Principal Security, IAM Architect

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $156.4k - $218.9k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CDW

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1984

💼 Consulting

🏥 Healthcare

📚 Education

💰 Post-IPO Equity on 2015-07

Consulting • Healthcare • Education

CDW is a leading provider of technology solutions, offering a comprehensive range of products and services to address the needs of enterprises, government, healthcare, and education sectors. They specialize in providing IT infrastructure services, managed services, and security solutions. CDW partners with top technology brands to deliver customized solutions that enhance business productivity and performance across various industries. With a strong focus on digital transformation, security, and cloud solutions, CDW supports businesses in navigating the complexities of modern IT environments. Their expertise spans several domains, including digital workspaces, cybersecurity, and enterprise solutions, making CDW a key partner in driving technological advancements.

📋 Description

• Define and own the future-state security and access management architecture for the MyCDW ServiceNow platform. • Lead consolidation of Entra, Okta, and native ServiceNow authentication into a unified identity model. • Architect the SailPoint to Microsoft Entra ID Governance migration and ServiceNow RBAC/access-tier model. • Design access request, approval, certification, and joiner/mover/leaver workflows. • Ensure security and identity architecture meets PCI DSS v4.0.1, SOC 2, and corporate policy requirements. • Establish identity and security governance across ITSM processes and MyCDW. • Define a staged transition separating coworker and customer identity while minimizing disruption. • Partner with principal architects to align identity and security designs with target-state architecture. • Evaluate identity, security, and IGA technologies through benchmarking, proofs of concept, and risk/cost analysis. • Implement security monitoring, threat detection, identity analytics, and platform health insights. • Conduct risk assessments, threat modeling, and design reviews; provide remediation guidance. • Lead, mentor, and set standards for the Managed Services security and IAM engineering team. • Collaborate with development, engineering, infrastructure, compliance, and product stakeholders. • Maintain architecture roadmaps, design decisions, control mappings, and technical specifications. • Resolve complex security and identity issues during design, migration, and operations. • Make cost-effective, risk-based decisions balancing security, budget, and user experience. • Interact with vendors, negotiate contracts, and manage technology relationships. • Track emerging security and identity threats, standards, and industry trends.

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field and 10 years’ experience in IT, including security architecture and IAM, OR 14 years’ experience in IT, security, and IAM. • Deep hands-on expertise in enterprise security and IAM architecture. • Expertise in authentication, authorization, federation (SAML/OAuth/OIDC), SSO, MFA, and privileged access management. • Strong experience with Microsoft Entra ID, Entra ID Governance, and identity governance platforms such as SailPoint. • Expertise in RBAC/ABAC, access certification, and joiner/mover/leaver lifecycle automation. • Knowledge of PCI DSS v4.0.1, SOC 2, and corporate security and hardening standards. • Experience securing SaaS and ITSM platforms; ServiceNow strongly preferred. • Experience or research applying artificial intelligence principles to security, identity analytics, anomaly/threat detection, and AI-agent access governance. • Ability to develop and implement security and identity strategies that reduce risk and cost. • Experience leading project teams architecturally and influencing strategic decisions. • Demonstrated ability to lead security transformation initiatives and manage change. • Extensive understanding of network architecture, security principles, infrastructure management, and cloud security. • Exceptional problem-solving and strategic planning abilities. • Strong communication, collaboration, leadership, influencing, and conflict-resolution skills. • Ability to manage multiple projects in a fast-paced environment. • Proven experience designing and implementing large-scale security and identity solutions. • Extensive experience across applications, data, infrastructure, security, and cloud services. • Relevant certifications such as CISSP, CISM, SailPoint, or Microsoft Identity & Access Administrator (SC-300) are a plus. • Master’s degree is a plus.

🏖️ Benefits

• Annual bonus target of 10% subject to terms and conditions of plan • Benefits package (details provided at https://cdw.benefit-info.com/) • Geographic salary differentials may apply • Professional growth and learning support • Collaborative work environment • AI experimentation and learning culture