Security Architect

Diverse Lynx, LLC; Jersey City (NJ); On-site; USD 120,000 - 140,000; Full time

Job summary

Diverse Lynx LLC is seeking a Security Architect to lead IAM architecture efforts in Jersey City, NJ. The role focuses on discovery, requirements gathering, and designing authentication, authorization, and federation patterns aligned with Zero Trust.

The candidate will develop reusable security patterns and reference architectures, drive architecture reviews, and maintain comprehensive IAM documentation. This full-time on-site position offers a competitive salary.

Qualifications

• Experience assessing IAM landscape including IGA, PAM, SSO and access governance.
• Knowledge of directory services and identity stores.

Responsibilities

• Discovery & Assessment: Assess IAM landscape and identify gaps.
• Requirements gathering: conduct workshops with business, security, risk, and compliance teams.
• IAM Architecture Design: define enterprise IAM standards and design authentication, authorization, RBAC/ABAC, federation and IAM patterns.
• IAM Security Pattern Development: develop reusable IAM security patterns and reference architectures; catalog ~160 IAM patterns.
• Security Architecture Reviews: conduct reviews and remediation of architecture and control gaps.
• Documentation & Standards Management: maintain IAM architecture frameworks and ADRs.

Skills

Cyber Security

Job description

Job Title: Security Architect
Location: Jersey City, NJ
Duration: Fulltime Job
Skills: Cyber Security
Salary: 120K-140K/Year
Required Skills & Qualifications:
Key Responsibilities
1. Discovery & Assessment

• Assess the organization's current IAM landscape, including:
  • Identity Governance & Administration (IGA)
  • Privileged Access Management (PAM)
  • Authentication and Single Sign-On (SSO)
  • Access Certification and Governance processes
  • Directory Services and Identity Stores
• Evaluate existing IAM security controls, architecture standards, and operational processes.
• Identify security, compliance, and operational gaps.
• Produce current-state architecture assessments and recommendations.

2. Requirements Gathering & Analysis

• Conduct workshops and stakeholder interviews with business, security, risk, compliance, and application teams.
• Gather functional and non-functional IAM requirements.
• Translate business and regulatory requirements into IAM architecture principles.
• Document use cases and security requirements.

3. IAM Architecture Design

• Define enterprise IAM architecture standards and frameworks.
• Design:
  • Authentication architectures
  • Authorization models
  • Role-Based Access Control (RBAC)
  • Attribute-Based Access Control (ABAC)
  • Federation and Single Sign-On architectures
  • Privileged Access Management frameworks
• Ensure architecture alignment with Zero Trust and cybersecurity policies.

4. IAM Security Pattern Development

• Develop reusable IAM security patterns for common business scenarios.
• Establish standard design templates and implementation blueprints.
• Create approved reference architectures covering:
  • Joiner-Mover-Leaver processes
  • Application onboarding
  • Privileged access management
  • API and service account security
  • Federation and external identity integrations
  • MFA and password less authentication
• Maintain a catalog of approximately 160+ enterprise IAM patterns.

5. Security Architecture Reviews

• Conduct architecture reviews for IAM solutions and integrations.
• Collaborate with Security, Risk, Compliance, Infrastructure, and Engineering teams.
• Review technical designs against security standards and control requirements.
• Drive remediation of architecture and security control gaps.

6. Documentation & Standards Management Develop and maintain:

• IAM Architecture Frameworks
• Security Standards
• Architecture Decision Records (ADRs)
• Technical Reference Architectures
• Pattern Catalogs
• Implementation Guidance Documents
  • Ensure architecture artifacts remain current and accessible

Disclaimer: Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination, based solely on their qualifications, ability, competence and performance.