About this role:

The Lead Architect will partner closely with Cybersecurity, Cloud Engineering, Infrastructure, Risk, Product, and Application teams to define and implement secure, scalable, and resilient cloud identity architectures.

This role will serve as a key technical leader responsible for establishing enterprise standards, reference architectures, and design patterns that enable secure cloud adoption while supporting Zero Trust principles, regulatory requirements, and business objectives.

In this role, you will:

• Lead the implementation of complex projects and initiatives that have companywide scope

• Lead the development and adoption of AWS IAM reference architectures, design standards, and solution patterns

• Define architecture strategies supporting authentication, authorization, federation, access governance, and privileged access management within AWS environments

• Identify medium to high architectural impact projects

• Conduct complex technology and system assessments for architecture solutions

• Communicate the companywide Architecture strategy and direction to both management and systems related teams

• Make decisions in the development and maintenance of architectures

• Understand compliance and risk management requirements for supported areas

• Promote automation, Identity-as-Code, and API-driven integration capabilities across cloud identity services.

• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

• Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents)

• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting

• Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions

• Understand and account for model limitations, security risks, and operational considerations

• Apply AI responsibly in development and production environments

• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Required Qualifications:

• 5+ years of Architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 5+ years of experience designing and implementing enterprise-scale Identity and Access Management and cloud security solutions.

Desired Qualifications:

• Deep expertise in AWS IAM, AWS Identity Center, AWS Organizations, Service Control Policies (SCPs), federation, roles, policies, and cross-account access models.
• Experience developing enterprise architecture strategies, reference architectures, technology standards, and cloud transformation roadmaps.
• Strong knowledge of cloud security principles including Zero Trust, least privilege, Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC).
• Experience designing identity governance, privileged access management, and cloud entitlement management solutions.
• Knowledge of authentication and identity protocols including SAML, OAuth, OpenID Connect (OIDC), SCIM, and federation technologies.
• Experience supporting large-scale AWS environments in highly regulated organizations.
• Experience implementing Identity-as-Code, infrastructure automation, and API-first integration patterns.
• Ability to evaluate and mitigate cloud identity, access, and entitlement risks while balancing security, usability, and operational efficiency.
• Experience supporting SOX, SOC1, SOC2, PCI-DSS, FFIEC, or other regulatory compliance programs.
• Strong executive communication, stakeholder management, and architecture leadership skills.
• Industry certifications such as AWS Certified Solutions Architect Professional, AWS Certified Security Specialty, CISSP, CCSP, TOGAF, SABSA, or comparable credentials.

​

Locations: 

• 300 S Brevard, Charlotte, North Carolina 28202

• 3075 Loyalty Cir. - Columbus OH 43219

• 401 Las Colinas Blvd W Bldg. A - Irving, TX 75039

• 194 S Wood Ave - Iselin, NJ 08830

Posting Statements:

• Job posting may come down early due to volume of applicants. 

• Required location(s) listed above. Relocation assistance is not available for this position 

• Salary range is determined by location of the job.  May be considered for a discretionary bonus, Restricted Share Rights, or other long – term incentive awards. 

• This position is not eligible for visa sponsorship 

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

Posting End Date:

*Job posting may come down early due to volume of applicants.