Identity Security Architect - IAM & Zero Trust (FTE / Hybrid)

NTT DATA Services; Irving (TX); Hybrid; USD 118,000 - 196,000; Full time

Job summary

NTT DATA Services in Irving, TX is seeking an Identity Security Architect to lead IAM & Zero Trust initiatives. This hybrid, full-time role focuses on designing identity architectures for workforce, privileged, and machine identities, and integrating with cloud and on-premise systems.

The candidate will drive deployment of authentication and access controls, advance PBAC, and collaborate across security, cloud, and application teams to reduce identity-based risk.

Qualifications

• 10+ Years of Deep expertise in Identity and Access Management architecture and enterprise access-control frameworks.
• 10+ Years of Strong experience designing and implementing enterprise IAM solutions for workforce, privileged, application, and machine identities.
• 10+ Years of Experience with Microsoft Entra ID / Azure Active Directory.
• 10+ Years of Experience implementing SSO, MFA, Identity Governance, Access Management, PAM, and federation.
• 10+ Years of Strong understanding of modern authentication and authorization protocols.
• 10+ Years of Hands-on experience engineering, integrating, deploying, and supporting enterprise identity-security products.
• 10+ Years of Strong hands-on experience with identity-security technologies such as Sgnl.ai, PlainID, CrowdStrike Identity Protection.
• 10+ Years of Experience integrating identity-security platforms with enterprise applications, infrastructure, cloud services, and security systems.

Responsibilities

• Define and execute enterprise identity security strategies aligned with Zero Trust.
• Design scalable IAM architectures for workforce, privileged, service accounts, and machine identities.
• Develop identity-centric security controls to reduce attack surfaces and identity-based threats.
• Establish standards for authentication, authorization, and identity lifecycle management.
• Lead deployment and operation of identity security platforms (Sgnl.ai, PlainID, CrowdStrike Identity Protection, Entra ID).
• Partner with security product vendors and engineering teams to deliver scalable identity-security solutions.
• Integrate identity-security capabilities with applications, cloud platforms, and security tooling.
• Identify privilege relationships, lateral movement paths, and identity-based risks via attack-path analysis.
• Implement identity threat detection, risk scoring, containment, and remediation capabilities.
• Develop PBAC capabilities and adaptive/risk-based access controls.

Skills

Identity IAM architecture

Zero Trust principles

SSO & Federation

MFA & authentication

PBAC & policy-based access

ITDR awareness

Privilege access management

API integrations

Cloud security integration

Vendor collaboration

Tools

Sgnl.ai

PlainID

CrowdStrike Identity Protection

Microsoft Entra ID

Job description

Identity Security Architect - IAM & Zero Trust (FTE / Hybrid)

Select how often (in days) to receive an alert: Create Alert

Location: Irving, TX, US

Company: NTT DATA Services

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization,

We are currently seeking a Identity Security Architect - IAM & Zero Trust (FTE / Hybrid) to join our team in Irving, Texas (US-TX), United States (US).

Job Duties and Responsibilities:

Job Description – Identity Security Architect – IAM & Zero Trust

Day to Day Job Duties:

(What this person will do on a daily/weekly basis)

• Define and execute enterprise identity security strategies and roadmaps aligned with Zero Trust principles and broader cybersecurity objectives.
• Design scalable Identity and Access Management (IAM) architectures supporting workforce identities, privileged identities, service accounts, machine identities, and enterprise applications.
• Develop identity-centric security controls to reduce attack surfaces and prevent identity-based threats.
• Establish architectural standards and design principles for authentication, authorization, access governance, identity lifecycle management, and privileged access.
• Lead engineering, integration, deployment, and operationalization of enterprise identity security platforms, including Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID.
• Partner with security product vendors, architecture teams, engineering teams, infrastructure teams, cloud teams, and application teams to deliver scalable identity-security solutions.
• Integrate identity-security capabilities with enterprise applications, cloud platforms, infrastructure services, authentication platforms, and security tooling.
• Design and expand identity attack-path analysis capabilities to identify exploitable privilege relationships, lateral-movement paths, excessive entitlements, and identity-based risks.
• Implement identity threat detection, risk scoring, attack containment, and remediation capabilities.
• Develop processes and technical controls to proactively identify privilege-escalation paths and unauthorized access opportunities.
• Improve visibility into identity relationships, entitlements, authentication activity, access patterns, and associated security risks.
• Support modernization of enterprise authentication services, including enhancements to authenticator capabilities and user authentication experiences.
• Drive adoption of strong authentication, Multi-Factor Authentication (MFA), adaptive access, and risk-based authentication controls.
• Design and implement Policy-Based Access Control (PBAC) capabilities using platforms such as PlainID.
• Develop identity-aware authorization models that improve enterprise security while reducing access-management complexity.
• Design identity-risk models supporting adaptive authentication, authorization, continuous verification, and Zero Trust access decisions.
• Leverage identity intelligence, security signals, and behavioral context to improve access decisions and security controls.
• Design and integrate IAM capabilities including Single Sign-On, federation, authentication, authorization, identity governance, access management, and Privileged Access Management.
• Develop secure integrations using APIs, modern identity protocols, automation, and cloud-native architectures.
• Translate business, security, regulatory, and technology requirements into secure and scalable identity architecture and engineering solutions.
• Conduct architecture reviews, security-design reviews, product evaluations, and technical implementation discussions.
• Provide technical leadership and guidance to engineering teams implementing identity and access-security solutions.

Basic Qualifications:

(What are the skills required for this job with minimum years of experience on each)

• 10+ Years of Deep expertise in Identity and Access Management architecture, identity security, and enterprise access-control frameworks.
• 10+ Years of Strong experience designing and implementing enterprise IAM solutions supporting workforce, privileged, application, and machine identities.
• 10+ Years of Experience with Microsoft Entra ID / Azure Active Directory.
• 10+ Years of Experience implementing and supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), Identity Governance, Access Management, Privileged Access Management (PAM), and federation.
• 10+ Years of Strong understanding of modern authentication and authorization protocols.
• 10+ Years of Hands-on experience engineering, integrating, deploying, and supporting enterprise identity-security products.
• 10+ Years of Strong hands-on experience with identity-security technologies such as:
• Sgnl.ai
• PlainID
• CrowdStrike Identity Protection
• 10+ Years of Experience integrating identity-security platforms with enterprise applications, infrastructure, cloud services, and security systems.
• 10+ Years of Strong understanding of Zero Trust Architecture and identity-centric security principles.
• 10+ Years of Experience with Identity Threat Detection and Response (ITDR).
• 10+ Years of Experience with identity attack-path analysis, privilege-risk identification, and lateral-movement assessment.
• 10+ Years of Experience designing and implementing authorization frameworks and Policy-Based Access Control (PBAC).
• 10+ Years of Experience with risk-based authentication, adaptive access, continuous verification, and identity-risk modeling.
• 10+ Years of Strong product-engineering, solution-design, and enterprise security-delivery experience.
• 10+ Years of Experience using APIs, identity protocols, automation, and cloud-native technologies to integrate security platforms and applications.
• 10+ Years of Experience translating business and security requirements into scalable technical architectures and engineering solutions.
• 10+ Years of Strong understanding of enterprise security architecture, authentication, authorization, access governance, and identity lifecycle-management principles.
• Strong analytical, troubleshooting, problem-solving, stakeholder-management, and technical-leadership skills.
• Ability to collaborate effectively with cybersecurity, IAM, cloud, infrastructure, application, architecture, engineering, and vendor teams.

Travel:

Not specified in the source job description.

Degree:

Degree requirement not specified in the source job description.

Nice to Have:

(But not a must)

• 10+ years of experience in Cybersecurity, Identity and Access Management, Identity Architecture, Security Engineering, or a related security discipline.
• Experience leading enterprise-scale identity-security or IAM transformation programs.
• Experience designing or implementing Zero Trust security programs.
• Familiarity with NIST cybersecurity guidance, Zero Trust frameworks, and modern enterprise security standards.
• Experience working within large, complex, highly regulated enterprise environments.
• Experience implementing large-scale identity threat detection, attack-path analysis, or identity-risk-management programs.
• Experience with advanced Policy-Based Access Control and identity-aware authorization models.
• CISSP certification.
• CCSP certification.
• Microsoft Azure Security Engineer certification.
• CIAM, IAM, or other relevant Identity and Access Management certifications.
• Equivalent cybersecurity, cloud-security, or identity-security certifications.

#LI-NorthAmerica

NTT DATA provides a reasonable range of compensation for U.S.-based positions. The starting pay range for this role is $117,600.00 - $196,000.00. Actual compensation will depend on a number of factors, including the candidate’s relevant experience, technical skills, and other qualifications.

This position may also be eligible for incentive compensation based on individual and/or company performance.

This position is eligible for company benefits including medical, dental, and vision insurance with an employer contribution, flexible spending or health savings account, lifeand AD&D insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits.

About NTT DATA

NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners.NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D.

Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us .

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us . This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For Pay Transparency information, please click here .

Nearest Major Market: Irving
Nearest Secondary Market: Dallas
Job Segment: Developer, Cloud, ERP, Consulting, Technology