Cloud IAM Architect — Threat Hunting & Privileged Access

Testing Site - JPMC; Seattle (WA); On-site; USD 180,000 - 250,000; Full time

Job summary

JPMorgan Chase in Seattle seeks a Senior Lead Cybersecurity Architect to promote design, architecture, and governance of IAM across multi-cloud environments for the CTC. The role requires deep expertise in cloud identity provisioning, RBAC/ABAC/PBAC, threat modeling, and privileged access management, with a track record in large-scale deployments and regulatory alignment.

The position involves leading IAM strategies, architecture governance, and orchestration of cross-team efforts to ensure

Qualifications

• Formal training or certification on Cybersecurity concepts and 5+ years applied experience in cybersecurity architecture, with a focus on cloud IAM.
• Proven experience in identity provisioning, role management, and entitlement management for cloud infrastructure.
• Hands-on experience in threat hunting, threat modeling, and privileged access management.
• Deep expertise with IAM products: EntraID, Ping, ForgeRock, CyberArk, Hashicorp Vault, Delinea.
• Strong knowledge of RBAC, ABAC, PBAC, role certification, and cloud provisioning.
• Familiarity with security standards: NIST, OWASP, MITRE, encryption protocols.
• Experience with multi-cloud strategies and large-scale IAM implementations.
• Proficiency in developing custom IAM workflows and automation.
• Solid understanding of data security, risk management, and compliance frameworks.

Responsibilities

• Architect and oversee identity provisioning, role management, and entitlement processes for cloud infrastructure.
• Architect and manage RBAC, ABAC, PBAC, and role certification frameworks.
• Lead threat hunting initiatives and develop threat models for cloud IAM environments and collaborate with security operations to proactively identify and mitigate risks.
• Design and implement workload identity solutions and privileged access management for cloud workloads and Integrate, manage privileged access tools and processes.
• Deploy and manage IAM solutions such as EntraID, Ping, ForgeRock, CyberArk, Hashicorp Vault, and Dileania.
• Evaluate and recommend IAM products and integrations for cloud environments.
• Ensure IAM architectures align with NIST, OWASP, MITRE, and encryption standards and maintain compliance with regulatory requirements and internal policies.
• Develop and execute multi-cloud IAM strategies supporting platforms and lead large-scale IAM implementations and migrations.
• Design and develop custom IAM workflows to automate provisioning, certification, and access reviews.
• Integrate IAM with data security controls and risk management frameworks and conduct risk assessments and implement mitigation strategies.

Skills

Cloud IAM

Identity provisioning

Role management

Threat hunting

Threat modeling

Privileged access management

RBAC/ABAC/PBAC

Tools

EntraID

Ping

ForgeRock

CyberArk

Hashicorp Vault

Delinea

Job description

JPMorgan Chase in Seattle seeks a Senior Lead Cybersecurity Architect to promote design, architecture, and governance of IAM across multi-cloud environments for the CTC. The role requires deep expertise in cloud identity provisioning, RBAC/ABAC/PBAC, threat modeling, and privileged access management, with a track record in large-scale deployments and regulatory alignment.

The position involves leading IAM strategies, architecture governance, and orchestration of cross-team efforts to ensure