Technical Solns.Arch. Specialist Advisor - IAM Lead

Subject-matter expertise across all IAM topics related to both cloud and on-premises enterprise technology and the relationship between the architectures. Drive the adoption of Authentication and Authorization reference architectures for existing, new, and emerging IAM technologies. Drive the adoption of creative solutions to address complex, global IAM problems. Participate in Identity and Access Management enterprise governance processes and drive IAM standards adoption. Develop effective architecture solutions that satisfy immediate project requirements and deliver a coherent, reusable, reliable, and phased architecture to help the business grow and change while aligning to strategic vision. Create, maintain, and align with NTT's Information Security policies and standards with industry best practices and business needs to adopt cloud services and technologies. Represent Information Security on organizational project teams and ensure adherence to existing security policies and standards. Manage the successful technical delivery of Information Security projects and services for our customers by working directly with key business stakeholders, executives, and project teams. Security architects are often the technical lead on initiatives and, as such, must drive the vision and alignment of the solution delivery. Review and management of technical security roadmaps related to cloud security and IAM within a cloud security context. Deliver technical security configuration architecture expertise in implementing cross-organizational information sharing. Develop solutions and recommendations for issues caused by process challenges, emerging threats, and technology changes. The individual in this role must understand and interpret identity and access management strategies and direction. Further, the person must bring together critical tenets of Information Security to the IAM cloud strategies and develop technical security solutions that properly align. The Architect will contribute to the overall effort of the IAM direction of the Firm. The individual in this role must be well educated in general aspects of Information Security, namely: Experience architecting IAM solutions such as SailPoint, Saviynt, CyberArk, Oracle platforms within Microsoft Azure, Amazon Web Services (AWS). Intimately familiar with IAM related protocols such as SAML, JML, SPML, XACML, SCIM, OpenID, and OAuth. Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies. Federation concepts and technologies, particularly with solutions from ADFS and Ping Identity. In-depth experience with Microsoft Azure, particularly Azure AD and architecture designs connecting Azure to enterprise infrastructure. Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services. Strong understanding of cloud computing architecture, technical design, and implementations, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) delivery models. Excellent customer service and communication (oral/written) skills required. Strong critical thinking and analytical skills and ability to think "out of the box" required. Must be able to work independently or with a team, under minimum supervision. Consults to critical customers and senior management on project design and development scope. Some knowledge of scripting languages (VBScript, PowerShell, Perl, JavaScript, etc.). Assists customer organizations with planning and implementing complex architecture solutions. Expert level experience in Cloud Authentication and Access Management Services. Expert level experience in cloud solution development with Azure, AWS, Google, or other relevant cloud solution architectures. Good understanding of Multi-Factor authentication and Privileged Access Management 2-3 years of software development experience is desirable. Must have working knowledge and understanding of networking technologies such as LAN, WAN, TCP/IP, load balancers, firewalls, etc. Frequent travel is not required for this position. However, it is anticipated that some travel may be required to participate in vendor briefings, project meetings, and/or education opportunities. Generally, travel would be no more than 5 to 6 times a year. Bachelor's or Master's degree in Information Assurance, Computer Science, Information Systems or related field of study. 10+ years of practical experience in the field of IT is required—5+ years of direct Information Security experience. A security industry certification is preferred, including but not limited to CISSP, SSCP, CISM, SANS GSEC, ECSA, ECSP, and Security+.