Global Identity Security Architect – Zero Trust Lead

Boston Consulting Group; Lisboa; Hybrid; EUR 90,000 - 140,000; Full time

Job summary

Boston Consulting Group seeks a Global Cybersecurity Senior Manager – Architecture to strengthen the firm’s identity security and Zero Trust posture. You will define architecture standards for identity management, oversee cryptographic resilience, and drive automation with engineering teams across Azure, AWS, and GCP.

You will partner with the Secure Identity Engineering Squad and ISRM to deliver secure, scalable identity solutions while guiding architectural risk, governance, and best practices

Qualifications

• 6–10 years of experience in security architecture, infrastructure security, or security engineering.
• Deep expertise in identity security architecture, Microsoft Entra ID, Okta, and enterprise authentication technologies.
• Experience securing human and non-human identities, including service accounts, workload identities, and emerging agentic AI systems.
• Strong knowledge of identity assurance frameworks (NIST SP 800-63, ISO/IEC 24760), Zero Trust architecture (CISA ZTMM), and cloud environments, including Azure, AWS, and GCP.
• Ability to evaluate complex security risks, establish architectural requirements, and guide practical security solutions.
• Demonstrated ability to influence engineering teams, communicate technical decisions, and navigate enterprise security governance.
• Experience collaborating across global technology teams and guiding complex security initiatives through architectural oversight.

Responsibilities

• Define and maintain identity security architecture: Establish and maintain security architecture standards for enterprise identity and access management, including authentication, conditional access, identity governance, and privileged access across BCG’s hybrid technology environment.
• Strengthen identity security controls: Establish architectural requirements for Microsoft Entra ID, Okta, and related identity platforms, including phishing-resistant multifactor authentication, federation, single sign-on, and secure access policies.
• Own cryptographic resilience for identity: Define crypto-agility and post-quantum cryptography (PQC) transition requirements for authentication credentials, certificates, and secrets.
• Advance identity governance and non-human identity security: Define architectural requirements for identity lifecycle management, privileged access, and non-human identities, including service accounts, workload identities, and AI agents.
• Drive automation and policy-as-code adoption: Advance identity security controls, access policy enforcement, drift detection, and automated remediation, partnering with engineering.
• Provide security architecture governance: Conduct security architecture reviews for identity initiatives, issuing dispositions, and architectural decision records; route exceptions through ISRM governance.

Skills

Security architecture

Identity security

Microsoft Entra ID

Okta

Zero Trust

Cloud environments (Azure, AWS, GCP)

Architecture governance

Threat protection

Influence engineering teams

Tools

Azure

AWS

GCP

Job description

Boston Consulting Group seeks a Global Cybersecurity Senior Manager – Architecture to strengthen the firm’s identity security and Zero Trust posture. You will define architecture standards for identity management, oversee cryptographic resilience, and drive automation with engineering teams across Azure, AWS, and GCP.

You will partner with the Secure Identity Engineering Squad and ISRM to deliver secure, scalable identity solutions while guiding architectural risk, governance, and best practices