Original job description
Your Opportunity:
Health Shared Services (HSS) - Technology Services has an exciting opportunity for a highly skilled Senior Identity and Access Management (IAM) Cybersecurity Architect to join the Technology Architecture & Solutions (TAS) team. The Senior IAM Cybersecurity Architect will play a key role in strengthening the organization's identity security architecture and cybersecurity posture. This position will provide architectural leadership in protecting enterprise identity services, directories, privileged accounts, authentication mechanisms and access infrastructure against evolving cyber threats. Working across on-premises, public cloud environments, the position will define and evolve identity security architectures, technical controls and reference patterns aligned with enterprise cybersecurity strategies, Zero Trust principles and regulatory requirements. The role will focus on preventing, detecting and responding to identity-based threats while ensuring the security, resilience and recoverability of identity services supporting mission-critical clinical and corporate operations. The successful candidate will bring extensive experience in identity security and cybersecurity architecture, strong technical knowledge of enterprise identity platforms and security controls, and the ability to engage senior leaders, architects, engineers, security operations and operational teams to translate cybersecurity requirements into practical and sustainable solutions. The TAS team provides architecture and engineering services across AHS Technology Services, including End User Devices, Unified Communications (Voice/Video), Network, Compute, Storage, Database, Identity and Access Management, Cloud, AI, Security Technical Controls and Facilities Technology, foundationally supporting clinical and corporate service delivery.
Description:
Senior IAM Cybersecurity Architect is responsible for: Identity security strategy. Define identity security architecture, standards and roadmap; assess maturity, threats and gaps; set priorities. Security controls and Zero Trust. Define controls based on Zero Trust, least privilege and defence-in-depth. Establish patterns for authentication, authorization, federation, SSO, MFA, passwordless and conditional access. Secure human and non-human identities, including service, application and workload accounts, credentials, certificates and secrets. Hybrid identity and directories. Architect Active Directory, Entra ID and hybrid identity, including directory sync, trust and app integration. Guide directory hardening, administrative isolation, identity tiering and protection from credential theft, privilege escalation and lateral movement. Privileged access and threat protection. Architect PAM, including credential vaulting, session monitoring, JIT access, privileged workstations and third-party access. Define identity threat models, attack-path analysis and controls against identity compromise and privilege misuse. Define ITDR and SIEM/SOAR integration for identity threat detection and response. Cyber recovery and resilience. Define identity recovery architecture, protected backups, isolated recovery, emergency administration, redundancy and high availability; ensure continuity and DR for critical services. Assurance and leadership. Review IAM architecture and controls; guide remediation of vulnerabilities, audit findings and control gaps. Integrate cybersecurity, privacy and regulatory requirements; ensure auditability, risk management and exception processes. Promote security automation and Identity-as-Code/IaC using scripts and APIs. Guide IAM and delivery teams; communicate architecture decisions and risks to leaders.
Please enter information in this field.
More about this job
Responsibilities
Define and lead the enterprise identity security architecture, standards, controls, and roadmap across on-premises and cloud environments, including directories, authentication, privileged access, and non-human identities. Strengthen identity threat detection, incident response, recovery, and resilience while guiding teams, addressing control gaps, and communicating architecture decisions and risks to leaders.
Requirements
The role calls for extensive experience in identity security and cybersecurity architecture, strong technical knowledge of enterprise identity platforms and security controls, and the ability to work across cloud and on-premises environments. The successful candidate must be able to translate cybersecurity, Zero Trust, privacy, and regulatory requirements into practical solutions and engage senior leaders, architects, engineers, security operations, and operational teams.
Skills
- Identity And Access Management
- Cybersecurity Architecture
- Identity Security
- Zero Trust
- Active Directory
- Microsoft Entra ID
- Privileged Access Management
- Authentication And Authorization
- Federation And Single Sign-On
- Multi-Factor Authentication
- Directory Hardening
- Identity Threat Detection And Response
- SIEM/SOAR Integration
- Cyber Recovery And Resilience
- Security Automation
- Identity-As-Code
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Healthcare
- Management & Leadership
Keywords
- Identity And Access Management
- Cybersecurity Architecture
- Identity Security
- Zero Trust
- Least Privilege
- Defence-In-Depth
- Active Directory
- Microsoft Entra ID
- Hybrid Identity
- Directory Synchronization
- Authentication
- Authorization
- Federation
- Single Sign-On
- Multi-Factor Authentication
- Passwordless Authentication
- Conditional Access
- Privileged Access Management
- Credential Vaulting
- Just-In-Time Access
- Privileged Workstations
- Identity Threat Detection And Response
- SIEM
- SOAR
- Attack-Path Analysis
- Identity Recovery
- High Availability
- Disaster Recovery
- Identity-As-Code
- Infrastructure As Code
