Senior Security Architect

Overview

In this role you design and drive the IAM security strategy across cloud and on‑prem environments, partnering with engineering and business teams to embed secure-by-design principles. You lead threat modeling and risk assessments, shaping scalable security controls for a hybrid stack. The position sits in a global information security team and focuses on protecting identities, access, and sensitive data within a regulated financial services context. You will influence architecture decisions and mentor engineers, contributing to a rigorous security culture.

Pay / Benefits

• Competitive compensation and benefits package

Responsibilities

• Define and own IAM security architecture strategy for workforce, customer, and workload identities across hybrid environments
• Design and implement secure IAM solutions (IAM platforms, PAM, SSO, MFA, IGA)
• Architect controls across cloud (AWS, Azure, GCP) and on‑prem infrastructure
• Partner with engineering to bake secure‑by‑design into apps, infra automation, and CI/CD
• Conduct threat modeling, architecture reviews, and risk assessments
• Provide technical leadership and mentorship to junior team members
• Collaborate with GRC, SOC, and IT on regulatory alignment for financial services
• Evaluate emerging security technologies and advise leadership
• Develop and maintain security architecture standards, reference architectures, and design patterns

Key requirements

• 8+ years in information security
• 4+ years in security architecture
• Deep IAM expertise (Okta, Azure AD/Entra ID, Ping Identity, CyberArk, SailPoint, BeyondTrust)
• Strong knowledge of authentication/authorization protocols (OAuth 2.0, OIDC, SAML, SCIM, Kerberos, LDAP)
• Hands‑on experience with security controls in cloud and on‑prem environments
• Financial services industry experience and regulatory threat landscape awareness
• Knowledge of network security, cryptography, endpoint security, zero trust, and secrets management
• Experience with IaC (Terraform, CloudFormation) and scripting (Python, PowerShell, Bash)
• Excellent communication and stakeholder influence
• Bachelor’s degree in CS, Information Security, or related field (or equivalent)

• influencing stakeholders
• communication
• mentorship
• IAM technologies (Okta, Azure AD/Entra ID, Ping Identity, CyberArk, SailPoint, BeyondTrust)
• OAuth 2.0, OIDC, SAML, SCIM, Kerberos, LDAP
• public cloud security (AWS, Azure, GCP)

…