Full Job Description
Senior IAM Cybersecurity Architect is responsible for: Identity security strategy. Define identity security architecture, standards and roadmap; assess maturity, threats and gaps; set priorities. Security controls and Zero Trust. Define controls based on Zero Trust, least privilege and defence-in-depth. Establish patterns for authentication, authorization, federation, SSO, MFA, passwordless and conditional access. Secure human and non-human identities, including service, application and workload accounts, credentials, certificates and secrets. Hybrid identity and directories. Architect Active Directory, Entra ID and hybrid identity, including directory sync, trust and app integration. Guide directory hardening, administrative isolation, identity tiering and protection from credential theft, privilege escalation and lateral movement. Privileged access and threat protection. Architect PAM, including credential vaulting, session monitoring, JIT access, privileged workstations and third-party access. Define identity threat models, attack-path analysis and controls against identity compromise and privilege misuse. Define ITDR and SIEM/SOAR integration for identity threat detection and response. Cyber recovery and resilience. Define identity recovery architecture, protected backups, isolated recovery, emergency administration, redundancy and high availability; ensure continuity and DR for critical services. Assurance and leadership. Review IAM architecture and controls; guide remediation of vulnerabilities, audit findings and control gaps. Integrate cybersecurity, privacy and regulatory requirements; ensure auditability, risk management and exception processes. Promote security automation and Identity-as-Code/IaC using scripts and APIs. Guide IAM and delivery teams; communicate architecture decisions and risks to leaders.
