Title:  Identity & Access Management Architect III

What You Will Do

Lead the strategy and implementation of enterprise identity architecture across key domains, including Enterprise Identity Fabric, Microsoft Entra, Identity Governance & Administration, Agentic AI Security, Non‑Human Identity Management, and Identity Threat Detection & Response (ITDR). Collaborate with teams across Infrastructure, Enterprise Architecture, Security Operations, Applications, HRIS, and Compliance to develop AI‑secure, scalable patterns, standards, and multi‑year roadmaps that advance Zero Trust principles and support evolving business needs.

• Lead enterprise identity reference architecture across directories (AD/Entra), authentication and authorization, Conditional Access, federation (SAML/OIDC/OAuth), identity lifecycle management, and IGA. Develop and publish architecture principles, security patterns, and guardrails while ensuring alignment with Zero Trust and enterprise standards.
• Develop and maintain a 1–3 year Identity Security roadmap, including AD/Entra modernization, role engineering/RBAC, access reviews, workload and machine identity strategy, and ITDR automation. Prioritize initiatives and monitor KPIs to drive risk reduction and audit readiness.
• Translate business and security requirements into end‑to‑end solution designs spanning AD/Entra, IGA, and ITDR. Produce HLD/LLD documentation, data flow diagrams, trust boundaries, and control mappings. Provide design oversight through build, testing, and deployment, ensuring operational runbooks and SLAs are established.
• Define identity control objectives, metrics, and testing procedures, including joiner/mover/leaver processes, privileged access boundaries, access certification cycles, and passwordless adoption. Partner with Internal Audit and Compliance to ensure alignment with SOX and NIST CSF and support evidence collection.
• Facilitate architecture reviews and lead design workshops with Infrastructure, Cloud, Application, SOC, OT, and HRIS teams. Communicate architectural decisions clearly to both technical and executive audiences and advocate for modern identity practices (e.g., passkeys, B2B/external identities).
• Monitor identity threat landscapes and platform advancements to recommend continuous improvements, deprecations, and optimizations across the enterprise identity ecosystem.
• Perform additional responsibilities as assigned.

What You Bring To Freeport

• Associates Degree and ten (10) years of experience in security systems technologies and ISACA, SANS, ISC (2), or CEH Certification or related security certification OR
• Bachelor’s Degree in Information Systems or related field and eight (8) years of experience in security systems technologies OR
• Bachelor’s Degree in Information Systems or related field and six (6) years of experience in security systems technologies and ISACA, SANS, ISC (2), or CEH Certification or related security certification OR
• Master’s degree in Information Systems or related field and six (6) years of experience in security systems technologies OR
• Master’s Degree in Information Systems or related field and five (5) years of experience in security systems technologies and ISACA, SANS, ISC (2), or CEH Certification or related security certification
• Hands-on experience in areas: Active Directory; Entra Users, Groups, Policy & Access Management; IGA platform etc.
• Knowledge of CyberSecurity Zero Trust, least privilege access,  and compliance frameworks. (e.g., SOX, NIST CSF).
• Expertise in identity lifecycle, federation (SAML/OIDC/OAuth), Conditional Access, MFA/passwordless, and access reviews.
• Understanding of Agentic AI and AI related Security Controls.
• Understanding of workload/machine identity governance (managed identities, service accounts, certificates/secrets).
• Ability to create HLD/LLD, threat models, and control mappings; strong documentation and standards writing.
• Ability to influence architecture decisions across distributed teams and communicate clearly to technical and non-technical stakeholders.
• Partners with Enterprise Architecture, Infrastructure, Cloud, SOC, Application Owners, Business Solutions Architects, HRIS, Internal Audit, and Compliance; provides architectural guidance to engineering teams and consults with business stakeholders.

Preferred Qualifications

• Experience with passkeys/passwordless, Verified ID/external identity, workload CA policies, and identity automation.
• Exposure to SAP/HRIS authoritative data integrations and JML orchestration.
• Certifications: Microsoft Identity/Entra, CISSP, CISM, or relevant IGA/ITDR certifications.