Senior IAM Cybersecurity Architect

Alberta Health Services; Edmonton; Vor Ort; CAD 120.000 - 180.000; Vollzeit

Zusammenfassung

Alberta Health Services is seeking a Senior IAM Cybersecurity Architect to lead identity security strategy and architecture across on‑prem and cloud environments. You will define standards, roadmaps and controls aligned with Zero Trust, least privilege and defence‑in‑depth principles.

The role focuses on identity services, privileged accounts, authentication, and secure access across mission‑critical systems.

Qualifikationen

• Proven expertise in designing and implementing IAM security architectures.
• Experience with Zero Trust strategies and enterprise-grade identity controls.
• Knowledge of authentication methods: SSO, MFA, passwordless, and conditional access.
• Strong experience with on-premises and cloud identity platforms incl. Active Directory and Entra ID.
• Ability to model threats, perform attack-path analyses and translate results into controls.
• Familiarity with PAM, credential vaulting, and privileged session monitoring.

Aufgaben

• Define and drive identity security architecture, standards and roadmaps.
• Lead the deployment of Zero Trust controls and least-privilege access patterns.
• Architect authentication, authorization, federation, SSO, MFA, and passwordless solutions.
• Design and manage hybrid identity with directory synchronization and app integration.
• Oversee privileged access management, threat protection, and credential security.
• Align ITDR, SIEM/SOAR integration for identity threat detection and response.
• champion security automation and Identity-as-Code via scripts and APIs.
• Collaborate with leadership and delivery teams to communicate risks and decisions.

Kenntnisse

Identity security

Zero Trust

Authentication

Authorization

Federation

SSO

MFA

Passwordless

Conditional access

Active Directory

Entra ID

Hybrid identity

Privileged access management

PAM

Credential vaulting

Threat modeling

SIEM/SOAR

ITDR

Cyber recovery

IaC

Scripting

APIs

Leadership

Jobbeschreibung

Your Opportunity:

Health Shared Services (HSS) - Technology Services has an exciting opportunity for a highly skilled Senior Identity and Access Management (IAM) Cybersecurity Architect to join the Technology Architecture & Solutions (TAS) team. The Senior IAM Cybersecurity Architect will play a key role in strengthening the organization's identity security architecture and cybersecurity posture. This position will provide architectural leadership in protecting enterprise identity services, directories, privileged accounts, authentication mechanisms and access infrastructure against evolving cyber threats. Working across on-premises, public cloud environments, the position will define and evolve identity security architectures, technical controls and reference patterns aligned with enterprise cybersecurity strategies, Zero Trust principles and regulatory requirements. The role will focus on preventing, detecting and responding to identity-based threats while ensuring the security, resilience and recoverability of identity services supporting mission-critical clinical and corporate operations. The successful candidate will bring extensive experience in identity security and cybersecurity architecture, strong technical knowledge of enterprise identity platforms and security controls, and the ability to engage senior leaders, architects, engineers, security operations and operational teams to translate cybersecurity requirements into practical and sustainable solutions. The TAS team provides architecture and engineering services across AHS Technology Services, including End User Devices, Unified Communications (Voice/Video), Network, Compute, Storage, Database, Identity and Access Management, Cloud, AI, Security Technical Controls and Facilities Technology, foundationally supporting clinical and corporate service delivery.

Description:

Senior IAM Cybersecurity Architect is responsible for: Identity security strategy. Define identity security architecture, standards and roadmap; assess maturity, threats and gaps; set priorities. Security controls and Zero Trust. Define controls based on Zero Trust, least privilege and defence-in-depth. Establish patterns for authentication, authorization, federation, SSO, MFA, passwordless and conditional access. Secure human and non-human identities, including service, application and workload accounts, credentials, certificates and secrets. Hybrid identity and directories. Architect Active Directory, Entra ID and hybrid identity, including directory sync, trust and app integration. Guide directory hardening, administrative isolation, identity tiering and protection from credential theft, privilege escalation and lateral movement. Privileged access and threat protection. Architect PAM, including credential vaulting, session monitoring, JIT access, privileged workstations and third-party access. Define identity threat models, attack-path analysis and controls against identity compromise and privilege misuse. Define ITDR and SIEM/SOAR integration for identity threat detection and response. Cyber recovery and resilience. Define identity recovery architecture, protected backups, isolated recovery, emergency administration, redundancy and high availability; ensure continuity and DR for critical services. Assurance and leadership. Review IAM architecture and controls; guide remediation of vulnerabilities, audit findings and control gaps. Integrate cybersecurity, privacy and regulatory requirements; ensure auditability, risk management and exception processes. Promote security automation and Identity-as-Code/IaC using scripts and APIs. Guide IAM and delivery teams; communicate architecture decisions and risks to leaders.