Senior Security Architect Consultant - Identity

Kalles Group; Seattle (WA); On-site; USD 210,000 - 260,000; Full time

Benefits offered by this job

Work/life balance initiative

Job summary

Kalles Group is seeking a Senior Security Architect Consultant - Identity in Seattle, WA. This role is critical for modernizing and strengthening enterprise identity security capabilities through strategic leadership and hands-on guidance.

The successful candidate will have 15+ years in cybersecurity, a Bachelor’s degree, and deep expertise in identity management. The salary range is $210,000-$260,000, with a focus on work-life balance.

Qualifications

• 15+ years of experience in cybersecurity, identity engineering, or security architecture roles.
• Demonstrated success leading enterprise-scale identity security transformation initiatives.
• Advanced understanding of authentication and authorization technologies.

Responsibilities

• Define and maintain the strategic architecture vision for enterprise identity security platforms.
• Develop target-state architectures and implementation roadmaps for identity modernization initiatives.
• Design migration and deployment strategies minimizing risk during platform transformations.

Skills

Identity and access management architecture

Cybersecurity

Strategic architectural leadership

Stakeholder management

Zero Trust security models

Cloud environments expertise

Education

Bachelor’s degree in Computer Science, Cybersecurity or related discipline

Tools

Microsoft Entra ID

Active Directory

SailPoint

Okta

Terraform

Ansible

Job description

Senior Security Architect Consultant - Identity

Seattle, WA

WHAT YOU WILL DO:

As a Senior Security Architect Consultant – Identity, you will play a critical leadership role in helping our client modernize and strengthen its enterprise identity security capabilities. This position combines strategic architecture leadership with hands‑on technical guidance, driving the evolution of identity platforms that protect employees, partners, and customers across a complex hybrid and multi‑cloud environment.

You will establish the target‑state architecture for identity governance, privileged access management, cloud identity, and directory services while guiding engineering teams through large‑scale transformation initiatives. Acting as a trusted technical authority, you will define architectural standards, integration patterns, and deployment strategies that enable secure, scalable, and resilient identity services. Working closely with security leaders, engineers, architects, and program stakeholders, you will help bridge strategy and execution while ensuring solutions align with security, compliance, and business objectives.

Key Responsibilities:

• Define and maintain the strategic architecture vision for enterprise identity security platforms and services
• Develop target‑state architectures, reference designs, and implementation roadmaps for identity modernization initiatives
• Lead architecture efforts related to privileged access management, identity governance, cloud identity, directory services, and Zero Trust security models
• Establish architecture standards, design patterns, integration frameworks, and governance practices for identity solutions
• Serve as a technical design authority, providing guidance through architecture reviews and key implementation decisions
• Design migration and deployment strategies that minimize risk and business disruption during platform transformations
• Architect integrations between identity platforms, cloud services, enterprise applications, and SaaS solutions
• Drive enterprise adoption of phishing‑resistant authentication, least‑privilege access models, and modern identity security controls
• Partner with engineering, cloud, security, and program teams to translate architecture strategy into executable delivery plans
• Mentor engineers and technical teams, ensuring alignment with architecture principles and security requirements
• Identify architectural risks, dependencies, and trade‑offs while providing recommendations to technical and executive stakeholders
• Support compliance, security, and governance objectives through secure identity design and control implementation
• Leverage emerging technologies, including AI‑enabled tools, to improve architecture analysis, documentation, and solution evaluation

ABOUT YOU:

• Integrity: You believe in doing the right thing, even when it’s uncomfortable, seemingly inefficient, or costly.
• Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
• Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.

YOUR EXPERIENCE

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related discipline, or equivalent professional experience
• 15+ years of experience in cybersecurity, identity engineering, or security architecture roles
• Demonstrated success leading enterprise‑scale identity security transformation initiatives from strategy through implementation
• Deep expertise in identity and access management architecture and modern identity security principles
• Strong experience with identity platforms such as Microsoft Entra ID, Active Directory, SailPoint, BeyondTrust, Okta, or comparable enterprise solutions
• Advanced understanding of authentication and authorization technologies, including SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and Kerberos
• Experience designing privileged access management (PAM), identity governance, and access control solutions
• Expertise implementing Zero Trust identity architectures and modern authentication strategies
• Proven experience architecting solutions across hybrid and multi‑cloud environments, including Azure, AWS, and GCP
• Experience establishing architecture standards and providing technical leadership across multiple engineering teams
• Strong communication and stakeholder management skills with the ability to influence both technical and executive audiences
• Ability to operate effectively in large‑scale, fast‑paced environments with multiple concurrent workstreams

Preferred Qualifications

• Professional certifications such as CISSP, SABSA, TOGAF, SC-300, SailPoint Certified Engineer, or similar
• Experience with Infrastructure as Code technologies such as Terraform and Ansible
• Familiarity with CI/CD practices supporting identity platform delivery
• Experience with Identity Threat Detection and Response (ITDR) capabilities
• Experience integrating identity security telemetry into SIEM and SOAR platforms
• Background supporting large enterprise, retail, e‑commerce, or other high‑transaction environments

WHAT WE OFFER:

• The annual salary range for this role is $210,000-$260,000.
• Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.

LOCATION:

This role is on‑site in Seattle, WA. We are only considering candidates that already live in the Greater Seattle, WA area.

Equal‑opportunity employer. Kalles Group does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.