Senior Lead Cybersecurity Architect - Cloud IAM

Testing Site - JPMC; Seattle (WA); On-site; USD 180,000 - 250,000; Full time

Job summary

JPMorgan Chase in Seattle seeks a Senior Lead Cybersecurity Architect to promote design, architecture, and governance of IAM across multi-cloud environments for the CTC. The role requires deep expertise in cloud identity provisioning, RBAC/ABAC/PBAC, threat modeling, and privileged access management, with a track record in large-scale deployments and regulatory alignment.

The position involves leading IAM strategies, architecture governance, and orchestration of cross-team efforts to ensure

Qualifications

• Formal training or certification on Cybersecurity concepts and 5+ years applied experience in cybersecurity architecture, with a focus on cloud IAM.
• Proven experience in identity provisioning, role management, and entitlement management for cloud infrastructure.
• Hands-on experience in threat hunting, threat modeling, and privileged access management.
• Deep expertise with IAM products: EntraID, Ping, ForgeRock, CyberArk, Hashicorp Vault, Delinea.
• Strong knowledge of RBAC, ABAC, PBAC, role certification, and cloud provisioning.
• Familiarity with security standards: NIST, OWASP, MITRE, encryption protocols.
• Experience with multi-cloud strategies and large-scale IAM implementations.
• Proficiency in developing custom IAM workflows and automation.
• Solid understanding of data security, risk management, and compliance frameworks.

Responsibilities

• Architect and oversee identity provisioning, role management, and entitlement processes for cloud infrastructure.
• Architect and manage RBAC, ABAC, PBAC, and role certification frameworks.
• Lead threat hunting initiatives and develop threat models for cloud IAM environments and collaborate with security operations to proactively identify and mitigate risks.
• Design and implement workload identity solutions and privileged access management for cloud workloads and Integrate, manage privileged access tools and processes.
• Deploy and manage IAM solutions such as EntraID, Ping, ForgeRock, CyberArk, Hashicorp Vault, and Dileania.
• Evaluate and recommend IAM products and integrations for cloud environments.
• Ensure IAM architectures align with NIST, OWASP, MITRE, and encryption standards and maintain compliance with regulatory requirements and internal policies.
• Develop and execute multi-cloud IAM strategies supporting platforms and lead large-scale IAM implementations and migrations.
• Design and develop custom IAM workflows to automate provisioning, certification, and access reviews.
• Integrate IAM with data security controls and risk management frameworks and conduct risk assessments and implement mitigation strategies.

Skills

Cloud IAM

Identity provisioning

Role management

Threat hunting

Threat modeling

Privileged access management

RBAC/ABAC/PBAC

Tools

EntraID

Ping

ForgeRock

CyberArk

Hashicorp Vault

Delinea

Job description

Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.

As a Senior Lead Cybersecurity Architect at JPMorgan Chase within the CTC, you will be responsible for promoting the design, architecture, and governance of Identity and Access Management (IAM) solutions across multi-cloud environments for the CTC. This role demands deep expertise in cloud identity provisioning, role management, threat hunting, and privileged access, along with a proven track record in large-scale deployments and adherence to industry standards.

Job responsibilities

• Architect and oversee identity provisioning, role management, and entitlement processes for cloud infrastructure.
• Architect and manage RBAC, ABAC, PBAC, and role certification frameworks.
• Lead threat hunting initiatives and develop threat models for cloud IAM environments and collaborate with security operations to proactively identify and mitigate risks.
• Design and implement workload identity solutions and privileged access management for cloud workloads and Integrate, manage privileged access tools and processes.
• Deploy and manage IAM solutions such as EntraID, Ping, ForgeRock, CyberArk, Hashicorp Vault, and Dileania.
• Evaluate and recommend IAM products and integrations for cloud environments.
• Ensure IAM architectures align with NIST, OWASP, MITRE, and encryption standards and maintain compliance with regulatory requirements and internal policies.
• Develop and execute multi-cloud IAM strategies supporting platforms and lead large-scale IAM implementations and migrations.
• Design and develop custom IAM workflows to automate provisioning, certification, and access reviews.
• Integrate IAM with data security controls and risk management frameworks and conduct risk assessments and implement mitigation strategies.

Required qualifications, capabilities, and skills

• Formal training or certification on Cybersecurity concepts and 5+ years applied experience in cybersecurity architecture, with a focus on cloud IAM.
• Proven experience in identity provisioning, role management, and entitlement management for cloud infrastructure.
• Hands-on experience in threat hunting, threat modeling, and privileged access management.
• Deep expertise with IAM products: EntraID, Ping, ForgeRock, CyberArk, Hashicorp Vault, Delinea.
• Strong knowledge of RBAC, ABAC, PBAC, role certification, and cloud provisioning.
• Familiarity with security standards: NIST, OWASP, MITRE, encryption protocols.
• Experience with multi-cloud strategies and large-scale IAM implementations.
• Proficiency in developing custom IAM workflows and automation.
• Solid understanding of data security, risk management, and compliance frameworks.

Preferred qualifications, capabilities, and skills

• Professional certifications: CISSP, CCSP, AWS/Azure Security, or equivalent.
• Experience in financial services or highly regulated industries.
• Excellent communication, leadership, and stakeholder management skills.
• Ability to mentor and guide junior architects and engineers.

#CTC