架构师，网络安全，身份安全 - 远程
Architect, Cybersecurity, Identity Security - Remote
工作灵活性：优先考虑居住在东部或中部时区的候选人。
作为身份安全架构师，您将设计和管理企业身份与访问管理解决方案，以保护组织资产并实现对业务系统和应用程序的安全访问。您将成为身份安全的技术权威，并与网络安全、基础设施、云、应用、企业架构、安全运营和业务团队合作，覆盖本地和云环境。
您将负责：
技术职责：
设计和维护企业身份安全架构、标准和参考设计。
制定支持零信任架构和企业数字化转型的身份策略。
构建认证、授权、联合、单点登录（SSO）、多因素认证（MFA）和身份生命周期管理解决方案。
领导IAM项目、云实施和业务应用的架构评审。
设计和管理特权访问管理（PAM）解决方案和特权身份控制。
与基础设施、云工程、企业架构、应用开发和安全运营团队集成身份安全控制。
制定基于角色的访问控制（RBAC）、最小权限、职责分离（SoD）和访问认证的身份治理流程。
进行身份威胁建模、架构风险评估和安全设计评审。
评估新兴身份技术并推荐架构改进。
支持符合NIST CSF、ISO 27001、HIPAA、SOX、FDA网络安全指南和适用法规要求的合规性。
制定架构文档、技术标准、实施指南和操作流程。
领导力与人员管理职责：
为实施身份安全能力的工程团队提供技术领导和指导。
知识与能力：
分析复杂的身份安全挑战，并将发现转化为实际的架构决策。
设计连接安全需求、业务需求和技术能力的企业身份架构。
向技术和业务合作伙伴传达身份架构标准、风险和实施指导。
您需要具备：
必备资格
- 计算机科学、信息科学或相关领域的学士学位
- 5年以上身份安全或相关领域的工作经验
- 精通身份和访问管理（IAM）概念和实践
- 熟悉零信任架构和企业数字转型
- 具备良好的沟通能力和跨团队协作能力
- 熟悉常见的安全标准和法规要求（如NIST CSF、ISO 27001、HIPAA等）
- 有使用身份安全工具和平台的经验（如Azure AD、Okta、Ping Identity等）
查看英文原文
Work Flexibility: RemotePreference will be given to candidates residing in the Eastern or Central time zones.
As an Identity Security Architect, you will design and govern enterprise identity and access management solutions that protect organizational assets while enabling secure access to business systems and applications. You will serve as the technical authority for identity security and partner with cybersecurity, infrastructure, cloud, application, enterprise architecture, security operations, and business teams across on-premises and cloud environments.
What you will do:
Technical Responsibilities:
Design and maintain enterprise identity security architecture, standards, and reference designs.
Develop identity strategies that support Zero Trust Architecture and enterprise digital transformation.
Architect authentication, authorization, federation, single sign-on (SSO), multi-factor authentication (MFA), and identity lifecycle management solutions.
Lead architecture reviews for IAM projects, cloud implementations, and business applications.
Design and govern Privileged Access Management (PAM) solutions and privileged identity controls.
Integrate identity security controls with Infrastructure, Cloud Engineering, Enterprise Architecture, Application Development, and Security Operations teams.
Develop identity governance processes for role-based access control (RBAC), least privilege, segregation of duties (SoD), and access certification.
Conduct identity threat modeling, architecture risk assessments, and security design reviews.
Evaluate emerging identity technologies and recommend architectural improvements.
Support compliance with NIST CSF, ISO 27001, HIPAA, SOX, FDA Cybersecurity Guidance, and applicable regulatory requirements.
Develop architecture documentation, technical standards, implementation guidance, and operating procedures.
Leadership & People Management Responsibilities:
Provide technical leadership and mentorship to engineering teams implementing identity security capabilities.
Knowledge and Capabilities:
Analyze complex identity security challenges and translate findings into practical architecture decisions.
Design enterprise identity architectures that connect security requirements, business needs, and technology capabilities.
Communicate identity architecture standards, risks, and implementation guidance to technical and business partners.
What You Need:
Required Qualifications
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline.
- Minimum 8 years of experience in cybersecurity or identity management.
- Minimum 3 years of experience designing enterprise IAM architectures.
- Experience implementing SSO, MFA, PAM, Identity Governance and Administration (IGA), and directory services.
- Experience with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, CyberArk, Delinea, or similar technologies, including cloud identity security across Azure, AWS, or Google Cloud.
United States of America Pay Ranges:
- USN: $135,600 - $225,900 USD Annual
- US5: $142,400 - $237,200 USD Annual
- US10: $149,200 - $248,500 USD Annual
- US15: $155,900 - $259,800 USD Annual
- US20: $162,700 - $271,100 USD Annual
- US30: $176,300 - $293,700 USD Annual
View the U.S. work location and transparency guide to find the pay range for your location.
Travel Percentage: NoneStryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability.Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.Originally posted on Himalayas