Remote Principal: Identity, IAM & Zero Trust Architect

World Wide Technology, Inc.; Northern (KY); Hybrid; USD 160,000 - 200,000; Full time

Benefits offered by this job

Health & Wellness benefits

Profit Sharing

401k with company matching

PTO & Holidays

Tuition Reimbursement

Job summary

World Wide Technology (WWT) seeks a Principal Cybersecurity Architect to own IAM, Zero Trust, and enterprise security across identity, access management, and data protection. You will influence architecture decisions, mentor engineers, and collaborate with stakeholders to reduce risk and improve security posture.

The role emphasizes design of trust models, SSO standards, and CIEM governance across cloud platforms, with a focus on leadership without formal authority.

Qualifications

• 8+ years in information security, with 4+ years in an architecture or senior engineering role
• Proven track record building trusted relationships with business and technical stakeholders
• Demonstrated ability to influence outcomes and gain buy-in without formal authority
• Experience facilitating workshops, requirements-gathering sessions, or architecture reviews
• Excellent written and verbal communication skills
• Deep expertise in Zero Trust frameworks and identity-centric security
• Strong understanding of threat modeling methods
• Hands-on experience with enterprise IAM platforms
• Strong grasp of federation protocols: SAML 2.0, OIDC, OAuth 2.0
• Experience with PAM platforms and secrets management
• Familiarity with CIEM tooling and cloud IAM governance
• Experience designing identity lifecycle and IGA processes
• Certifications preferred: CISSP, SABSA, TOGAF, Microsoft SC-100, Okta Certified Architect

Responsibilities

• Act as a trusted advisor to IT, infrastructure, and business stakeholders
• Build and maintain relationships across engineering, business units, and executive leadership
• Lead discovery sessions, workshops, and architecture reviews
• Translate complex risk into business language and recommendations
• Mentor security engineers on architecture standards and communications
• Navigate competing priorities to build consensus on security decisions
• Design and mature a Zero Trust architecture spanning identity, device trust, network access, and app security
• Define reference architectures, security patterns, and guardrails
• Lead threat modeling and security architecture reviews for major changes
• Evaluate and select security tooling aligned to architecture strategy
• Drive continuous improvement of Zero Trust posture through maturity modeling
• Own the enterprise IAM architecture and lifecycle management
• Define authentication assurance levels and roadmap toward phishing-resistant MFA
• Lead the PAM architecture and secret management effort
• Govern cloud entitlements through a CIEM framework
• Establish non-human identity strategy and governance
• Drive identity governance processes and joiner/mover/leaver automation
• Define security architecture standards and governance artifacts
• Contribute to security roadmap and budgeting

Skills

Zero Trust

IAM

NIST SP 800-207

BeyondCorp

SAML 2.0

OIDC

OAuth 2.0

STRIDE

PASTA

ATT&CK

Microsoft Entra ID

Okta

Ping Identity

SCIM

CISSP

SABSA

TOGAF

PAM

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

Tools

CyberArk

BeyondTrust

Delinea

HashiCorp Vault

AWS Secrets Manager

Azure Key Vault

Job description

World Wide Technology (WWT) seeks a Principal Cybersecurity Architect to own IAM, Zero Trust, and enterprise security across identity, access management, and data protection. You will influence architecture decisions, mentor engineers, and collaborate with stakeholders to reduce risk and improve security posture.

The role emphasizes design of trust models, SSO standards, and CIEM governance across cloud platforms, with a focus on leadership without formal authority.