Cybersecurity Architect - IAM

Global Sports Jobs Limited; Nashville (TN); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Eligible for benefits

Discretionary bonus

Job summary

Creative Artists Agency (CAA) in Nashville, TN seeks a Cybersecurity Architect to lead IAM design, secure identity flows, and drive cloud-first security in a SaaS-enabled environment. You will develop reference architectures, standards, and governance for access management, collaborating with HRIS, IT service owners, and end users to implement scalable solutions.

This hands-on role requires strong communication and deep IAM expertise to advance zero-trust principles across both on-prem and cloud

Qualifications

• 7+ years in IT with a security focus.
• 3+ years IAM Architecture/Engineering.
• Bachelor’s or Master’s Degree in a relevant field.
• Experience architecting IAM projects end-to-end.
• Strong communication and presentation skills.
• Experience designing and supporting Zero Trust Identity architecture.
• Understanding of OAuth, SAML and OpenID frameworks.
• Knowledge of servers, OS, networks, firewalls, cloud apps, and infrastructure.
• Automation and SaaS integration experience.
• Lifecycle management and provisioning/de-provisioning knowledge.
• MFA and compensating controls knowledge.
• Privileged Identity Management, just-in-time provisioning concepts, least privilege.
• Scripting in PowerShell, Python, or JavaScript.

Responsibilities

• Maintain IAM diagrams and workflows.
• Design, evaluate IAM programs to support company strategy.
• Develop standards and guidelines for access management.
• Manage user lifecycle provisioning/de-provisioning and audits.
• Collaborate with HRIS, IT service owners, service desk, and end-users.
• Present design and vision meeting user and business needs.
• Design structure for cloud and on-prem apps in IAM platform.
• Create identity governance workflows with attestation/auditing.
• Ensure systems are scalable and maintainable.
• Create documentation to support architectural decisions.
• Review identity workflows for lifecycle management, governance, reporting, self-service.
• Design RESTful Identity as a Service API.
• Contribute to security incident response.

Skills

IAM Architecture

Zero Trust

OAuth/SAML/OpenID

Scripting (PowerShell/Python/JavaS

Automation & SaaS integration

Cloud/On-Prem Infrastructure

Communication & Presentation

Provisioning/De-provisioning

Privileged Access Management

Just-in-time access

Education

Bachelor’s or Master’s Degree in a relevant field

Tools

Azure AD

Okta

SailPoint

Ping Federate

PowerShell

Job description

About the Role

This is a hands-on security position within the Information Security group, working closely with the internal IT department. The Cybersecurity Architect will design and develop the capabilities of the identity and access management platform, including automation of application deployment pipelines. As a key leader in the security organisation, the role drives secure design principles, reference architectures, and security standards across a modern, SaaS-enabled, and cloud-first ecosystem, while securing complex identity flows, third-party integrations, APIs, and distributed systems. The position also provides thought leadership on enterprise security and architecture across identity access and governance, in a fast-paced environment that adopts leading-edge cloud services.

Key Responsibilities

• Maintain architectural diagrams and workflows of the identity access management platform
• Provide design, evaluation, and analysis of identity and access management programs to support the company’s strategy
• Develop standards and guidelines for access management across the company and department
• Understand user lifecycle management, including provisioning/de-provisioning, access requests, user entitlements, and audit & validations
• Collaborate with HRIS, IT service owners, service desk, and end-users to gather feedback and design identity-related workflows
• Present on design and vision that meets user and business needs
• Design overall structure for new and existing cloud and on-premise applications into the identity access management platform
• Create identity governance workflows with the concepts of attestation and auditing
• Ensure systems are scalable, maintainable, and meet business needs
• Create documentation to support architectural decisions and workflows
• Review identity workflows and processes for lifecycle management, auditing, reporting, governance, and self-service
• Design a RESTful identity API to provide Identity as a Service to downstream services and directory owners
• Play an active role in CAA’s security incident response efforts, working to identify and mitigate information security threats

Required Experience & Qualifications

• A minimum of 7 years in Information Technology, ideally with a focus on information security
• A minimum of 3 years’ experience in identity and access management Architecture or Engineering
• A Bachelor’s or Master’s Degree in a relevant field of work
• Experience architecting IAM projects from design through implementation
• Strong communication and presentation skills with ability to explain complex concepts to both technical and non-technical audiences
• Have designed and supported the implementation of Zero Trust Identity architecture
• Understanding of OAuth, SAML and OpenID frameworks
• An understanding of the fundamental operations of servers, operating systems, networks, firewalls, cloud applications, and infrastructure
• Knowledge in automation and integration with SaaS applications
• Knowledge of lifecycle management and provisioning and de-provisioning
• Knowledge of different MFA and compensating controls for identity
• Knowledge of privilege identity management, privileged access management, and concepts of just in time provisioning, just enough access, and principle of least privilege
• Knowledge of scripting in at least one of the following languages: PowerShell, Python, JavaScript

Preferred Skills

• Cross-team collaboration and vendor management
• Set up and integrations for Single Sign-On with various SaaS vendors
• Knowledge and experience of SCIM integration
• Account set-up and access management
• Application development and DevSecOps pipeline
• Building and using REST APIs
• Experience creating and supporting identity framework or IDaaS
• An understanding of the NIST framework and using a continuous improvement loop
• Azure AD, Active Directory, AD Connect, Azure Automation, Power Automate, SAML, OpenID, SSO, SCIM, OAuth, PowerShell, RESTful APIs, Okta, Workday, SailPoint, Ping Federate, PingID, Splunk, RBAC
• Certifications with CIAM, CIMP, Okta, SailPoint, Microsoft Identity, Ping Identity, CISSP, CISM, CompTIA Security+

Workplace

• Nashville, TN

Benefits & Perks

• Eligible for benefits
• Eligible for discretionary bonus

About the Company

Creative Artists Agency (CAA) is the leading entertainment and sports agency, with global expertise in filmed and live entertainment, digital media, publishing, sponsorship sales and endorsements, media finance, consumer investing, fashion, trademark licensing, and philanthropy. Founded in 1975, CAA is headquartered in Los Angeles and has offices in New York, Nashville, Memphis, Chicago, Miami, London, Munich, Geneva, Stockholm, Shanghai, and Beijing, among other locations globally.