Role Overview:We are seeking a highly skilled Tech Lead/Architect to lead the Identity-centric Workforce Security team. This role involves developing advanced authentication and access management solutions, driving the adoption of modern security protocols, and ensuring secure implementations across hybrid and cloud environments. The architect will also engage in AI adoption with an identity focus and provide expert consultation on security solutions to partners and IT Management.
Key Responsibilities: - Lead the Identity-centric Workforce Security team to develop authentication and access management solutions.
- Drive the development of identity solutions, access patterns, and modern security protocols, adhering to Zero Trust, least privilege, and defense-in-depth principles.
- Participate and engage in AI adoption with an Identity focus, understanding Entra ID agentic Identity, authentication flows, and patterns.
- Review and provide feedback on Identity and Access Management (IAM) related security solutions proposed by stakeholders, offering consultation to partners and IT Management.
- Provide security solutions for Java-based Microservices, React-based frontends, and Android/iOS mobile applications on Azure.
- Support operations by troubleshooting complex identity scenarios with hands-on experience in Sentinel/KQL/Audit logs.
- Participate in solutions supporting token handling, OIDC/OAuth flows, authorization patterns, identity federation, cloud architectures, cryptography, cloud-native services, and cloud security.
Required Skills: - In-depth knowledge and experience with Entra ID, EPM, Sentinel, Azure, and AWS Security.
- Knowledge of Okta, PingFederate, and Entitlement management solutions.
- Strong knowledge of Identity management on Azure AD, including OAuth, OIDC, SAML, SSO, MFA, Conditional Access Policies, Kerberos, LDAP, and Identity Federations.
- Hands-on experience with JWT, session handling, code signing, certificate authentication, TLS/SSL, API Security, application registration, and application integration scenarios.
- Awareness of API Management, Firewalls, DLP, VPNs, DNS, Azure Defender, MCAS, Sentinel, WAFs, Application Gateways, NSGs, App Proxy, Radius clusters, and CDN.
- Good understanding of Cloud Infrastructure Entitlement Management (CIEM) solutions for remediation of toxic combinations and high-risk entitlements.
- Understanding and application of threat modeling concepts and methodologies.
- Understanding of Application security, OWASP standards, security best practices, browser compatibilities/storages/cookies.
- Expertise in various security products, authentication, authorization, access management, AI, and governance.
- Proficiency in Cyber Security - IAM Professional Services and Information Security.
- Good understanding of concepts related to Docker Security and container orchestrations/Kubernetes.
Qualifications: - 10+ years of experience in a relevant field.
- Proven experience as a Tech Lead/Architect with deep expertise in security products and IAM.
Preferred Skills: - Good understanding of AI concepts, patterns, and their impact on the identity and access management domain.
- Deeper understanding of Cloud Security areas such as Policies, RBAC, activities, identities, and privileged access management.
