Senior Identity Security Architect
Accountabilities: Serve as a trusted advisor to enterprise customers implementing Identity Attack Path Management programs and help translate attack path findings into actionable remediation strategies.
Analyze identity attack paths and help customers prioritize remediation based on risk, business impact, dependencies, and operational constraints.
Facilitate collaboration across Security, Infrastructure, IAM, Endpoint Management, Engineering, and other stakeholder groups to drive remediation initiatives forward.
Provide architectural and operational guidance across Active Directory, Microsoft Entra ID, and hybrid identity environments.
Advise on delegated administration, privileged access management, administrative tiering, identity governance, service account security, and broader identity modernization initiatives.
Assist customers with the development and operationalization of Privilege Zones and evaluate identity architectures through an adversary-focused, attack-path lens.
Develop remediation frameworks, playbooks, reference architectures, and repeatable guidance covering prioritization, ownership, implementation, and validation.
Identify recurring customer challenges and codify successful remediation patterns to strengthen scalable delivery methodologies.
Partner with security researchers to translate emerging tradecraft and attack path research into practical customer guidance.
Support consultants and Technical Account Managers through training, mentorship, and technical guidance while contributing to the evolution of identity security best practices.
Help establish and mature enterprise remediation methodologies and architectural frameworks that improve customer outcomes and enable measurable reductions in identity-related risk.
Requirements
8+ years of experience designing, operating, securing, modernizing, or remediating enterprise identity environments.
Deep expertise in Active Directory and Microsoft Entra ID, including hybrid identity architectures and identity synchronization technologies.
Practical experience with BloodHound or comparable attack path analysis methodologies.
Demonstrated success leading enterprise remediation, modernization, migration, or security improvement initiatives.
Strong understanding of administrative tiering, delegated administration, privileged access management, identity governance, and enterprise identity operations.
Experience working directly with technical and business stakeholders, ideally in consulting, professional services, or customer-facing advisory environments.
Proven ability to develop methodologies, frameworks, operational programs, and repeatable remediation practices.
Excellent written and verbal communication skills, with the ability to translate complex security concepts into clear recommendations for varied audiences.
Experience supporting large-scale enterprise Active Directory environments, particularly environments with 50,000+ users, is highly desirable.
Familiarity with offensive security principles, adversary tradecraft, or red team operations is a plus.
Experience with identity platforms such as Okta, Ping Identity, CyberArk, or SailPoint is advantageous.
Familiarity with endpoint management technologies such as Microsoft Intune, SCCM, Tanium, or Jamf is beneficial.
Knowledge of PKI, virtualization, cloud infrastructure, and other critical enterprise technologies is a plus.
Must be authorized to work and reside in the United States; immigration sponsorship is not currently available for this position.
Benefits
Base salary: $175,000–$200,000 USD, with actual compensation depending on experience, location, and other relevant factors.
Additional compensation: Eligibility for bonus and equity opportunities.
Healthcare: 100% company-paid health, dental, vision, and life insurance for employees and their families.
Retirement: 401(k) with up to a 4% company match.
Time off: Flexible time-off policy plus 13 paid holidays annually.
Remote work: $1,500 first-year home-office setup allowance and $500 annual home-office allowance thereafter.
Connectivity: $150 monthly reimbursement for cell phone and internet expenses.
Professional development: $5,000 annual professional development allowance.
Education support: Up to $5,250 toward continuing education or student loan repayment.
Wellness: $1,200 annual benefit supporting lifestyle, wellness, pet insurance, and related expenses.
Family support: One-time $10,000 benefit toward family planning.
Work environment: Fully remote U.S.-based position with optional quarterly travel for in-person company events and occasional meetings.
Culture and collaboration: Opportunities to participate in virtual and in-person employee events while working with experienced security professionals on impactful identity security challenges.
How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1