高级安全解决方案架构师 | IGA/PAM/NHI

Who is Trace3?

Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.

Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!

Trace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco.

Ready to discover the possibilities that live in technology?

Come Join Us!

Street-Smart- Thriving in Dynamic Times

We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.

Juice - The “Stuff” it takes to be a Needle Mover

We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.

Teamwork - Humble, Hungry and Smart

We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.

Job Summary

The Pre-Sales Identity Architect is a senior Identity practitioner and trusted advisor responsible for helping enterprise customers assess current-state capabilities, develop Identity strategies, and architect secure, scalable, and practical solutions.

Working closely with Trace3 sales, technical, and delivery teams, this role leads customer discovery sessions, workshops, assessments, roadmap development, solution architecture, and technical sales activities across Identity and Access Management (IAM) disciplines. The ideal candidate has real-world experience designing, implementing, and operating enterprise Identity solutions and can translate that experience into strategic customer engagements and successful business outcomes.

Primary focus areas include Authentication, Authorization, Identity Providers (IDP), and Identity Governance & Administration (IGA). Exposure to Privileged Access Management (PAM), Non-Human Identity (NHI), and PKI/Certificate Lifecycle Management (CLM) are additionally nice to have.

SUMMARY OF ESSENTIAL JOB FUNCTIONS:

• Provide industry leading consultant services to Trace3 customers.

• Support development of IAM strategy, roadmap, and architecture across key IAM components:

• Authentication

• Authorization

• Identity Governance and Administration (IGA)

• Privileged Access Management (PAM)

• Non-human Identities (NHI)

• Support design and deployment of IAM products and services.

• Support industry standards, regulatory compliance, and customer business requirements.

• Perform systems modeling, simulation, and analysis to identify, analyze, and resolve problems.

• Support the modernization of on-premises identity solutions, or migration to modern, cloud-native offerings.

• Lead IAM pre-sales initiatives around tenant consolidations, identity maturity, and M&A activities

• Provide technical guidance and best practices to customers as needed.

• Collaborate with other departments to develop business cases and go-to-market strategy across other practice areas at Trace3.

• Stay current with industry certifications in Identity and Access Management disciplines.

• Stay current with industry trends and how they might impact tools, training, and support of existing and potential customers.

• Provide leadership, coaching and mentoring to other team members.

• Perform other duties as required or assigned.

Key Responsibilities

Customer Advisory & Presales

• Lead customer discovery sessions, workshops, and Identity assessments.

• Develop Identity strategies, maturity assessments, and transformation roadmaps.

• Serve as a trusted advisor to security leaders, architects, and executive stakeholders.

• Partner with sales teams to identify, qualify, and advance Identity opportunities.

• Present solution recommendations, business cases, and architectural guidance to customers.

• Lead or support proposal development, Statements of Work (SOWs), solution architecture, and technical win strategies.

• Lead or support vendor, platform, and solution evaluations by helping customers compare alternatives, understand tradeoffs, and select technologies that align with their long-term Identity strategy.

Identity Architecture

• Provide strategy and architectural guidance across:

Core Identity (Major) Areas

• Authentication & Authorization

• Okta Workforce Identity Cloud

• Microsoft Entra ID

• Active Directory

• Identity Governance & Administration (IGA)

• Non-Human Identity (NHI)

Adjacent Identity (Minor) Areas

• Service Account & Workload Identity Security

• Privileged Access Management (PAM)

• PKI & Certificate Lifecycle Management (CLM)

• Post-Quantum Cryptography (PQC) Awareness

Practice Development

• Contribute to reusable offerings, workshops, assessments, and reference architectures.

• Support strategic partner relationships and emerging Identity technologies.

• Share industry trends, customer requirements, and market insights.

• Mentor team members and contribute to the growth of the Identity practice.

Required Experience:

• Bachelor's degree or equivalent experience is preferred.

• 6+ years of experience designing, implementing, or architecting Identity and Access Management solutions.

• 3+ years in customer-facing consulting, architecture, or presale role.

• Strong hands-on experience with Okta Workforce Identity Cloud or Entra ID required, including architecture, implementation, and customer advisory experience.

• Strong expertise in at least one of the following: Microsoft Entra ID, Okta, or Identity Governance platforms (SailPoint, Saviynt, etc.).

• Experience leading customer workshops, assessments, and architecture discussions.

• Experience developing Identity strategies, roadmaps, or transformation initiatives.

• Ability to communicate effectively with both executive and technical audiences.

• Strong written, verbal, presentation, and relationship-building skills.

• Demonstrated ability to present architectural recommendations and business value to executive and technical audiences.

Preferred Qualifications:

• CISSP or equivalent security certification.

• Okta certification is strongly preferred; Microsoft Identity, SailPoint, or related certifications are also valued.

• Experience with Non-Human Identity (NHI) and Machine Identity particularly valued; PAM or PKI/CLM experience is also a plus.

• Experience supporting enterprise sales cycles, solution development, and customer advisory engagements.

Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.

Estimated Pay Range

$188,000—$200,000 USD

The Perks

• Comprehensive medical, dental and vision plans for you and your dependents

• 401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability

• Competitive Compensation

• Training and development programs

• Major offices stocked with snacks and beverages

• Collaborative and cool culture

• Work-life balance and generous paid time off

Our Commitment

At the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.

We’re committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, fosters collaboration, boosts teammate satisfaction, and builds a more inclusive culture.

As an equal opportunity employer, Trace3 bases all employment decisions based on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.

Any demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.

If you require a reasonable accommodation to complete the application process or participate in an interview, please email .

***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.

Originally posted on Himalayas