security, risk management, and compliance frameworks., * Professional certifications: CISSP, CCSP, AWS/Azure Security, or equivalent.
- Experience in financial services or highly regulated industries.
- Excellent communication, leadership, and stakeholder management skills.
- Ability to mentor and guide junior architects and engineers.
Benefits & conditions
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.