Security Architect
Key Responsibilities:
- Lead current-state assessment and architecture discovery workshops across GCP, Saviynt, Delinea, and connected enterprise systems.
- Define target-state architecture for human and non-human identity lifecycle governance, service account governance, access certifications, and credential controls.
- Design integration patterns for Saviynt, GCP IAM, Delinea, authoritative sources, ticketing or approval systems, and downstream applications.
- Define entitlement, ownership, role, service account, NHI taxonomy, and lifecycle models aligned with least privilege and auditability.
- Create solution design documents, architecture diagrams, data flows, interface specifications, security controls, and non-functional requirements.
- Provide design oversight for time-bound group membership, custom GCP role lifecycle, access reviews, and privileged credential governance.
- Review configurations and customizations for scalability, maintainability, security, and alignment with product best practices.
- Facilitate architecture reviews, document decisions and risks, and support customer security, audit, and compliance approvals.
- Guide SIT, security validation, UAT support, production readiness, rollback planning, post-go-live validation, and knowledge transfer.
- Mentor engineering teams and resolve complex cross-platform technical issues.
- Required Technical and Professional Skills
- Saviynt Enterprise Identity Cloud or equivalent IGA architectureGCP IAM, projects, folders, groups, roles, service accounts, and IAM bindings
- Delinea or comparable PAM and credential-vaulting platforms
- Identity lifecycle, access governance, RBAC, least privilege, certifications, and SoD conceptsAPI, connector, workflow, data-model, and cloud security architecture
- Architecture documentation, stakeholder workshops, risk management, and design governance