Responsibilities
- Shift enterprise access controls from fixed role assignments to dynamic, risk-informed authorization using real-time signals like device health, user behavior, and geolocation.
- Refine and align the organization's identity strategy, long-term roadmap, and technical architecture with business objectives and security standards.
- Architect end-to-end identity solutions covering user and non-human identity lifecycles, multi-factor authentication, single sign-on, passwordless systems, access governance, and privileged account management.
- Assess and recommend identity technologies and platforms that meet enterprise needs and future scalability.
- Document identity architectures thoroughly and keep them current as systems evolve.
- Lead the design and deployment of identity and access management frameworks, managing human, workload, and machine identities across hybrid environments including Kubernetes, serverless functions, APIs, and cloud platforms.
- Oversee implementation and integration of identity systems across on-premises and cloud infrastructures such as Azure AD, AWS, GCP, Okta, and Entra.
- Connect identity providers with enterprise applications and services using standard protocols including SAML, OAuth, OpenID Connect, and SCIM.
- Develop and enforce security strategies for non-human identities using Zero Standing Privilege, 'Just-in-Time' access models, and Zero Trust principles to minimize attack surface.
- Build automated workflows for granting and revoking identity access across systems.
- Collaborate with the Security Operations Center to implement Identity Threat Detection and Response capabilities that identify and stop attacks like session takeovers, token theft, and MFA bombing.
- Serve as a security advisor to engineering teams, promoting secure coding and development practices.
- Engage with stakeholders across business and technology units to drive adoption, translating complex identity concepts into tangible business benefits.
- Lead developer enablement by delivering self-service identity APIs and SDKs that simplify secure development and improve developer experience.
- Offer technical mentorship and guidance to Identity Engineers and other team members.
