Identity Security Architect - IAM & Zero Trust (FTE / Hybrid)

NTT DATA Services•Pine Grove Township, PA

2d•$117,600 - $196,000•Hybrid

About The Position

NTT DATA is seeking an Identity Security Architect to define and execute enterprise identity-security strategy and architecture aligned with Zero Trust and broader cybersecurity objectives. The role designs scalable IAM solutions for workforce, privileged, service, machine, and application identities, and establishes standards for authentication, authorization, access governance, identity lifecycle management, and privileged access. The architect leads engineering, integration, deployment, and operationalization of identity-security platforms, including Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID. The role works with vendors and architecture, engineering, infrastructure, cloud, and application teams to integrate identity capabilities across enterprise systems and cloud services. The position also develops identity attack-path analysis, threat detection, risk scoring, containment, remediation, and privilege-risk controls. It supports modern authentication, MFA, adaptive and risk-based access, PBAC, identity-aware authorization, continuous verification, and Zero Trust access decisions. The architect designs IAM integrations using APIs, identity protocols, automation, and cloud-native technologies; translates business, security, regulatory, and technology requirements into scalable solutions; conducts architecture and security-design reviews; and provides technical guidance to engineering teams. The role is based in Irving, Texas, and is listed as hybrid. Compensation range is $117,600–$196,000, with possible incentive compensation and company benefits.

Requirements

10+ years of expertise in IAM architecture, identity security, and enterprise access-control frameworks.
10+ years designing and implementing enterprise IAM solutions for workforce, privileged, application, and machine identities.
10+ years of experience with Microsoft Entra ID / Azure Active Directory.
10+ years implementing and supporting SSO, MFA, identity governance, access management, PAM, and federation.
10+ years of strong understanding of modern authentication and authorization protocols.
10+ years of hands-on experience engineering, integrating, deploying, and supporting enterprise identity-security products.
10+ years of hands-on experience with Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID / Azure AD.
10+ years integrating identity-security platforms with enterprise applications, infrastructure, cloud services, and security systems.
10+ years of strong understanding of Zero Trust Architecture and identity-centric security principles.
10+ years of experience with Identity Threat Detection and Response (ITDR).
10+ years of experience with identity attack-path analysis, privilege-risk identification, and lateral-movement assessment.
10+ years designing and implementing authorization frameworks and PBAC.
10+ years of experience with risk-based authentication, adaptive access, continuous verification, and identity-risk modeling.
10+ years of product-engineering, solution-design, and enterprise security-delivery experience.
10+ years using APIs, identity protocols, automation, and cloud-native technologies to integrate security platforms and applications.
10+ years translating business and security requirements into scalable technical architectures and engineering solutions.
10+ years of strong understanding of enterprise security architecture, authentication, authorization, access governance, and identity lifecycle-management principles.
Strong analytical, troubleshooting, problem-solving, stakeholder-management, and technical-leadership skills.
Ability to collaborate effectively with cybersecurity, IAM, cloud, infrastructure, application, architecture, engineering, and vendor teams.

Nice To Haves

10+ years of experience in cybersecurity, IAM, identity architecture, security engineering, or a related security discipline.
Experience leading enterprise-scale identity-security or IAM transformation programs.
Experience designing or implementing Zero Trust security programs.
Familiarity with NIST cybersecurity guidance, Zero Trust frameworks, and modern enterprise security standards.
Experience working within large, complex, highly regulated enterprise environments.
Experience implementing large-scale identity threat detection, attack-path analysis, or identity-risk-management programs.
Experience with advanced PBAC and identity-aware authorization models.
CISSP certification.
CCSP certification.
Microsoft Azure Security Engineer certification.
CIAM, IAM, or other relevant Identity and Access Management certifications.
Equivalent cybersecurity, cloud-security, or identity-security certifications.

Responsibilities

Define and execute enterprise identity-security strategies and roadmaps aligned with Zero Trust and cybersecurity objectives.
Design scalable IAM architectures for workforce, privileged, service-account, machine, and application identities.
Develop identity-centric security controls to reduce attack surfaces and prevent identity-based threats.
Establish architecture standards for authentication, authorization, access governance, identity lifecycle management, and privileged access.
Lead engineering, integration, deployment, and operationalization of identity-security platforms, including Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID.
Partner with vendors and architecture, engineering, infrastructure, cloud, and application teams to deliver identity-security solutions.
Integrate identity-security capabilities with enterprise applications, cloud platforms, infrastructure, authentication platforms, and security tooling.
Design identity attack-path analysis to identify privilege relationships, lateral-movement paths, excessive entitlements, and identity risks.
Implement identity threat detection, risk scoring, attack containment, and remediation capabilities.
Develop processes and controls to identify privilege-escalation paths and unauthorized access opportunities.
Improve visibility into identity relationships, entitlements, authentication activity, access patterns, and security risks.
Support modernization of enterprise authentication services and user authentication experiences.
Drive adoption of strong authentication, MFA, adaptive access, and risk-based authentication controls.
Design and implement PBAC capabilities and identity-aware authorization models.
Design identity-risk models for adaptive authentication and authorization, continuous verification, and Zero Trust decisions.
Use identity intelligence, security signals, and behavioral context to improve access decisions and security controls.
Design and integrate IAM capabilities including SSO, federation, authentication, authorization, identity governance, access management, and PAM.
Develop secure integrations using APIs, modern identity protocols, automation, and cloud-native architectures.
Translate business, security, regulatory, and technology requirements into secure, scalable identity architecture and engineering solutions.
Conduct architecture reviews, security-design reviews, product evaluations, and technical implementation discussions.
Provide technical leadership and guidance to engineering teams implementing identity and access-security solutions.