Identity Architect

23 hours, 21 minutes ago
Full-time
Lead
DevOps and Infrastructure
Loenbro

Loenbro

Loenbro is a leading provider of mission-critical industrial services, offering a wide range of solutions from electrical to inspection. With origins in welding, the company has expanded to provide turnkey services for new plant construction, serving i...

Construction & Engineering
251-1K
Founded 1998

Description

  • Design, implement, and evolve the enterprise IAM strategy and architecture.
  • Lead Microsoft Entra ID, identity governance, authentication modernization, and passwordless initiatives.
  • Deploy and support TPM-backed authentication, FIDO2 security keys, and Windows Hello for Business.
  • Partner with security, infrastructure, cloud, business, HR, and application teams on scalable identity solutions.
  • Expand IAM capabilities across Zero Trust, privileged access management, and identity governance.
  • Integrate SaaS, cloud, and on-premises applications with centralized identity platforms.
  • Support access reviews, automated provisioning, role-based access controls, and privileged access controls.
  • Document identity architectures, manage projects, and communicate with stakeholders and vendors.
  • Help ensure identity solutions support compliance, audits, security controls, and improved user experience.

Requirements

  • 10+ years of experience in IAM, information security, infrastructure engineering, or a related discipline.
  • 3+ years of experience designing and implementing enterprise IAM architectures.
  • Deep expertise with Microsoft Entra ID, including Conditional Access, Identity Protection, PIM, Identity Governance, and Hybrid Identity.
  • Hands-on experience deploying FIDO2, Windows Hello for Business, and TPM-backed authentication.
  • Strong understanding of Zero Trust and SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP.
  • Experience with identity lifecycle management, RBAC, and PAM.
  • Experience architecting identity solutions for hybrid and cloud-first environments.
  • Knowledge of SOX, SOC, and other identity-related compliance and audit requirements.
  • Strong project management, documentation, communication, and stakeholder engagement skills.
  • Preferred certifications include SC-300, SC-100, CISSP, or CISM; IAM transformation experience is highly preferred.

Benefits

  • Colorado salary range of $185,000–$200,000.
  • Medical, dental, and vision insurance.
  • 401(k) plan with company match.
  • Paid time off and holiday pay.
  • Life and disability insurance.
  • Professional development and training opportunities.
  • Employee assistance program (EAP).
  • Primarily remote work with occasional business travel.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Detection Engineering Lead

Aspenview Technology Partners Internet Software & Services

AspenView Technology Partners is seeking a US-based Detection Engineering Lead to own detection engineering for a nearshore security operations service supporting a large consumer lender, ensuring effective coverage across telemetry, alerting, and case management.

Generative AI Git Python SIEM Splunk
22 hours, 51 minutes ago

Security Engineer

DataVisor 51-250 IT Services

DataVisor is seeking a Security Engineer to protect its AWS and GCP environments, products, and AI/LLM integrations through cloud security engineering, threat assessment, monitoring, and compliance practices.

AWS DHCP Encryption FTP GCP Machine Learning OAuth OWASP SIEM TLS
23 hours, 21 minutes ago

ingénieur de sécurité principal

Shakepay 51-250 Diversified Financial Services

Shakepay recherche un ingénieur de sécurité principal pour protéger son infrastructure, ses produits et ses données clients tout en développant ses capacités de sécurité, d’observabilité et d’intelligence artificielle dans un environnement fintech réglementé.

AWS Bitcoin Git GitHub
1 day, 22 hours ago

Security Software Engineer II, Detection and Response

Pinterest 5K-10K Internet Software & Services

Pinterest is hiring a Security Engineer to strengthen detection and incident response capabilities, protect employees and infrastructure, and adapt security operations to emerging threats in a cloud-first environment.

Go Network Security Python Ruby SIEM TCP/IP
1 day, 22 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers