Security Architect

Job Title: Security Architect

Job Role: Architect - Agentic Identity & Access Management (IAM)

Dallas,TX -Hybrid

Required Skills & Experience (Ranked by Importance)

1. Enterprise IAM Architecture & Integration (3-5+ years): Proven experience architecting enterprise Identity and Access Management, Identity Governance (IGA), and Privileged Access Management (PAM) across hybrid and multi-cloud environments.
2. Agentic AI & Non-Human Identity Governance: Deep understanding of authorization models for AI agents, autonomous tools, MCP servers, service accounts, and API access patterns.
3. Advanced Authentication & Delegation Standards: Hands-on expertise designing modern token exchange protocols, OAuth 2.0 / OIDC flows, short-lived credentials, and workload identity patterns for machine-to-machine interactions.
4. Secrets Management & Tooling Expertise: Experience integrating enterprise IAM and security tools such as CyberArk , SailPoint (Identity Security Cloud / Entro) , Ping Identity Platform , Microsoft Entra ID , HashiCorp Vault , or AWS Secrets Manager / IAM .
5. Zero Trust & Runtime Authorization: Proven track record applying Zero Trust principles, Zero Standing Privilege (ZSP), attribute-based access control (ABAC), and policy-as-code.
6. AI Safety & Governance Frameworks: Familiarity with NIST AI RMF , OWASP Top 10 for LLMs , and audit/compliance standards for autonomous AI operations.
7. Agile Delivery & Stakeholder Influence: Experience collaborating in cross-functional technical teams (preferably Scaled Agile Framework / SAFe), translating complex identity concepts into clear architecture decision records (ADRs) and executive briefings.

Qualifications & Education

• Education: Bachelor’s degree in Technology, Computer Science, Cybersecurity, Information Systems, Business, or equivalent practical work experience.
• Basic Requirements: Must be at least 18 years of age with legal authorization to work in the United States without sponsorship (Immigration Reform Act of 1986).

Preferred Certifications

• Security & Architecture: CISSP, CCSP, CISM, or AWS Certified Security - Specialty.
• Identity & Vendor Platforms: Certified CyberArk Defender/Sentry, SailPoint Certified IdentityIQ/IdentityNow Engineer, or Ping Identity Certified Professional.
• AI & Cloud Fundamentals: AWS Certified AI Practitioner, AWS Cloud Practitioner, or AI Risk/Security certifications (e.g., AAISM, CompTIA Sec AI+).

Work Style & Core Competencies

• Strategic thinker with the ability to navigate ambiguity and create structured architecture in rapidly evolving domains.
• Strong consensus-builder capable of mediating technical tradeoffs between AI velocity, usability, and rigorous identity controls.
• High attention to detail with clear documentation skills for enterprise standards, roadmaps, and reference architectures.