Architect, Cybersecurity, Identity Security - Remote

Stryker; Kalamazoo (MI); On-site; USD 156,000 - 271,000; Full time

Benefits offered by this job

Health benefits including medical and药

401(k) plan

Employee Stock Purchase Plan (ESPP)

Job summary

Stryker is seeking an Identity Security Architect to design and govern enterprise identity and access management solutions across on‑premises and cloud environments. You will partner with cybersecurity, cloud, infrastructure, EA, and business teams to deliver secure access and governance.

The role emphasizes Zero Trust, RBAC, and SoD, with responsibility for PAM, IGA, and directory services across Azure, AWS, and Google Cloud. Eastern/Central time zones preferred.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field.
• 8+ years in cybersecurity or identity management.
• 3+ years designing enterprise IAM architectures.
• Experience implementing SSO, MFA, PAM, IGA, and directory services.
• Experience with cloud identity security across Azure, AWS, or Google Cloud.

Responsibilities

• Design and maintain enterprise identity security architecture, standards, and reference designs.
• Develop identity strategies that support Zero Trust Architecture and digital transformation.
• Architect authentication, authorization, federation, SSO, MFA, and identity lifecycle management solutions.
• Lead architecture reviews for IAM projects, cloud implementations, and business applications.
• Design and govern Privileged Access Management (PAM) solutions and privileged identity controls.
• Integrate identity security controls with cross-functional teams.
• Develop identity governance processes for RBAC, least privilege, SoD, and access certification.
• Conduct identity threat modeling, risk assessments, and design reviews.
• Evaluate emerging identity technologies and recommend improvements.
• Support compliance with NIST CSF, ISO 27001, HIPAA, SOX, FDA guidance.
• Develop architecture documentation, standards, and operating procedures.
• Provide technical leadership and mentorship to engineering teams.

Skills

Identity security

IAM architecture

Cloud identity security

Leadership

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering

Tools

Microsoft Entra ID

Active Directory

Okta

Ping Identity

SailPoint

CyberArk

Delinea

Job description

Preference will be given to candidates residing in the Eastern or Central time zones.

As an Identity Security Architect, you will design and govern enterprise identity and access management solutions that protect organizational assets while enabling secure access to business systems and applications. You will serve as the technical authority for identity security and partner with cybersecurity, infrastructure, cloud, application, enterprise architecture, security operations, and business teams across on-premises and cloud environments.

What you will do:

Technical Responsibilities:

• Design and maintain enterprise identity security architecture, standards, and reference designs.
• Develop identity strategies that support Zero Trust Architecture and enterprise digital transformation.
• Architect authentication, authorization, federation, single sign-on (SSO), multi-factor authentication (MFA), and identity lifecycle management solutions.
• Lead architecture reviews for IAM projects, cloud implementations, and business applications.
• Design and govern Privileged Access Management (PAM) solutions and privileged identity controls.
• Integrate identity security controls with Infrastructure, Cloud Engineering, Enterprise Architecture, Application Development, and Security Operations teams.
• Develop identity governance processes for role-based access control (RBAC), least privilege, segregation of duties (SoD), and access certification.
• Conduct identity threat modeling, architecture risk assessments, and security design reviews.
• Evaluate emerging identity technologies and recommend architectural improvements.
• Support compliance with NIST CSF, ISO 27001, HIPAA, SOX, FDA Cybersecurity Guidance, and applicable regulatory requirements.
• Develop architecture documentation, technical standards, implementation guidance, and operating procedures.

Leadership & People Management Responsibilities:

• Provide technical leadership and mentorship to engineering teams implementing identity security capabilities.

Knowledge and Capabilities:

• Analyze complex identity security challenges and translate findings into practical architecture decisions.
• Design enterprise identity architectures that connect security requirements, business needs, and technology capabilities.
• Communicate identity architecture standards, risks, and implementation guidance to technical and business partners.

What You Need:

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline.
• Minimum 8 years of experience in cybersecurity or identity management.
• Minimum 3 years of experience designing enterprise IAM architectures.
• Experience implementing SSO, MFA, PAM, Identity Governance and Administration (IGA), and directory services.
• Experience with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, CyberArk, Delinea, or similar technologies, including cloud identity security across Azure, AWS, or Google Cloud.

United States of America Pay Ranges:

• USN: $135,600 - $225,900 USD Annual
• US5: $142,400 - $237,200 USD Annual
• US10: $149,200 - $248,500 USD Annual
• US15: $155,900 - $259,800 USD Annual
• US20: $162,700 - $271,100 USD Annual
• US30: $176,300 - $293,700 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.

• Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program.
• Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance.

Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes. Alongside its customers around the world, Stryker impacts more than 150 million patients annually. Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.