Job description
Work Flexibility: RemotePreference will be given to candidates residing in the Eastern or Central time zones.
As an Identity Security Architect, you will design and govern enterprise identity and access management solutions that protect organizational assets while enabling secure access to business systems and applications. You will serve as the technical authority for identity security and partner with cybersecurity, infrastructure, cloud, application, enterprise architecture, security operations, and business teams across on-premises and cloud environments.
What you will do:
Technical Responsibilities:
Design and maintain enterprise identity security architecture, standards, and reference designs.
Develop identity strategies that support Zero Trust Architecture and enterprise digital transformation.
Architect authentication, authorization, federation, single sign-on (SSO), multi-factor authentication (MFA), and identity lifecycle management solutions.
Lead architecture reviews for IAM projects, cloud implementations, and business applications.
Design and govern Privileged Access Management (PAM) solutions and privileged identity controls.
Integrate identity security controls with Infrastructure, Cloud Engineering, Enterprise Architecture, Application Development, and Security Operations teams.
Develop identity governance processes for role-based access control (RBAC), least privilege, segregation of duties (SoD), and access certification.
Conduct identity threat modeling, architecture risk assessments, and security design reviews.
Evaluate emerging identity technologies and recommend architectural improvements.
Support compliance with NIST CSF, ISO 27001, HIPAA, SOX, FDA Cybersecurity Guidance, and applicable regulatory requirements.
Develop architecture documentation, technical standards, implementation guidance, and operating procedures.
Leadership & People Management Responsibilities:
Provide technical leadership and mentorship to engineering teams implementing identity security capabilities.
Knowledge and Capabilities:
Analyze complex identity security challenges and translate findings into practical architecture decisions.
Design enterprise identity architectures that connect security requirements, business needs, and technology capabilities.
Communicate identity architecture standards, risks, and implementation guidance to technical and business partners.
What You Need:
Required Qualifications
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline.
Minimum 8 years of experience in cybersecurity or identity management.
Minimum 3 years of experience designing enterprise IAM architectures.
Experience implementing SSO, MFA, PAM, Identity Governance and Administration (IGA), and directory services.
Experience with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, CyberArk, Delinea, or similar technologies, including cloud identity security across Azure, AWS, or Google Cloud.
United States of America Pay Ranges:
USN: $135,600 - $225,900 USD Annual
US5: $142,400 - $237,200 USD Annual
US10: $149,200 - $248,500 USD Annual
US15: $155,900 - $259,800 USD Annual
US20: $162,700 - $271,100 USD Annual
US30: $176,300 - $293,700 USD Annual
View the U.S. work location and transparency guide to find the pay range for your location.
Travel Percentage: NoneStryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability.Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.