Senior Security Architect Consultant - Identity

ABOUT KALLES GROUP:Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.We believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group—and having fun while doing it.WHAT YOU WILL DO: As a Senior Security Architect Consultant – Identity, you will play a critical leadership role in helping our client modernize and strengthen its enterprise identity security capabilities. This position combines strategic architecture leadership with hands-on technical guidance, driving the evolution of identity platforms that protect employees, partners, and customers across a complex hybrid and multi-cloud environment.You will establish the target-state architecture for identity governance, privileged access management, cloud identity, and directory services while guiding engineering teams through large-scale transformation initiatives. Acting as a trusted technical authority, you will define architectural standards, integration patterns, and deployment strategies that enable secure, scalable, and resilient identity services. Working closely with security leaders, engineers, architects, and program stakeholders, you will help bridge strategy and execution while ensuring solutions align with security, compliance, and business objectives.Key Responsibilities: Define and maintain the strategic architecture vision for enterprise identity security platforms and servicesDevelop target-state architectures, reference designs, and implementation roadmaps for identity modernization initiativesLead architecture efforts related to privileged access management, identity governance, cloud identity, directory services, and Zero Trust security modelsEstablish architecture standards, design patterns, integration frameworks, and governance practices for identity solutionsServe as a technical design authority, providing guidance through architecture reviews and key implementation decisionsDesign migration and deployment strategies that minimize risk and business disruption during platform transformationsArchitect integrations between identity platforms, cloud services, enterprise applications, and SaaS solutionsDrive enterprise adoption of phishing-resistant authentication, least-privilege access models, and modern identity security controlsPartner with engineering, cloud, security, and program teams to translate architecture strategy into executable delivery plansMentor engineers and technical teams, ensuring alignment with architecture principles and security requirementsIdentify architectural risks, dependencies, and trade-offs while providing recommendations to technical and executive stakeholdersSupport compliance, security, and governance objectives through secure identity design and control implementationLeverage emerging technologies, including AI-enabled tools, to improve architecture analysis, documentation, and solution evaluationABOUT YOU:Your values:Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.YOUR EXPERIENCE:Required QualificationsBachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related discipline, or equivalent professional experience15+ years of experience in cybersecurity, identity engineering, or security architecture rolesDemonstrated success leading enterprise-scale identity security transformation initiatives from strategy through implementationDeep expertise in identity and access management architecture and modern identity security principlesStrong experience with identity platforms such as Microsoft Entra ID, Active Directory, SailPoint, BeyondTrust, Okta, or comparable enterprise solutionsAdvanced understanding of authentication and authorization technologies, including SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and KerberosExperience designing privileged access management (PAM), identity governance, and access control solutionsExpertise implementing Zero Trust identity architectures and modern authentication strategiesProven experience architecting solutions across hybrid and multi-cloud environments, including Azure, AWS, and GCPExperience establishing architecture standards and providing technical leadership across multiple engineering teamsStrong communication and stakeholder management skills with the ability to influence both technical and executive audiencesAbility to operate effectively in large-scale, fast-paced environments with multiple concurrent workstreamsPreferred QualificationsProfessional certifications such as CISSP, SABSA, TOGAF, SC-300, SailPoint Certified Engineer, or similarExperience with Infrastructure as Code technologies such as Terraform and AnsibleFamiliarity with CI/CD practices supporting identity platform deliveryExperience with Identity Threat Detection and Response (ITDR) capabilitiesExperience integrating identity security telemetry into SIEM and SOAR platformsBackground supporting large enterprise, retail, e-commerce, or other high-transaction environments WHAT WE OFFER:The annual salary range for this role is $210,000-$260,000. Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.LOCATION:This role is on-site in Seattle, WA. We are only considering candidates that already live in the Greater Seattle, WA area.HOW TO APPLY: Please fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.Even if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process to View email address on click.appcast.io Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.