Principal Cybersecurity Architect – Identity, IAM & Zero Trust

Qualifications

• 8+ years in information security, with 4+ years in an architecture or senior engineering role
• Proven track record, building trusted relationships with business and technical stakeholders - including direct experience acting as a consultant or advisor, whether internally or with clients
• Demonstrated ability to influence outcomes and gain buy-in without formal authority, navigating competing priorities across engineering, business, and leadership
• Experience facilitating workshops, requirements-gathering sessions, or architecture reviews with mixed technical and non-technical audiences
• Excellent written and verbal communication skills - able to translate complex architecture into clear guidance for engineers, business stakeholders, and executives alike
• Deep expertise in Zero Trust frameworks (NIST SP 800-207, BeyondCorp) and identity-centric security
• Strong understanding of threat modeling methodologies (STRIDE, PASTA, ATT&CK) and their application to identity attack surfaces
• Hands-on experience with enterprise IAM platforms - Microsoft Entra ID, Okta, Ping Identity, or equivalent
• Strong grasp of federation protocols: SAML 2.0, OIDC, OAuth 2.0, SCIM
• Experience with PAM platforms (CyberArk, BeyondTrust, Delinea) and secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
• Familiarity with CIEM tooling and cloud IAM governance across at least two major cloud platforms
• Experience designing and governing identity lifecycle and IGA processes (SailPoint, Saviynt, or equivalent a plus)
• Certifications (preferred): CISSP, SABSA, TOGAF, Microsoft SC-100, Okta Certified Architect, or equivalent

Certain states and localities require employers to post a reasonable estimate of the salary range. A reasonable estimate of the current base pay range for this position is $159,600 to $199,500 annually. Actual salary will be based on a variety of factors, including shift, location, experienc