Technical Architect Staff - Workforce Identity and Access Management

USAA•San Antonio, NC

5d•Hybrid

About The Position

The candidate selected for this role will set the technology strategy and direction for workforce Identity and Access Management across USAA’s hybrid technology environment. They will partner with security, infrastructure, application, and engineering teams to design secure identity solutions, modernize authentication and access capabilities, and guide key IAM transformation initiatives. The candidate will establish enterprise standards and influence technology decisions that strengthen access controls, reduce risk, and align with USAA’s mission and strategic priorities. We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position can be based in one of the following locations: San Antonio, TX, Plano, TX, Phoenix, AZ, Colorado Springs, CO, or Charlotte, NC. Relocation assistance is not available for this position.

Requirements

Bachelor's degree; OR 4 years of relevant education and/or experience.
8 years of experience in the Information Technology field to include at least 2 years in a technical leadership role within IT.
Experience in technology application development, infrastructure and operational implementation, and/or security engineering.
4 years experience in the Identity and Access Management technology domain.
Demonstrated experience in explaining complex technology decisions to both technical and nontechnical audiences at all levels in the organization.
Demonstrated experience effectively communicating and developing high trust relationships with frontline and second level management and stakeholders.
Experience producing and maintaining technical security standards and guidance documents for a large enterprise.
Experience analyzing proposed application architectures and providing security guidance.
Experience working in hybrid environments with on-premise systems and cloud systems.

Nice To Haves

2+ years’ experience acting as a security architect in a large federally regulated enterprise environment (familiarity with FFIEC, NYDFS, PCI-DSS).
Experience producing threat models for proposed application architectures to highlight risks and identify necessary controls prior to implementation.
Experience with Identity Governance and Administration tooling, Identity Provider tooling, Directory Services tooling, Privileged Access Management tooling, and other IAM tooling.
Deep working knowledge of SAML 2.0, OIDC, OAuth 2.0, and/or SCIM.
Experience managing non-human identity systems, including experience with service account governance, API keys, certificates, and workload identities (SPIFFE).

Responsibilities

Collaborates with business and IT stakeholders to understand strategy, requirements, measures, risks and controls for a business function or IT domain.
Utilizes expertise and research to create technology decisions with relevant architecture artifacts and proactively apply architecture thinking to conceive evolutionary strategies and roadmaps that can accelerate current capabilities for a business function or technology domain.
Cultivates productive and trusted relationships with business and IT stakeholders, as well as engineering resources, to provide leadership and guidance to influence and shape priority, cost transparency and execution of architecture solutions and domain direction.
Assess domain applications in collaboration with business and application owners to identify strengths, weaknesses, opportunities, threats and risks.
Advise business owners of proposed courses of action.
Defines and documents architecture standards for a technology domain to ensure architectural compliance of technology solutions.
Use risk assessment methodologies to draft/evaluate and approve/reject waivers to architecture standards.
Participates in activities that support the USAA technology ecosystem such as workstream planning, solution design reviews, code reviews, test case definition, and assistance in troubleshooting of Availability Command Center incidents to resolve complex production issues related to a technology domain.
Provides professional and technical mentorship for new architects, engineers and IT community colleagues in an open, respectful, flexible and empathetic manner.
Seeks out mentoring opportunities specifically to create team redundancy and backfill ability.
Executes architecture practices and processes by properly creating and maintaining architecture domain documentation, ensuring timely completion of deliverables and suggesting enhancements.
Establishes external relationships with contacts on industry organizations and government boards and vendors in the marketplace related to a business function or technology domain.
Establishes a plan to gain external eminence by pursuing professional and industry technical certifications, presenting at conferences, publishing technical papers, contributing to open source, authoring patents, etc..
Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.