Principal IAM & Security Architect

Blackhawk Network; Pleasanton (CA); Hybrid; USD 190,000 - 257,000; Full time

Benefits offered by this job

401k with employer match

Medical, dental, vision coverage

12 paid holidays, sick pay accrual

Job summary

Blackhawk Network seeks a Principal Security Engineer to define security and IAM strategy across the organization, focusing on identity management, access governance, and zero-trust principles. You will guide architectural decisions across network, endpoint, and cloud infrastructures while partnering with security leadership.

Responsibilities include designing identity governance, enabling secure remote access, and driving data loss prevention efforts.

Qualifications

• Bachelor’s degree required; 12+ years in information security or equivalent experience.
• Mastery of IAM principles including lifecycle, RBAC, IGA, PAM, and access certification.
• Strong knowledge of SAML, OAuth, OIDC, SCIM, LDAP, Kerberos.
• Experience across DLP, secure remote access (SASE), and secure enterprise browsers.
• Solid understanding of AD/Azure AD and modern identity platforms; Okta valued.

Responsibilities

• Serve as principal technical strategist for security and IAM across multiple domains.
• Lead IAM program strategy, governance, and access management processes.
• Design and implement identity governance to consolidate systems.
• Drive remote access strategy with secure connectivity and traffic inspection.
• Establish DLP program and adopt secure enterprise browser technologies.

Skills

IAM expertise

RBAC

IGA

PAM

SAML

OAuth

OIDC

SCIM

LDAP

Kerberos

Okta

Active Directory

Azure AD

Zero Trust

DLP

SASE

AI fluency

Security governance

Communication

Education

Bachelor's degree in Information Security

Tools

Okta

Prisma Access

Prisma Browser

Active Directory

Azure AD

ServiceNow

Job description

Blackhawk Network seeks a Principal Security Engineer to define security and IAM strategy across the organization, focusing on identity management, access governance, and zero-trust principles. You will guide architectural decisions across network, endpoint, and cloud infrastructures while partnering with security leadership.

Responsibilities include designing identity governance, enabling secure remote access, and driving data loss prevention efforts.