Architect, Cybersecurity, Identity Security - Remote

Stryker; Portage (MI); Remote; USD 136,000 - 271,000; Full time

Job summary

Stryker Corporation is seeking an Identity Security Architect to design and govern enterprise IAM solutions across on‑premises and cloud environments. You will serve as the technical authority for identity security and partner with cybersecurity, infrastructure, cloud, enterprise architecture, and business teams.

You will lead architecture reviews, develop identity strategies that support Zero Trust, and mentor engineering teams to implement SSO, MFA, PAM, and IGA capabilities.

Qualifications

• Bachelor's degree in CS/IS/Engineering or related field.
• Minimum 8 years cybersecurity/identity management experience.
• 3+ years designing enterprise IAM architectures.
• Experience with SSO, MFA, PAM, IGA, and directory services.
• Experience with cloud identity across Azure, AWS, or Google Cloud.

Responsibilities

• Design and maintain enterprise IAM architecture, standards, and reference designs.
• Develop identity strategies that support Zero Trust and digital transformation.
• Architect authentication, authorization, federation, SSO, MFA, and identity lifecycle management.
• Lead architecture reviews for IAM projects, cloud implementations, and business apps.
• Provide technical leadership to engineering teams implementing identity security capabilities.

Skills

Identity security

IAM architectures

Zero Trust

Threat modeling

RBAC

PAM

IGA

SSO

MFA

Cloud security

Education

Bachelor's degree in CS/IS/Engineering

Tools

Microsoft Entra ID

Active Directory

Okta

Ping Identity

SailPoint

CyberArk

Delinea

Azure

AWS

Google Cloud

Job description

Work Flexibility: Remote Preference will be given to candidates residing in the Eastern or Central time zones. As an Identity Security Architect, you will design and govern enterprise identity and access management solutions that protect organizational assets while enabling secure access to business systems and applications. You will serve as the technical authority for identity security and partner with cybersecurity, infrastructure, cloud, application, enterprise architecture, security operations, and business teams across on-premises and cloud environments.

What you will do:

Technical Responsibilities: Design and maintain enterprise identity security architecture, standards, and reference designs. Develop identity strategies that support Zero Trust Architecture and enterprise digital transformation. Architect authentication, authorization, federation, single sign-on (SSO), multi-factor authentication (MFA), and identity lifecycle management solutions. Lead architecture reviews for IAM projects, cloud implementations, and business applications. Design and govern Privileged Access Management (PAM) solutions and privileged identity controls. Integrate identity security controls with Infrastructure, Cloud Engineering, Enterprise Architecture, Application Development, and Security Operations teams. Develop identity governance processes for role-based access control (RBAC), least privilege, segregation of duties (SoD), and access certification. Conduct identity threat modeling, architecture risk assessments, and security design reviews. Evaluate emerging identity technologies and recommend architectural improvements. Support compliance with NIST CSF, ISO 27001, HIPAA, SOX, FDA Cybersecurity Guidance, and applicable regulatory requirements. Develop architecture documentation, technical standards, implementation guidance, and operating procedures.

Leadership & People Management Responsibilities:

Provide technical leadership and mentorship to engineering teams implementing identity security capabilities.

Knowledge and Capabilities:

Analyze complex identity security challenges and translate findings into practical architecture decisions. Design enterprise identity architectures that connect security requirements, business needs, and technology capabilities. Communicate identity architecture standards, risks, and implementation guidance to technical and business partners.

What You Need:

Required Qualifications Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline. Minimum 8 years of experience in cybersecurity or identity management. Minimum 3 years of experience designing enterprise IAM architectures. Experience implementing SSO, MFA, PAM, Identity Governance and Administration (IGA), and directory services. Experience with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, CyberArk, Delinea, or similar technologies, including cloud identity security across Azure, AWS, or Google Cloud.

United States of America Pay Ranges:

USN: $135,600 - $225,900 USD Annual US5: $142,400 - $237,200 USD Annual US10: $149,200 - $248,500 USD Annual US15: $155,900 - $259,800 USD Annual US20: $162,700 - $271,100 USD Annual US30: $176,300 - $293,700 USD Annual View the U.S. work location and transparency guide to find the pay range for your location.

Travel Percentage:

None

Stryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability. Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

Stryker is one of the world’s leading medical technology companies and, together with its customers, is driven to make healthcare better. We offer innovative products and services in Orthopaedics, Medical and Surgical, and Neurotechnology and Spine that help improve patient and hospital outcomes. We are proud to be named one of the World’s Best Workplaces! For more information, visit: www.stryker.com

Work Flexibility Remote – Role allows you to work the majority to 100% of time from an alternate workplace.

These roles could have travel expectations, and you must work within the country of the job requisition location.

Field-based –

You can expect to regularly work a majority to 100% of time at customer facilities and has a set territory or expectation to travel within a set boundary. Almost all sales roles would likely be qualified as field-based.

Onsite –

Role is 100% located at a Stryker facility. Some ad hoc flexibility may be available depending on role, level, and job requirements. Manufacturing roles and any role that requires physical presence at the office would qualify under this category.

Hybrid –

You can expect to regularly work in both an alternate workplace and a Stryker facility. Roles that are partially remote or co-located would qualify as hybrid, and the expectation to be onsite would be defined and agreed upon by your manager/supervisor.