IAM/Security Infrastructure Architect

A financial firm is looking for an IAM/Security Infrastructure Architect to join their team in Charlotte, NC.

Compensation: $150-195k
US Citizen/GC Holders Only; No visa sponsorship
Candidates must be local; No relocation

Responsibilities:

• Work with Information Security to develop and promote infrastructure requirements within security-related initiatives and ensure that security requirements are integrated into infrastructure projects
• Increase operational and financial efficiencies through identification of opportunities to standardize security toolsets and practices within a multi-company environment
• Ensure that the proposed and existing infrastructure architectures are aligned with organizational goals and objectives
• Architecture collaboration with other teams, translating application team needs into technical solutions and product requirements
• Drive Infrastructure security and compliance requirements into the architecture framework
• Facilitate documentation of existing systems architecture and technology portfolios and make recommendations for improvements and/or alternatives

Qualifications:

• Experience with identity infrastructure and synchronization technologies including Active Directory, Entra ID, LDAP, SAML, SCIM, EID Connect, Cloud Synch, and MIM
• Background in end-to-end identity provisioning/deprovisioning standards and best practices including HRIS to IdP relationships and attribute management
• Familiar with authentication infrastructure, protocols, and access controls
• Familiar with Microsoft native and competing security products such as Entra Identity Governance, Entitlement Management, Defender, and Purview
• Understanding of endpoint management tools and standards including endpoint DLP, Defender for Cloud Apps, Intune endpoint management, and other policy frameworks
• Monitoring and logging tools such as Microsoft Sentinel, Cribl, Splunk, Cloudwatch, Cloudtrail, and MS Log Analytics
• Experience facilitating discussions with senior leadership regarding technical/architectural trade-offs, best practices, and risk mitigation