Security Architect - Jersey City, NJ (Onsite)

Job Description

Experience: 6 - 9 Years

Must Have Technical/Functional Skills

Key Responsibilities

1. Discovery & Assessment

· Assess the organization's current IAM landscape, including:

o Identity Governance & Administration (IGA)

o Privileged Access Management (PAM)

o Authentication and Single Sign-On (SSO)

o Access Certification and Governance processes

o Directory Services and Identity Stores

· Evaluate existing IAM security controls, architecture standards, and operational processes.

· Identify security, compliance, and operational gaps.

· Produce current-state architecture assessments and recommendations.

2. Requirements Gathering & Analysis

· Conduct workshops and stakeholder interviews with business, security, risk, compliance, and application teams.

· Gather functional and non-functional IAM requirements.

· Translate business and regulatory requirements into IAM architecture principles.

· Document use cases and security requirements.

3. IAM Architecture Design

· Define enterprise IAM architecture standards and frameworks.

· Design:

o Authentication architectures

o Authorization models

o Role-Based Access Control (RBAC)

o Attribute-Based Access Control (ABAC)

o Federation and Single Sign-On architectures

o Privileged Access Management frameworks

· Ensure architecture alignment with Zero Trust and cybersecurity policies.

4. IAM Security Pattern Development

· Develop reusable IAM security patterns for common business scenarios.

· Establish standard design templates and implementation blueprints.

· Create approved reference architectures covering:

o Joiner-Mover-Leaver processes

o Application onboarding

o Privileged access management

o API and service account security

o Federation and external identity integrations

o MFA and passwordless authentication

· Maintain a catalog of approximately 160 enterprise IAM patterns.

5. Security Architecture Reviews

· Conduct architecture reviews for IAM solutions and integrations.

· Collaborate with Security, Risk, Compliance, Infrastructure, and Engineering teams.

· Review technical designs against security standards and control requirements.

· Drive remediation of architecture and security control gaps.

6. Documentation & Standards Management

· Develop and maintain:

o IAM Architecture Frameworks

o Security Standards

o Architecture Decision Records (ADRs)

o Technical Reference Architectures

o Pattern Catalogs

o Implementation Guidance Documents

· Ensure architecture artifacts remain current and accessible.