Senior Security Architect (Identity & Infrastructure)

Position Overview:

Join our dynamic Security Engineering team as an Associate Principal and make a significant impact on our organization's cybersecurity posture. In this role, you will manage privileged access systems that protect our most critical assets, implement AI-based security capabilities, and help shape our security architecture. This position offers excellent growth opportunities as you will work with best-in-class technologies while collaborating with cross-functional teams to solve complex security challenges. If you are passionate about cybersecurity and seeking a role where your expertise directly strengthens organizational resilience, this is an ideal next step for your career.

Primary Duties and Responsibilities:

To perform this job successfully, an individual must be able to perform each primary duty satisfactorily.

• Provide 24x7 operational support for the suite of privileged management solutions (e.G., CyberArk, HashiCorp Vault, PKI), including implementing hot fixes, resolving bugs, troubleshooting issues, performing break-fixes, managing secrets lifecycle, and delivering end-user support.
• Maintain robust operational integrity of privileged access management infrastructure throughout its lifecycle (e.G., patching, version control, system upgrades, alignment with enterprise and regulatory security standards, etc.).
• Provide organizational subject matter expertise on secrets management and privileged access management architecture, establishing and enforcing "security as code" principles throughout the environment.
• Develop and implement system enhancements to improve platform user experience and automated integrations, while designing long-term solutions to address operational issues through innovative technologies, including artificial intelligence for faster detection and remediation of functional and technical problems.

Qualifications:

The requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the primary functions.

• Knowledge of application authentication and authorization systems (i.E., Active Directory, OAuth 2.0, OIDC, AWS IAM, App Role, Kubernetes, LDAPS, Kerberos, Certificate-based authentication).
• Working knowledge of the cloud ecosystem and CI/CD deployments with Terraform, Ansible, and Jenkins pipelines.
• Working knowledge of security architecture design and principles, including confidentiality, integrity, and availability (CIA).

Technical Skills:

• Expertise in providing operational and engineering support for one or more of the following: CyberArk, HashiCorp Vault, Active Directory Certificate Services (ADCS), Hardware Security Modules (HSMs), and Public Key Infrastructure (PKI).
• Expertise in scripting languages and developing in one or more of the following languages: GoLang, Bash, Python, PowerShell, Ansible, and/or Terraform.
• Knowledge of privileged access management methodologies and techniques for both on-premises and Cloud implementations.

Education and/or Experience:

• Experience in one or more of the following disciplines: security operations, development, engineering, or architecture.
• Experience supporting privileged access management and access control programs.
• Professional or personal experience using AI coding agents such as OpenAI Codex, Claude Code, or Gemini CLI.