Architect, Cybersecurity, Identity Security - Remote

Stryker Corporation; Kalamazoo (MI); Hybrid; Confidential; Full time

Job summary

Stryker Corporation is seeking an experienced Identity Security Architect to design enterprise IAM and govern access across on‑premises and cloud environments. You will collaborate with cybersecurity, cloud, and applications teams to drive Zero Trust initiatives and secure digital access.

Required: 8+ years in cybersecurity or identity management, 3+ years designing IAM architectures, and hands‑on work with SSO, MFA, PAM, IGA, and major directory services (Entra, AD, Okta, Ping, SailPoint,

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related discipline.
• 8+ years of experience in cybersecurity or identity management.
• 3+ years designing enterprise IAM architectures.
• Experience implementing SSO, MFA, PAM, IGA, and directory services.
• Experience with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, CyberArk, Delinea, or similar technologies; cloud identity across Azure/AWS/Google Cloud.

Responsibilities

• Design and maintain enterprise identity security architecture, standards, and reference designs.
• Develop identity strategies that support Zero Trust and enterprise transformation.
• Architect authentication, authorization, federation, SSO, MFA, and identity lifecycle solutions.
• Lead architecture reviews for IAM projects, cloud implementations, and applications.
• Design and govern PAM solutions and privileged identity controls.
• Develop identity governance processes for RBAC, least privilege, SoD, and access certification.
• Conduct identity threat modeling and security design reviews.
• Ensure compliance with NIST CSF, ISO 27001, HIPAA, SOX, FDA guidance.

Skills

SSO

MFA

PAM

IGA

Directory services

IAM architectures

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering

Job description

## Architect, Cybersecurity, Identity Security - RemoteApply: Michigan, Kalamazoo 4100 East Milham Rd: Full time: Posted Today: R573260Work Flexibility: Remote**Preference will be given to candidates residing in the Eastern or Central time zones.**As an Identity Security Architect, you will design and govern enterprise identity and access management solutions that protect organizational assets while enabling secure access to business systems and applications. You will serve as the technical authority for identity security and partner with cybersecurity, infrastructure, cloud, application, enterprise architecture, security operations, and business teams across on-premises and cloud environments.**What you will do:****Technical Responsibilities:**Design and maintain enterprise identity security architecture, standards, and reference designs.Develop identity strategies that support Zero Trust Architecture and enterprise digital transformation.Architect authentication, authorization, federation, single sign-on (SSO), multi-factor authentication (MFA), and identity lifecycle management solutions.Lead architecture reviews for IAM projects, cloud implementations, and business applications.Design and govern Privileged Access Management (PAM) solutions and privileged identity controls.Integrate identity security controls with Infrastructure, Cloud Engineering, Enterprise Architecture, Application Development, and Security Operations teams.Develop identity governance processes for role-based access control (RBAC), least privilege, segregation of duties (SoD), and access certification.Conduct identity threat modeling, architecture risk assessments, and security design reviews.Evaluate emerging identity technologies and recommend architectural improvements.Support compliance with NIST CSF, ISO 27001, HIPAA, SOX, FDA Cybersecurity Guidance, and applicable regulatory requirements.Develop architecture documentation, technical standards, implementation guidance, and operating procedures.Leadership & People Management Responsibilities:Provide technical leadership and mentorship to engineering teams implementing identity security capabilities.**Knowledge and Capabilities:**Analyze complex identity security challenges and translate findings into practical architecture decisions.Design enterprise identity architectures that connect security requirements, business needs, and technology capabilities.Communicate identity architecture standards, risks, and implementation guidance to technical and business partners.**What You Need:****Required Qualifications*** Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline.* Minimum 8 years of experience in cybersecurity or identity management.* Minimum 3 years of experience designing enterprise IAM architectures.* Experience implementing SSO, MFA, PAM, Identity Governance and Administration (IGA), and directory services.* Experience with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, CyberArk, Delinea, or similar technologies, including cloud identity security across Azure, AWS, or Google Cloud.**United States of America Pay Ranges:*** **USN**: $135,600 - $225,900 USD Annual* **US5**: $142,400 - $237,200 USD Annual* **US10**: $149,200 - $248,500 USD Annual* **US15**: $155,900 - $259,800 USD Annual* **US20**: $162,700 - $271,100 USD Annual* **US30**: $176,300 - $293,700 USD AnnualView the U.S. work location and transparency guide to find the pay range for your location.Travel Percentage: NoneStryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability.Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.