Identity Security Architect Entra ID / IAM / Zero Trust

NTT DATA; Irving (TX); Presencial; USD 83.000 - 96.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Dental insurance

Vision insurance

HSA/FSA

AD&D insurance

Employee assistance

401k program

Voluntary benefits

Descripción de la vacante

NTT DATA's client in Irving, TX seeks an Identity Security Architect (IAM & Zero Trust) to lead enterprise identity strategies, design scalable IAM architectures, and implement identity-security controls across cloud and on‑prem environments.

You will partner with security, cloud, and application teams to deploy identity solutions like Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Entra ID, driving MFA adoption, PBAC, and risk-based authentication.

Formación

• 10+ years of IAM architecture experience.
• 10+ years implementing enterprise IAM including workforce, privileged, app and machine identities.
• 10+ years experience with Microsoft Entra ID / Azure AD.
• 10+ years implementing SSO, MFA, Identity Governance, PAM and federation.
• 10+ years strong understanding of modern authentication protocols.
• Hands-on with identity-security products like Sgnl.ai, PlainID, CrowdStrike Identity Protection, Azure AD.

Responsabilidades

• Define and execute enterprise identity security strategies and roadmaps based on Zero Trust.
• Design scalable IAM architectures for workforce, privileged, service accounts, machine identities, and apps.
• Develop identity-centric security controls to reduce attack surfaces and prevent identity-based threats.
• Lead deployment and operationalization of identity security platforms.
• Collaborate with security, cloud, infrastructure, and application teams to deliver identity-security solutions.
• Implement PBAC using PlainID and enable identity-aware authorization models.

Conocimientos

IAM architecture

Identity security

Enterprise IAM

Entra ID/Azure AD

SSO/MFA/IPAM

Herramientas

Sgnl.ai

PlainID

CrowdStrike Identity Protection

Microsoft Entra ID / Azure AD

Descripción del empleo

Company Overview:

Req ID: 396457

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us.

NTT DATA's Client is currently seeking a Cybersecurity Architecture to join their team in Irving, Texas (US-TX), United States (US).

Job Description – Identity Security Architect – IAM & Zero Trust

Day to Day Job Duties:

• Define and execute enterprise identity security strategies and roadmaps aligned with Zero Trust principles and broader cybersecurity objectives.
• Design scalable Identity and Access Management (IAM) architectures supporting workforce identities, privileged identities, service accounts, machine identities, and enterprise applications.
• Develop identity-centric security controls to reduce attack surfaces and prevent identity-based threats.
• Establish architectural standards and design principles for authentication, authorization, access governance, identity lifecycle management, and privileged access.
• Lead engineering, integration, deployment, and operationalization of enterprise identity security platforms, including Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID.
• Partner with security product vendors, architecture teams, engineering teams, infrastructure teams, cloud teams, and application teams to deliver scalable identity-security solutions.
• Integrate identity-security capabilities with enterprise applications, cloud platforms, infrastructure services, authentication platforms, and security tooling.
• Design and expand identity attack-path analysis capabilities to identify exploitable privilege relationships, lateral-movement paths, excessive entitlements, and identity-based risks.
• Implement identity threat detection, risk scoring, attack containment, and remediation capabilities.
• Develop processes and technical controls to proactively identify privilege-escalation paths and unauthorized access opportunities.
• Improve visibility into identity relationships, entitlements, authentication activity, access patterns, and associated security risks.
• Support modernization of enterprise authentication services, including enhancements to authenticator capabilities and user authentication experiences.
• Drive adoption of strong authentication, Multi-Factor Authentication (MFA), adaptive access, and risk-based authentication controls.
• Design and implement Policy-Based Access Control (PBAC) capabilities using platforms such as PlainID.
• Develop identity-aware authorization models that improve enterprise security while reducing access-management complexity.
• Design identity-risk models supporting adaptive authentication, authorization, continuous verification, and Zero Trust access decisions.
• Leverage identity intelligence, security signals, and behavioral context to improve access decisions and security controls.
• Design and integrate IAM capabilities including Single Sign-On, federation, authentication, authorization, identity governance, access management, and Privileged Access Management.
• Develop secure integrations using APIs, modern identity protocols, automation, and cloud-native architectures.
• Translate business, security, regulatory, and technology requirements into secure and scalable identity architecture and engineering solutions.
• Conduct architecture reviews, security-design reviews, product evaluations, and technical implementation discussions.
• Provide technical leadership and guidance to engineering teams implementing identity and access-security solutions.

Basic Qualifications:

• 10+ Years of Deep expertise in Identity and Access Management architecture, identity security, and enterprise access-control frameworks.
• 10+ Years of Strong experience designing and implementing enterprise IAM solutions supporting workforce, privileged, application, and machine identities.
• 10+ Years of Experience with Microsoft Entra ID / Azure Active Directory.
• 10+ Years of Experience implementing and supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), Identity Governance, Access Management, Privileged Access Management (PAM), and federation.
• 10+ Years of Strong understanding of modern authentication and authorization protocols.
• 10+ Years of Hands-on experience engineering, integrating, deploying, and supporting enterprise identity-security products.
• 10+ Years of Strong hands-on experience with identity-security technologies such as:
  • Sgnl.ai
  • PlainID
  • CrowdStrike Identity Protection
  • Microsoft Entra ID / Azure AD
• 10+ Years of Experience integrating identity-security platforms with enterprise applications, infrastructure, cloud services, and security systems.
• 10+ Years of Strong understanding of Zero Trust Architecture and identity-centric security principles.
• 10+ Years of Experience with Identity Threat Detection and Response (ITDR).
• 10+ Years of Experience with identity attack-path analysis, privilege-risk identification, and lateral-movement assessment.
• 10+ Years of Experience designing and implementing authorization frameworks and Policy-Based Access Control (PBAC).
• 10+ Years of Experience with risk-based authentication, adaptive access, continuous verification, and identity-risk modeling.
• 10+ Years of Strong product-engineering, solution-design, and enterprise security-delivery experience.
• 10+ Years of Experience using APIs, identity protocols, automation, and cloud-native technologies to integrate security platforms and applications.
• 10+ Years of Experience translating business and security requirements into scalable technical architectures and engineering solutions.
• 10+ Years of Strong understanding of enterprise security architecture, authentication, authorization, access governance, and identity lifecycle-management principles.
• Strong analytical, troubleshooting, problem-solving, stakeholder-management, and technical-leadership skills.
• Ability to collaborate effectively with cybersecurity, IAM, cloud, infrastructure, application, architecture, engineering, and vendor teams.

Degree:

Degree requirement not specified in the source job description.

Nice to Have:

• 10+ years of experience in Cybersecurity, Identity and Access Management, Identity Architecture, Security Engineering, or a related security discipline.
• Experience leading enterprise-scale identity-security or IAM transformation programs.
• Experience designing or implementing Zero Trust security programs.
• Familiarity with NIST cybersecurity guidance, Zero Trust frameworks, and modern enterprise security standards.
• Experience working within large, complex, highly regulated enterprise environments.
• Experience implementing large-scale identity threat detection, attack-path analysis, or identity-risk-management programs.
• Experience with advanced Policy-Based Access Control and identity-aware authorization models.
• CISSP certification.
• CCSP certification.
• Microsoft Azure Security Engineer certification.
• CIAM, IAM, or other relevant Identity and Access Management certifications.
• Equivalent cybersecurity, cloud-security, or identity-security certifications.

NTT DATA provides a reasonable range of compensation for U.S.-based positions. The starting pay range for this role is $60-$70/Hour. Actual compensation will depend on a number of factors, including the candidate's relevant experience, technical skills, and other qualifications.

This position is eligible for company benefits including participation in medical, dental, and vision insurance, flexible spending or health savings account, and AD&D insurance, employee assistance, participation in a 401k program, and additional voluntary or legally-required benefits.

About NTT DATA:

NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start‑up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at us.nttdata.com

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement. If you'd like more information on your EEO rights under the law. For Pay Transparency information.