> Markdown version of [/jobs/ext/4423117-cyber-operate-manager-identity-security-architect-product-engineering](https://www.wearedevelopers.com/jobs/ext/4423117-cyber-operate-manager-identity-security-architect-product-engineering). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Operate Manager - Identity Security Architect & Product Engineering

- **Company:** Deloitte T.T.L.
- **Location:** San Jose, CA, United States
- **Experience:** Expert
- **Salary:** $134,500.0 - $265,100.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), User Authentication, Authentication Protocols, Microsoft Azure, Cloud Computing Security, Cloud Engineering, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Information Systems Security Architecture Professional, Azure Active Directory, Zero Trust Network Access, Single Sign-On, Systems Integration, Enterprise Software Applications, Customer Identity Access Management, Vulnerability Analysis
- **Published:** October 31, 2026
- **Apply:** https://dejobs.org/x/x/E1D368E9135A4A18AA388795AC896371/job/

## About the Role

* Ability to work independently and collaborate as part of a team
 * Effective written and verbal communication skills
 * Meticulous attention to detail and quality of work product
 * Ability to build and sustain professional relationships
 * Ability to lead projects or workstreams
 * Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
 * Strong interpersonal skills and professional demeanor
 * Ability to meet deadlines
 * Ability to mentor and provide clear guidance to others, Required:
 * 6+ years of Experience designing identity and access management (IAM) architecture for workforce, privileged, and machine identities, including Microsoft Entra ID (Azure AD), single sign-on (SSO), multifactor authentication (MFA), identity governance, privileged access management (PAM), federation, and authentication protocols.
 * Experience engineering, integrating, and operationalizing Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID (Azure AD) across enterprise applications and infrastructure.
 * Experience applying Zero Trust Architecture, identity threat detection and response (ITDR), attack path analysis, authorization frameworks, PBAC, and risk-based authentication; integrating platforms using application programming interfaces (APIs), identity protocols, automation, and cloud-native architectures.
 * You must reside within a commutable distance of your assigned office with the ability to commute daily, if required, without the need for overnight accommodations.
 * You can expect to co-locate on average 1 times a week with variations based on types of work/projects and client locations.
 * Ability to travel 20-25%, on average, based on the work you do and the clients and industries/sectors you serve.
 * Limited immigration sponsorship may be available.

Preferred:

 * 10+ years of experience in cybersecurity, IAM, identity architecture, or security engineering.
 * Experience leading identity transformation programs for organizations subject to regulatory requirements.
 * Experience applying National Institute of Standards and Technology (NIST) and Zero Trust frameworks.
 * One or more of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Azure Security Engineer, or customer identity and access management (CIAM) or identity and access management (IAM) certification.
 * Master's degree.

## Description

As a Lead Managed Services Engineer II on the Cyber Operate team, you will be responsible for:

 * Define identity security roadmaps and architecture standards aligned with Zero Trust for authentication, authorization, access governance, and workforce, privileged, and machine identities.
 * Partner with product vendors and internal teams to translate business requirements into identity and access management solutions across enterprise applications and infrastructure.
 * Lead product engineering and deployment for Sgnl.ai, PlainID, CrowdStrike Identity Protection, Microsoft Entra ID (Azure AD), and authentication and authorization platforms.
 * Expand attack path analysis, identity threat detection, risk scoring, and identity-driven attack containment to address identity-based attack vectors, privilege escalation paths, lateral movement, and access risks.
 * Advance authentication services, including authenticator capabilities and access-experience improvements, alongside adaptive access, PBAC, identity-aware authorization, and risk-based access decisions using identity intelligence and continuous verification.