Principal Identity Architect

Pentair; Golden Valley (MN); On-site; USD 129,000 - 239,000; Full time

Job summary

Pentair in Golden Valley, MN is seeking a Principal Identity Architect to define and execute the organization’s identity security strategy, leading Zero Trust initiatives and modern identity capabilities across cloud and on‑prem environments.

You will mentor a team of identity engineers, partner with cybersecurity, infrastructure, HR, and business leaders, and ensure secure, scalable access to applications and data through Microsoft identity technologies.

Qualifications

• Bachelor's degree plus 8+ years in identity and access management or security architecture.
• Experience designing enterprise identity solutions in Microsoft environments.
• Knowledge of Entra ID, Active Directory, authentication technologies, and access management practices.
• Experience with MFA, Conditional Access, Identity Governance, and Privileged Access Management.
• Knowledge of identity protocols such as SAML, OAuth, OpenID Connect, and SCIM.
• Experience supporting cloud and hybrid identity environments.
• Ability to lead projects and mentor engineers with strong communication and stakeholder management.

Responsibilities

• Define and lead enterprise identity strategy, architecture, and roadmap.
• Drive Zero Trust initiatives and modern identity security capabilities across the organization.
• Design, implement, and oversee Microsoft identity solutions including Entra ID, MFA, CA, IG, and PAM.
• Lead identity modernization efforts across cloud and hybrid environments.
• Provide technical leadership to a team of identity engineers.
• Partner with business and technology teams to deliver secure, scalable access solutions.
• Oversee identity lifecycle management, access governance, and privileged access controls.
• Support identity-related security investigations and risk reduction initiatives.
• Establish identity standards, metrics, and governance processes to ensure compliance.

Skills

Identity & access management

Security architecture

Leadership

Communication

Problem solving

Education

Bachelor's degree or equivalent

Tools

Microsoft Entra ID

Active Directory

OAuth / SAML / OpenID Connect

MFA

SCIM

Job description

Job Description

At Pentair, you will work alongside passionate problem-solvers who are committed to the future of our planet. We put our mission into practice, helping the world sustainably move, improve, and enjoy water, life’s most essential resource. From our residential water filtration to industrial water management to pool products and more, our 9,000 global employees serve customers in more than 150 countries, working to help create a better world for people and the planet through smart, sustainable water solutions.

At Pentair, you will work alongside passionate problem-solvers who are committed to the future of our planet. We put our mission into practice, helping the world sustainably move, improve, and enjoy water, life’s most essential resource. From our residential water filtration to industrial water management to pool products and more, our 9,000 global employees serve customers in more than 150 countries, working to help create a better world for people and the planet through smart, sustainable water solutions.

We have an opportunity for a Principal Identity Architect to join our Golden Valley, MN team. You will define and execute the organization’s identity security strategy, serving as the senior technical leader for identity and access management across the enterprise. This role is responsible for designing and advancing modern identity capabilities, leading Zero Trust initiatives, and ensuring secure, scalable, and compliant access to applications, systems, and data. The Principal Identity Architect will provide technical leadership to a team of identity engineers and partner closely with cybersecurity, infrastructure, application, HR, and business leaders to modernize identity services, reduce cyber risk, and enable business growth. This role combines strategic vision, architectural leadership, operational oversight, and deep expertise in Microsoft identity technologies.

You Will

• Define and lead the enterprise identity strategy, architecture, and roadmap.


• Drive Zero Trust initiatives and modern identity security capabilities across the organization.


• Design, implement, and oversee Microsoft identity solutions, including Entra ID, MFA, Conditional Access, Identity Governance, and Privileged Access Management


• Lead identity modernization efforts across cloud and hybrid environments.


• Provide technical leadership and mentorship to a team of identity engineers.


• Partner with business and technology teams to deliver secure, scalable, and compliant access solutions.


• Oversee identity lifecycle management, access governance, and privileged access controls.


• Support identity-related security investigations and risk reduction initiatives.


• Establish identity standards, metrics, and governance processes to ensure operational excellence and regulatory compliance.

Key Qualifications

• Bachelor\'s degree or equivalent experience plus 8+ years of experience in identity and access management, cybersecurity, or security architecture


• Experience designing and implementing enterprise identity solutions in Microsoft environments.


• Strong knowledge of Microsoft Entra ID, Active Directory, authentication technologies, and access management practices


• Experience implementing modern identity security controls, including MFA, Conditional Access, Identity Governance, and Privileged Access Management


• Knowledge of identity protocols such as SAML, OAuth, OpenID Connect, and SCIM


• Experience supporting cloud and hybrid identity environments.


• Demonstrated strategic thinking and technical leadership, with the ability to align identity capabilities to business objectives and security priorities.


• Experience leading projects, mentoring engineers, and influencing technical decisions across teams.


• Strong communication, stakeholder management, and relationship-building skills, with the ability to effectively engage both technical and business audiences.


• Strong analytical and problem-solving skills, with attention to detail and a focus on practical risk-based solutions


• Ability to manage multiple priorities and deliver results.

Compensation

For this full-time position working at this location, the anticipated annualized base pay range will be from $128500- $238600 / year. At Pentair, it is not typical for an individual to be hired near the bottom or top of the pay range. Pentair considers various factors in determining actual compensation for this position at the expected location. Actual compensation will be commensurate with demonstrable level of experience and training, pertinent education including licensure and certifications, work location, and other relevant business or organizational needs. This position may be eligible for other forms of compensation such as, annual incentive bonus.

Benefits

As a Pentair employee, you would enjoy a wide array of benefit options to help keep you and your family healthy and protected, health benefits, a generous 401(k), employee stock purchase program, disability benefits, life insurance, critical illness insurance, accident insurance, parental leave, caregiver leave, tuition reimbursement, plus paid time off and wellness programs to encourage a healthy work/life balance.

Equal Opportunity Employer

Pentair is an Equal Opportunity Employer. With our expanding global presence, cross-cultural insight and competence are essential for our ongoing success. We believe that a diverse workforce contributes different perspectives and creative ideas that enable us to continue to improve every day.