Cybersecurity Identity Architect

Scorpion Therapeutics; Minnesota; On-site; USD 180,000 - 240,000; Full time

Job summary

Scorpion Therapeutics seeks a Strategic Cybersecurity Identity Architect to lead enterprise IAM design and implementation across cloud and on-prem environments. You will develop identity architecture blueprints and scalable solutions including SSO, MFA, federation, and privileged access, translating security requirements into practical designs.

Responsibilities include evaluating IAM tools, managing integrations, and ensuring alignment with zero trust, data protection, and regulatory standards

Qualifications

• Bachelor's in Cybersecurity, CS or related field
• 10+ years in enterprise identity management
• Strong knowledge of identity protocols (SAML, OAuth, OpenID, LDAP, Kerberos)
• Experience with cloud identity platforms (Azure AD, AWS, GCP) and hybrid environments
• Preferred: CIAM certification and IAM platforms like CyberArk/Saviynt

Responsibilities

• Lead enterprise IAM design and implementation across cloud and on-prem environments.
• Develop and maintain identity architecture blueprints and scalable solutions (SSO, MFA, federation, privileged access).
• Collaborate with cross-functional teams to translate security requirements into technical designs; evaluate IAM tools and oversee integration.
• Ensure alignment with zero trust, data protection, and compliance standards (NIST, ISO, GDPR).
• Stay current with IAM trends and vendor relationships; evaluate passwordless authentication and AI-driven access decisions.

Skills

SAML

OAuth

OpenID Connect

Kerberos

Azure AD

AWS

GCP

MFA

SSO

Education

Bachelor's degree in Cybersecurity or Computer Science

Tools

CyberArk

Saviynt

Job description

Role: Strategic Cybersecurity Identity Architect leading enterprise IAM design and implementation across cloud and on-prem environments. Responsibilities: develop and maintain identity architecture blueprints, design scalable solutions including SSO, MFA, federation, and privileged access; collaborate with cross-functional teams to translate security requirements into technical designs; evaluate IAM tools, oversee their integration, and ensure alignment with zero trust, data protection, and compliance standards (e.g., NIST, ISO, GDPR); stay current with emerging IAM trends, evaluate new technologies like passwordless authentication and AI-driven access decisions, and manage vendor relationships.

Requirements: Bachelor's in Cybersecurity, Computer Science, or related field; 10+ years experience in enterprise identity management, with strong knowledge of identity protocols (SAML, OAuth, OpenID, LDAP, Kerberos), cloud identity platforms (Azure AD, AWS, GCP), and hybrid environments.

Preferred: CIAM certification, deep understanding of non-human identities (service accounts, AI agents), experience with IAM platforms (CyberArk, Saviynt), and supporting large multinational enterprises.

Additional qualifying skills include knowledge of regulatory standards (HIPAA, SOX, PCI-DSS), and experience supporting manufacturing or OT environments.

Work setup: On-site at Maplewood, MN or Austin, TX, 4+ days/week, with up to 5% travel.