Cybersecurity Identity Architect

Role: Strategic Cybersecurity Identity Architect leading enterprise IAM design and implementation across cloud and on-prem environments. Responsibilities: develop and maintain identity architecture blueprints, design scalable solutions including SSO, MFA, federation, and privileged access; collaborate with cross-functional teams to translate security requirements into technical designs; evaluate IAM tools, oversee their integration, and ensure alignment with zero trust, data protection, and compliance standards (e.g., NIST, ISO, GDPR); stay current with emerging IAM trends, evaluate new technologies like passwordless authentication and AI-driven access decisions, and manage vendor relationships. Requirements: Bachelor's in Cybersecurity, Computer Science, or related field; 10+ years experience in enterprise identity management, with strong knowledge of identity protocols (SAML, OAuth, OpenID, LDAP, Kerberos), cloud identity platforms (Azure AD, AWS, GCP), and hybrid environments. Preferred: CIAM certification, deep understanding of non-human identities (service accounts, AI agents), experience with IAM platforms (CyberArk, Saviynt), and supporting large multinational enterprises. Additional qualifying skills include knowledge of regulatory standards (HIPAA, SOX, PCI-DSS), and experience supporting manufacturing or OT environments. Work setup: On-site at Maplewood, MN or Austin, TX, 4+ days/week, with up to 5% travel.