Senior Identity & Cloud Security Architect

This organization has built its reputation on delivering high-stakes, high-trust services where protecting client information is fundamental to how the business operates. As the environment has expanded across cloud platforms and SaaS applications, access patterns have become more complex and less centralized. Identity is not yet fully unified, and that inconsistency is becoming more visible as internal expectations and external scrutiny increase. Leadership is investing now to bring structure, consistency, and control to identity and access across the enterprise. This role exists to connect strategy with execution and elevate identity into a true control plane for the organization.

• Senior, high-visibility role owning identity and cloud security strategy and execution
• Enterprise environment with distributed workforce and heavy SaaS and cloud usage
• High-trust setting with strong expectations around data protection and access control
• Mandate is to build, refine, and elevate identity capabilities

• Own and evolve enterprise identity architecture across cloud and SaaS ecosystems
• Define and implement identity-first security aligned to Zero Trust principles
• Modernize authentication, access control, and privilege management frameworks
• Establish scalable patterns for secure application onboarding and governance
• Lead identity lifecycle strategy including provisioning and access reviews
• Strengthen privileged access, device trust, and conditional access controls
• Identify and remediate gaps across identity and cloud security posture
• Build and standardize security design frameworks and configuration models
• Partner with IT and business teams to embed secure access into workflows
• Support response efforts tied to identity compromise or misuse
• Contribute to audit readiness, client reviews, and regulatory alignment

• Strong foundational tooling in place but lacking full alignment and consistency
• Identity capabilities exist but are not fully unified across platforms
• Executive-level support, budget, and urgency to mature the function
• High collaboration across security, engineering, and business stakeholders
• Expectation to operate both strategically and hands-on

• 8+ years of experience in identity, cloud, and enterprise security environments
• CISSP certification required
• Deep, hands-on expertise with Azure-based identity platforms
• Strong command of modern authentication and federation standards
• Proven ability to design and scale secure identity architectures
• Experience implementing Zero Trust principles in real-world environments
• Background securing SaaS ecosystems and integrating applications securely
• Ability to automate, script, and leverage APIs for operational efficiency
• Strong communication skills across both technical and non-technical stakeholders
• Preference for candidates from commercial or enterprise environments, not government consulting settings

• Compensation range: up to 220000 base, depending on experience
• Hybrid role aligned to the DC metro area
• Search open to candidates in the DC, Philadelphia, and New York metro areas
• Expectation of onsite presence 2 to 3 days per month
• Reports directly into executive security leadership
• Clear growth path tied to broader security architecture and leadership expansion