Senior Identity Security Architect

SpecterOps

1d•$175,000 - $200,000•Remote

About The Position

We are seeking a Senior Identity Security Architect to help build and scale SpecterOps' remediation and architecture advisory capabilities. This role sits at the intersection of identity architecture, attack path analysis, and enterprise remediation. You will work with customers, researchers, consultants, and product teams to translate attack path findings into practical security outcomes. The ideal candidate has significant hands-on experience operating, securing, modernizing, or remediating large enterprise identity environments and understands the realities of implementing security improvements within complex organizations. This individual will play a key role in developing SpecterOps' attack-path-centric remediation methodologies, architectural guidance, and delivery frameworks.

Requirements

8+ years of experience designing, operating, securing, or modernizing enterprise identity environments.
Deep expertise in Active Directory and Microsoft Entra ID.
Experience with BloodHound or attack path analysis.
Experience with hybrid identity architectures and identity synchronization technologies.
Demonstrated experience leading enterprise remediation, modernization, migration, or security improvement initiatives.
Strong understanding of administrative tiering, delegated administration, privileged access management, identity governance, and enterprise identity operations.
Experience working directly with technical and business stakeholders.
Excellent written and verbal communication skills.
Experience in consulting, professional services, or customer-facing advisory roles.
Experience building methodologies, frameworks, or operational programs.

Nice To Haves

Experience supporting large-scale enterprise Active Directory environments (50,000+ users).
Familiarity with offensive security concepts, adversary tradecraft, or red team operations.
Experience with Okta, Ping Identity, CyberArk, SailPoint, or similar identity platforms.
Experience with Microsoft Intune, SCCM, Tanium, Jamf, or other endpoint management platforms.
Familiarity with PKI, virtualization platforms, cloud infrastructure, and other critical enterprise technologies.

Responsibilities

Serve as a trusted advisor to enterprise customers implementing Identity Attack Path Management programs.
Translate BloodHound Enterprise findings and attack path analysis into actionable remediation strategies.
Help customers prioritize remediation activities based on risk, impact, dependencies, and operational constraints.
Facilitate discussions across Security, Infrastructure, IAM, Endpoint Management, Engineering teams, and other stakeholders.
Advise customers on architectural and operational improvements that reduce attack path risk.
Provide guidance on Active Directory, Microsoft Entra ID, and hybrid identity architectures.
Advise on delegated administration, privileged access management, administrative tiering, identity governance, service account security, and identity modernization initiatives.
Assist customers with Privilege Zone development and operationalization.
Evaluate identity architectures through an adversary and attack path lens.
Develop attack-path-centric remediation frameworks, playbooks, and reference architectures.
Create repeatable guidance for remediation prioritization, ownership, implementation planning, and validation.
Identify recurring customer challenges and codify successful remediation patterns.
Help establish scalable delivery methodologies across BloodHound Scentry.
Partner with researchers to operationalize emerging tradecraft and attack path research.
Support consultants and TAMs through training, mentorship, and guidance.
Contribute to the evolution of Identity Attack Path Management methodologies and best practices.

Benefits

Health/Dental/Vision/life insurance: 100% covered for both the employee and their family
Flexible time off policy
13 paid holidays annually
401(k) with up to 4% company match
Equity and quarterly bonus based on company performance
$1,500 first year allowance to set up home office
$500 annual home office allowance after the first year
$150 monthly cell phone and internet reimbursement
$5,000 annual professional development allowance
$5,250 towards continuing education or student loan repayment
$1,200 annual benefit for lifestyle, wellness, pet insurance and more
A one-time $10,000 benefit towards family planning
In person and virtual employee events throughout the year
Company swag