Cyber Operate Manager - Identity Security Architect & Product Engineering

Deloitte • Jersey City, NJ

12d • $134,500 - $265,100

About The Position

Join Deloitte as a Lead Managed Services Engineer II on the Cyber Operate team, designing, engineering, and deploying identity security capabilities across enterprise environments. The role advances attack path analysis, identity threat protection, authentication modernization, policy-based access control (PBAC), and identity-driven attack containment. It combines identity and access management architecture, Zero Trust, and product engineering to help clients reduce risk, strengthen resilience, and improve access experiences. You will work with cybersecurity, infrastructure, engineering, architecture, product, and vendor teams to deliver scalable solutions using Sgnl.ai, PlainID, Microsoft Entra ID (Azure AD), and CrowdStrike Identity Protection. Work outside standard business hours may be required based on business needs.

Deloitte’s Cyber Operate offering operates clients’ critical cyber assets as a fully managed service or in partnership with clients. It provides talent, technology, and processes to operate cyber capabilities, including identity lifecycle, security operations, threat intelligence, application security business transformation, and continuous compliance.

The role requires residence within a commutable distance of the assigned office, with the ability to commute daily if required. Average co-location is once a week, with variation based on work, projects, and client locations. Average travel is 20–25%, depending on the work and clients served. Limited immigration sponsorship may be available.

Requirements

• At least 6 years of experience designing IAM architecture for workforce, privileged, and machine identities, including Microsoft Entra ID (Azure AD), SSO, MFA, identity governance, PAM, federation, and authentication protocols.
• Experience engineering, integrating, and operationalizing Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID (Azure AD) across enterprise applications and infrastructure.
• Experience applying Zero Trust Architecture, ITDR, attack path analysis, authorization frameworks, PBAC, and risk-based authentication.
• Experience integrating platforms using APIs, identity protocols, automation, and cloud-native architectures.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills, attention to detail, and commitment to quality work.
• Ability to build and sustain professional relationships and maintain a professional demeanor.
• Ability to lead projects or workstreams, prioritize multiple tasks in a fast-paced and dynamic environment, meet deadlines, and mentor others.
• Must reside within a commutable distance of the assigned office and be able to commute daily if required, without overnight accommodations.
• Ability to travel an average of 20–25%, depending on work, clients, and industries or sectors served.

Nice To Haves

• At least 10 years of experience in cybersecurity, IAM, identity architecture, or security engineering.
• Experience leading identity transformation programs for organizations subject to regulatory requirements.
• Experience applying NIST and Zero Trust frameworks.
• One or more certifications: CISSP, CCSP, Azure Security Engineer, or a CIAM or IAM certification.
• Master’s degree.

Responsibilities

• Define identity security roadmaps and architecture standards aligned with Zero Trust for authentication, authorization, access governance, and workforce, privileged, and machine identities.
• Partner with product vendors and internal teams to translate business requirements into IAM solutions across enterprise applications and infrastructure.
• Lead product engineering and deployment for Sgnl.ai, PlainID, CrowdStrike Identity Protection, Microsoft Entra ID (Azure AD), and authentication and authorization platforms.
• Expand attack path analysis, identity threat detection, risk scoring, and identity-driven attack containment to address identity-based attack vectors, privilege escalation paths, lateral movement, and access risks.
• Advance authentication services and access experiences, including adaptive access, PBAC, identity-aware authorization, and risk-based access decisions using identity intelligence and continuous verification.
• Lead projects or workstreams, manage and prioritize multiple tasks, meet deadlines, and mentor others.

Benefits

• May be eligible to participate in a discretionary annual incentive program, subject to program rules and applicable factors.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed