Technical Architect Staff - Workforce Identity and Access Management

USAA•San Antonio, TX

3d•$143,320 - $273,930•Hybrid

About The Position

The Technical Architect Staff will set technology strategy and direction for workforce Identity and Access Management (IAM) across USAA’s hybrid technology environment. The role partners with security, infrastructure, application, and engineering teams to design secure identity solutions, modernize authentication and access capabilities, and guide IAM transformation initiatives. It establishes enterprise standards and influences technology decisions to strengthen access controls, reduce risk, and align with USAA’s mission and strategic priorities. The position requires working in the office four days per week and may be based in San Antonio, Texas; Plano, Texas; Phoenix, Arizona; Colorado Springs, Colorado; or Charlotte, North Carolina. Relocation assistance is not available.

Requirements

Bachelor’s degree, or four years of relevant education and/or experience.
Eight years of experience in the Information Technology field, including at least two years in a technical leadership role within IT.
Experience in technology application development, infrastructure and operational implementation, and/or security engineering.
Four years of experience in the Identity and Access Management technology domain.
Demonstrated ability to explain complex technology decisions to technical and nontechnical audiences at all organizational levels.
Demonstrated ability to communicate effectively and develop high-trust relationships with frontline and second-level management and stakeholders.
Experience producing and maintaining technical security standards and guidance documents for a large enterprise.
Experience analyzing proposed application architectures and providing security guidance.
Experience working in hybrid environments with on-premise and cloud systems.

Nice To Haves

At least two years of experience as a security architect in a large federally regulated enterprise environment, with familiarity with FFIEC, NYDFS, or PCI-DSS.
Experience producing threat models for proposed application architectures to identify risks and necessary controls before implementation.
Experience with Identity Governance and Administration, Identity Provider, Directory Services, Privileged Access Management, and other IAM tooling.
Deep working knowledge of SAML 2.0, OIDC, OAuth 2.0, and/or SCIM.
Experience managing non-human identity systems, including service account governance, API keys, certificates, and workload identities such as SPIFFE.

Responsibilities

Collaborate with business and IT stakeholders to understand strategy, requirements, measures, risks, and controls for a business function or IT domain.
Use expertise and research to make technology decisions, create architecture artifacts, and develop evolutionary strategies and roadmaps that advance business or technology capabilities.
Build trusted relationships with business and IT stakeholders and engineering teams, providing leadership and guidance to influence priorities, cost transparency, architecture execution, and domain direction.
Assess domain applications with business and application owners to identify strengths, weaknesses, opportunities, threats, and risks, and advise business owners on proposed courses of action.
Define and document technology-domain architecture standards, ensure solution compliance, and use risk assessment methods to draft, evaluate, approve, or reject waivers.
Participate in workstream planning, solution design reviews, code reviews, test case definition, and troubleshooting Availability Command Center incidents involving complex production issues in the technology domain.
Mentor architects, engineers, and IT colleagues, including seeking opportunities to build team redundancy and backfill capability.
Create and maintain architecture-domain documentation, complete deliverables on time, and suggest improvements to architecture practices and processes.
Develop external relationships with industry organizations, government boards, and marketplace vendors relevant to the business function or technology domain.
Pursue external eminence through professional and industry certifications, conference presentations, technical publications, open-source contributions, patents, and similar activities.
Ensure business risks are identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.