identity access management architect

Nask Incorporated

<div><div><b>Lead Architect &ndash; Identity, Credential, and Access Management (ICAM)</b></div>
<div><b>Location: Beavercreek, OH</b><br>
<b>Minimum Clearance Required to Start</b>: TS to apply</div>
<div></div><div><b>More about your role:</b><br>
At NASK, we&rsquo;re growing, building great teams, and doing exciting work. You can be part of an entrepreneurial environment rich in opportunity and reward &ndash; all while helping us deliver critical, mission-focused solutions for the Intelligence and Military Communities. NASK provides the National Air and Space Intelligence Center (NASIC) with support for the research, development, and sustainment of new and existing hardware, systems, and software capabilities that enable scientific and technical intelligence production for the United States military services and national-level intelligence efforts through 2033. We are a delivery-oriented, fast-growing company, and we invite you to join our talented team.</div>
<div></div><div><div><b>Position Overview</b></div>
<div>NASK is seeking a Lead Architect for Identity, Credential, and Access Management (ICAM) to lead the design, integration, and modernization of enterprise identity solutions supporting mission-critical systems within NASIC. This role serves as the technical lead for AFISRE and drives Zero Trust identity capabilities across NASIC and the AF enterprise in support of Air Force Digital Transformation initiatives. The ideal candidate will bring deep expertise in identity security, cloud-native architectures, and DevSecOps, with the ability to lead both technical teams and customer engagements.</div>
</div>
<div></div><div><b>Key Responsibilities:</b></div>
<ul><li>Serve as the enterprise technical lead for ICAM architecture, engineering, and integration</li>
<li>Design and Execute the ICAM strategy, roadmap, and modernization initiatives</li>
<li>Architect and implement Zero Trust identity and access management solutions</li>
<li>Design authentication, authorization, federation, and identity governance capabilities</li>
<li>Integrate ICAM solutions across multi-domain, cloud, and mission system environments</li>
<li>Provide subject matter expertise in privileged access management (PAM) and identity governance</li>
<li>Ensure compliance with DoD, NIST, and Intelligence Community standards and frameworks</li>
<li>Lead and mentor engineering teams, architects, and developers</li>
<li>Engage directly with government stakeholders and mission partners</li>
<li>Support secure identity integration across data platforms, applications, and enterprise services</li>
<li>Lead customer engagement</li>
</ul><div>Any other tasks closely associated with the performance of duties listed above</div>
<div></div><div><b>Required Qualification:</b></div>
<ul><li>Active Top Secret/SCI (TS/SCI) clearance</li>
<li>Bachelor&rsquo;s degree in a STEM field with 15+ years of relevant experience</li>
<li>Deep understanding of Zero Trust, Identity-as-a-Service (IDaaS), and modern access control models</li>
<li>Extensive experience designing and implementing enterprise ICAM solutions and PKI</li>
<li>Strong knowledge of Active Directory and enterprise identity services</li>
<li>Experience with authentication and federation protocols (SAML, OAuth 2.0, OpenID Connect)</li>
<li>Proven experience architecting cloud-based environments (AWS, Azure)</li>
<li>Hands-on experience with containerization and orchestration (Docker, Kubernetes)</li>
<li>Experience implementing DevSecOps practices and CI/CD pipelines</li>
<li>Proficiency in Linux/Unix operating systems</li>
<li>Development experience in Golang and Python</li>
<li>Experience with relational databases and SQL (MariaDB, PostgreSQL)</li>
<li>Experience working in Agile development environments</li>
<li>Strong written and verbal communication skills</li>
<li>Ability to operate effectively in a secure, in-person/closed-area environment</li>
</ul><div><b>Preferred Qualifications</b></div>
<ul><li>Experience with service mesh and identity platforms (Istio, Keycloak)</li>
<li>Demonstrated expertise in cloud-native and DevSecOps ecosystems, including Helm, YAML, GitLab, and ArgoCD</li>
<li>Strong knowledge of Active Directory</li>
<li>Experience with SAML, OAuth 2.0, OpenID Connect</li>
<li>Experience implementing observability and monitoring solutions (Grafana, Prometheus)</li>
<li>Familiarity with Open Policy Agent (OPA) and policy-as-code frameworks</li>
<li>Web development experience using React, TypeScript, Angular, with a focus on UI/UX</li>
<li>Experience architecting and developing ICAM / Identity Security systems and software</li>
<li>Familiarity with cross-domain solutions and secure data transfer in classified environments</li>
<li>Deep knowledge of Zero Trust frameworks, including:</li>
<li>NIST SP 800-207</li>
<li>NIST SP 800-63-4</li>
<li>DoD Zero Trust Reference Architecture (v2.0)</li>
<li>Relevant certifications such as CISSP, CISM, CASP+, Security+</li>
<li>Agile certifications (CSM, CSPO, SAFe)</li>
<li>Experience supporting large IDIQ contracts and federal acquisition processes</li>
<li>Experience supporting DoD and/or Intelligence Community (IC) programs</li>
</ul><div><b>Who we are:</b></div>
<div>Our people are the core of who we are and what we do. NASK has two decades of experience delivering innovative solutions to the tough technical challenges facing our partners in the Intelligence and Military Communities. Our subject matter experts mentor junior developers and analysts, bringing together the wisdom of real-world experience with fresh approaches to solve the toughest mission problems.</div>
<div></div><div><b>Benefits:</b><br>
At NASK, our employees are the backbone of our company, so we provide unsurpassed benefits and work-life balance. Employees are provided with individual offices and collaboration spaces to foster individual and team success. We have a casual yet professional work environment &ndash; Employees work hard, and NASK offers a competitive benefits package that equates to 50% on top of your annual base salary. This is split between a tax-qualified profit-sharing retirement plan that NASK contributes to (up to allowable IRS limits) and a cafeteria plan for benefits. For a comprehensive overview of our benefits, visit the benefits tab under our careers page: https://nask.world/company/careers/</div>
<div></div><div><b>Compensation:</b><br>
NASK Incorporated considers several factors when extending an offer, including but not limited to the role and responsibilities, work experience, education, training, certifications, geographic location, and market data. These are general guidelines and not a guarantee of compensation or salary.<br>
<b><i>Please be aware that many of our positions require the ability to obtain or maintain a U.S security clearance which requires U.S citizenship</i></b><i>.</i></div>
<div></div><div><b>EEO Statement:</b><br>
**NASK provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, transfers, leaves of absence, as well as compensation and training.</div>
<div></div><div><b>MC08</b></div></div><div></div>

Lead Architect – Identity, Credential, and Access Management (ICAM)

Scotiabank

<p></p><div><p>Requisition ID: 251549<br>
<br>
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.</p><p></p><p><b><br>
Global Banking and Markets</b></p><p></p><p><br>
Global Banking and Markets (GBM) is a leading Canadian Capital Markets and Investment Banking business with a growing platform in the US and Latin America, operating globally for over 100 years. Scotiabank&rsquo;s strong U.S. presence provides our clients an important bridge to this key global market for trade and investment flows across the Americas and the world.</p><p></p><p><br>
Global Banking &amp; Markets provides a full range of investment banking, credit and risk management products and services relevant to the financing and strategic development needs of our clients. Our products include debt and equity financing, mergers &amp; acquisitions, corporate banking, institutional equity sales, trading and research, fixed income products, derivatives, energy, foreign exchange and precious &amp; metals. We also cross-sell the full range of wholesale products and services offered by the Scotiabank Group.</p><p></p><p><br>
Be part of an innovative, Global Capital Markets and Investment Banking business with a unique geographic footprint that puts capital to work for our clients across industries! We work together to drive ambition for every future!</p><p></p><p><b><br>
Purpose</b></p><p></p><p><br>
We are seeking an IAM Architect to join Information Security&rsquo;s Identity Access Management Team. The ideal candidate has strong leadership skills and in-depth knowledge of the IAM security domain, with a strong focus of authentication technologies, industry standards, and emerging protocols. Candidate to deliver Scotiabank&rsquo;s next generation IAM platform; in alignment with long term product roadmap, as part of a large-scale transformation. The Identify Access Management (IAM) Architect will work with business channels and product team to understand the challenges facing them, provide solutions to these challenges and recommend architecture and design to bring modern capabilities to various IAM platforms</p><p></p><p><b><br>
What You'll Do</b></p><p></p><ul><li><br>
Be responsible for the architecture and design of new features/capabilities that Scotiabank is looking to introduce into the IAM platform (Microsoft Entra ID / ForgeRock / Ping)</li><li>Design the technical roadmap to support user identity and application migration from on-premises Identity Provider to Microsoft Entra ID platform.</li><li>Provide subject matter expertise surrounding the various security controls (MFA, Conditional Access Policies, Intune Device Management) within Microsoft platform.</li><li>Configure and validate architectural designs within the Entra Platform to verify solutions and new capabilities proposed for adoption</li><li>Review the business requirements (the &ldquo;what&rdquo;) provided by the IAM Product team and provide the overall architectural design (the &ldquo;how&rdquo;) to the IAM Engineering team to build into the IAM service.</li><li>Provide required design artifacts to key stakeholders which clearly outlines the solution, components involved, key decisions, and time and cost estimates</li><li>Closely collaborate with IAM Engineering partners in all aspects of the design and ensure alignment and synergy regarding proposed solution.</li><li>Evaluate new authentication capabilities introduced into the ever-changing IAM landscape and account for what is applicable into proposed designs (short-term and long-term)</li><li>Partner with various cross functional architect teams (IAM, security, business channel, fraud) to solidify design approach which aligns with best practices and strategic direction of the platform</li><li>Collaborate with stakeholders across the Bank - technology, security architecture, security advisory, fraud, compliance and business channel teams &ndash; to provide enterprise grade solutions which meet the business and security requirements</li><li>Represent the IAM Architecture team on various governance boards but providing both expertise and the required artifacts necessary to ensure stakeholder approval</li><li>Design based on strong CIAM expertise that aligns with industry standards (FIDO, OIDC, OAUTH), best practices (MFA, NIST 800-63B) and a forward-looking mentality (Passkeys, VCs, DIDs)</li></ul><p></p><p><b><br>
What You&rsquo;ll Bring</b></p><div><br>
Requirements:<br>
<ul><li>10+ years in IAM space with 3+ years in an Architect Role.</li><li>5+ years of experience working within CIAM space (ForgeRock, Okta, Ping Identity, Microsoft Entra ID, etc.)</li><li>3+ years of hands-on experience with Microsoft Entra ID platform</li><li>Strong understanding of various MFA capabilities in Microsoft Entra ID platform and tools/features to assist in adoption</li><li>Experience developing and documenting CIAM directives, standards and policies.</li><li>Experience with designing and implementing authentication and credential management flows based on channel requirements.</li><li>Experience in scoping, sizing and prioritizing solutions for a project.</li></ul></div><p></p><div><br>
Nice to Haves:<br>
<ul><li>Knowledge of project finance or previous experience working within Banking Sector.</li><li>Experience of preparation of presentation decks and presenting to senior leadership.</li><li>Experience with Azure domain joined or hybrid workstation configurations</li><li>Experience with Java based programming languages (Java, JavaScript, NodeJS)</li></ul></div><p></p><p><b><br>
Interested?</b></p><p><br>
If your experience is closely related but doesn&rsquo;t align perfectly with every qualification, we do encourage you to apply - you might be the right candidate for this or other roles at Scotiabank!</p><p></p><p><br>
At Scotiabank, every employee is empowered to reach their fullest potential, respected for who they are and, embraced for their differences. That&rsquo;s why we work to grow and diversify talent and engage employees in a performance-oriented culture.</p><p><b><br>
What's in it for you?</b></p><p></p><p><br>
Scotiabank wants you to be able to bring your best self to work &ndash; and life, every day. With a focus on holistic well-being, our many flexible benefit programs are designed to help support your unique family, financial, physical, mental, and social health needs.</p><p></p><p><br>
Location(s): United States : Texas : Dallas<br>
<br>
Scotiabank is a leading bank in the Americas. Guided by our purpose: &quot;for every future&quot;, we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.
<br>
<br>
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.</p></div>

IAM Architect (Entra)

BEAD Architects & Engineers

<p><i><b>We are accepting online applications only! </b></i></p><p><i><b>Please send your detailed CV here in indeed and we will contact shorlisted candidates only!</b></i></p><p><b>Company Description:</b></p><p><b>BEAD </b>Architects &amp; Engineers is a progressive and dynamic design firm that provides the entire value-chain from cutting edge Architecture and Urban Planning to providing Structural &amp; MEP Design services through its affiliated companies. Being a contemporary oriented and research-based design firm, BEAD have differentiated itself from the majority of the other regional firms, adding a valuable measure of credibility to its design services.</p><p>As architects, designers and engineers from BEAD participate in development projects involving research-based architectural design and urban planning, they are able to work with master developers, local agencies, municipal officials and professionals in the field. The most rewarding aspect of our active outreach approach is that we learn how to use progressive design methodology as a tool to advance and negotiate intelligent design solutions to serve and promote your development criteria.</p><p>At our studio, multiple areas are sought so design, planning and scholarly research go hand in hand. As a matter of fact, a very important difference in BEAD doing the service from other local design firms is the efforts we put in complimenting design tasks with a thorough research effort whether the latter goes into up-to-date design theories, building materials or new construction technologies.</p><p>It is by contradiction to policies of most of the practicing consultancy firms in the region, BEAD approaches the services of design and architecture as a sacred profession rather than a commercial business.</p><p>We currently operate out of our Abu Dhabi base, a decent environment of 500 sqm modern offices and employ 35 high caliber professionals.</p><p><b>Responsobilities:</b></p><p>1. Liaise and interact with the Municipality, and other various projects related authorities ADM, DMT, WRM, ADCD, ADDC/ TAQA, EAD, UPC, Estidama, DOT, Zonescorp, Master Developers, etc.</p><p>2. Prepare, submit and maintain necessary records, documentation and follow - up on all legal documentation as required by various appropriate Authorities and developers.</p><p>3. Review the design drawings, ensure compliance with authorities&rsquo; requirements for Submission, application and renewal of various NOCs, Approvals, and Building permit.</p><p>4. Remain updated regarding the amendments in all the concerned bodies policies and regulations, and providing necessary support, assistance and awareness to all concerned, from time to time.</p><p>5. Attend Authorities workshops for new regulation and new systems of application to building permit.</p><p>6. Follow up project deliverables and progress of design work with Design team.</p><p>7. Guide the team of Architects for Authorities design regulation, codes of different department and applied on design.</p><p>8. Lead the design work as required ensuring project objectives are met, design instructions are implemented and delivery is achieved within the set time.</p><p>9. Follow up and assist the Supervision team for all submissions during the Construction Phase up to issuance of the Building Completion Certificate.</p><p>10. Coordinate and develop responses to review comments and find solution to acquire approvals from different authorities &amp; developers.</p><p>11. Assist in improving and consolidating the company's relations with various authorities related to project.</p><p>12. Assure the correctness, accuracy and complete multi-disciplinary coordination of the design documentation prepared by the assigned team.</p><p>13. Coordinate with Third Party Firms &amp; Companies like (Soil Investigation Specialist, Traffic consultant, ADCD consultant, etc. who are assigned by BEAD to develop, review the drawings, meet the regulation and get the approval.</p><p>14. Attend various meetings with Authorities Engineers, developers, Owners &amp; contractors for drawings discussion and submission of different stage.</p><p>15. Assist in the preparation of concept design, building programs &amp; costing for new project.</p><p>16. Assist the process of the Engineers License Card.</p><p>17. Assist the process of BEAD&rsquo;s Classification Certificate, ISO, ICV, Civil Defense Certificate, and other authorities&rsquo; certificates.</p><p><b>Knowledge, Skills &amp; Abilities</b>:</p><ul><li>Very Good understanding of all requirements of Building Design, Execution of civil works, construction activities and installations.</li><li>Good understanding of the roles and responsibilities of the Consultant&rsquo;s Role, as well as the general industry requirements and procedures.</li><li>Demonstrate creativity, dedication, and mature professional judgment in anticipating and solving unprecedented problems.</li><li>Good experience in project planning, management, scheduling and sequencing of Permitting activities.</li></ul><p><b>Qualification &amp; Experience:</b></p><ul><li>Bachelors' degree in Arch. or Civil Engineering or any relevant engineering discipline.</li><li>Minimum 5 years&rsquo; experience in the role of AOR, liaising and dealing with the approval process for all types of projects with relevant statutory authorities / stakeholders in the UAE and specifically in Abu Dhabi Emirate.</li><li>Have crystal clear understanding of Authority processes, procedures and policies and ensure that these are adhered to during the design submission and review process</li><li>Multi bilingual; fluent in English language, reading and writing, is a must.</li><li>Very good knowledge of contractual clauses and applications in construction as well as FIDIC contracts.</li><li>Very good knowledge of technical correspondence, writing and computer applications related to the industry.</li><li>Having a PMP Certificate is an advantage.</li><li>Well versed with IT and related design software as well as web-based applications.</li></ul><p>Job Type: Full-time</p><p>Pay: AED4,000.00 - AED5,000.00 per month</p><p>Experience:</p><ul><li>Authority Liason Architect: 5 years (Required)</li></ul><p>License/Certification:</p><ul><li>Engineers Licence  from Abu Dhabi Municipality (Required)</li></ul><p>Work Location: In person</p>

Authority Liason Architect

Guidehouse

<div><p>Job Family:</p>
Cyber Consulting<p><br>
Travel Required:</p>
Up to 10%<p><br>
Clearance Required:</p>
Ability to Obtain Public Trust<p>
What You Will Do:</p><div><p>
The IAM Engineer will be responsible for designing, implementing, and supporting enterprise Identity and Access Management solutions that protect systems, applications, and data. Bridge security, infrastructure, and business operations to enforce least‑privilege access, automate identity lifecycle processes, and support compliance requirements.</p><p>
IAM Engineers typically work across identity governance, access management (SSO/MFA), and privileged access management (PAM) platforms, supporting both on‑premises and cloud environments. Play a critical role in improving security posture, audit readiness, and user experience through automation and standardized access controls.</p><p><br>
What You Will Need:</p></div><ul><li>
US Citizenship is required</li><li>
Bachelor's Degree in Information Technology, Computer Science, Cybersecurity or related field.</li><li>
Minimum of SIX (6) years of relevant experience, with a minimum of THREE (3) years of experience with Identity and Credential Managment</li><li>
Proficiency with SailPoint, Okta, myID, or other IAM tools</li><li>
Strong understanding of stakeholder requirements and expectations, system architecture, infrastructure build and documentation, configuration and deployment, as well as existing and emerging federal policy including HSPD-12 and NIST documents.</li><li>
Recent experience with deployment of identity and credential management solutions; knowledge of federal cybersecurity and zero trust policies, requirements and standards.</li></ul><p><br>
What Would Be Nice To Have:</p><ul><li>
An ACTIVE and CURRENT SECRET federal or DOD security clearance</li></ul>
The annual salary range for this position is $113,000.00-$188,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.<p><br>
What We Offer:</p><p>
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.</p><p>
Benefits include:</p><ul><li><p>
Medical, Rx, Dental &amp; Vision Insurance</p></li><li><p>
Personal and Family Sick Time &amp; Company Paid Holidays</p></li><li><p>
Position may be eligible for a discretionary variable incentive bonus</p></li><li><p>
Parental Leave and Adoption Assistance</p></li><li><p>
401(k) Retirement Plan</p></li><li><p>
Basic Life &amp; Supplemental Life</p></li><li><p>
Health Savings Account, Dental/Vision &amp; Dependent Care Flexible Spending Accounts</p></li><li><p>
Short-Term &amp; Long-Term Disability</p></li><li><p>
Student Loan PayDown</p></li><li><p>
Tuition Reimbursement, Personal Development &amp; Learning Opportunities</p></li><li><p>
Skills Development &amp; Certifications</p></li><li><p>
Employee Referral Program</p></li><li><p>
Corporate Sponsored Events &amp; Community Outreach</p></li><li><p>
Emergency Back-Up Childcare Program</p></li><li><p>
Mobility Stipend</p></li></ul><p>
About Guidehouse</p><p>
Guidehouse is an Equal Opportunity Employer&ndash;Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.</p><p>
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.</p><p>
If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.</p><p>
All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.</p><p>
If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse&rsquo;s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant&rsquo;s dealings with unauthorized third parties.</p><p>
Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.</p></div>

Identity and Access Management (IAM) Engineer

Cone Health

The Identity and Access Management Engineer - Intermediate is technically proficient at managing the Identity and Access Mgmt (IAM) system service. They have extensive knowledge about how IAM system enables advanced User Lifecycle Management scenarios involving mobile devices, security policy frameworks, supported SSO options, and advanced directory integration for cloud and on-premises access. Engineers use the IAM System Policy framework to control user access, understand how to map identity attributes and data transformations using Universal Directory, and troubleshoot issues.Essential Job Function
<br><ul>
<li>Develop, implement and maintain IAM system solutions.</li>
<li>Implement and manage Single Sign-On (SSO), Multi-Factor Authentication (MFA), and User Provisioning across various platforms and systems.</li>
<li>Integration management with ServiceNow.</li>
<li>Develop and maintain technical documentation related to IAM System configurations and workflows.</li>
<li>Provide technical guidance and training to other team members and stakeholders on IAM System solutions and IAM best practices.</li>
<li>Assist with Active Directory management and integration, including user and group management, policy configuration and troubleshooting.</li>
<li>Performs other duties as assigned.</li>
</ul>
Education
<br><ul>
<li>Required: Bachelor's Degree andor equivalent experience (10 years experience in IT with 5 years in IT Security is needed for equivalent experience)</li>
</ul>
Experience
<br><ul>
<li>Required: 5 years</li>
</ul>
LicensureCertificationListing
<br><ul>
<li>Required: Okta Administrator (current IAM system) or equivalent Obtain within 12 months.</li>
</ul>
"

Identity and Access Management Engineer Intermediate

GEICO

<div><p><b>At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.</b></p><p><b>
Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive through relentless innovation to exceed our customers&rsquo; expectations while making a real impact for our company through our shared purpose.</b></p><p></p><p><b>
When you join our company, we want you to feel valued, supported and proud to work here. That&rsquo;s why we offer The GEICO Pledge: Great Company, Great Culture, Great Rewards and Great Careers.</b></p><p></p><div><div><p><b>
Position Summary</b></p></div><div><p>
GEICO is seeking an experienced Engineer to play a pivotal role in ensuring the security and efficiency of our digital infrastructure. The ideal Identity Governance Administration Engineer proactively and holistically leads and supports Identity Governance activities that guide the design, development, and security of Identities in the cloud and on-prem. You will participate in the resolution of complex problems, facilitate the implementation of solutions and improvements, and collaborate across teams to promote GEICO&rsquo;s vision.</p></div><div><p><b><br>
Position description</b></p></div><div><p>
Our Senior Engineer is a key member of the engineering staff, working across the organization to provide friction-less experience for our customers and maintain the highest standards of compliance, protection and availability. You will be part of a team that thrives and succeeds in delivering high quality technology products and services in a hyper-growth environment where priorities shift quickly. The ideal candidate has broad and deep technical knowledge of Identity Lifecycle and Directory Services solutions that ensure secure authorization to GEICO&rsquo;s data assets.</p></div><div><p><b><br>
Position Responsibilities</b></p></div><div><p>
As a Senior Engineer, you will:</p></div><div><ul><li><p>
Scope, design, and build scalable, resilient Identity Governance solutions</p></li></ul></div><div><ul><li><p>
Implement Identity and Access Management requirements, such as SOD, RBAC, JIT, etc.</p></li></ul></div><div><ul><li><p>
Engage in cross-functional collaboration throughout the entire project lifecycle</p></li></ul></div><div><ul><li><p>
Participate in design sessions and technology reviews with peers to elevate the quality of engineering across the organization</p></li></ul></div><div><ul><li><p>
Perform routine operational tasks to ensure availability while maintaining least privilege, privileged access management, JIT, and Zero Trust</p></li></ul></div><div><ul><li><p>
Consistently share best practices and improve processes within and across teams</p></li></ul></div><div><ul><li><p>
Develop and maintain professional level system design, processes, and program documentation for Identity and Access Management</p></li></ul></div><div><ul><li><p>
Support a team environment that fosters innovation, diversity, and inclusion</p></li></ul></div><div><ul><li><p>
Stay at the forefront of emerging identity trends, technologies, and best practices, and apply this knowledge to enhance GEICO&rsquo;s data protection strategies</p></li></ul></div><div><ul><li><p>
Provide technical guidance and mentorship to the team, fostering a culture of innovation, collaboration, and continuous improvements</p></li></ul></div><div><ul><li><p>
Work closely with cross-functional teams&mdash;such as security, compliance, and application groups&mdash;to facilitate smooth integration and ensure solutions are aligned with organizational objectives.</p></li></ul></div><div><ul><li><p>
Build resilient and scalable architecture, driving innovation and cost efficiency</p></li></ul></div><div><p><b><br>
Qualifications</b></p></div><div><ul><li><p>
Experience with identity governance platforms such as Sailpoint, Saviynt, or Okta, including identity lifecycle management, access certification and entitlement management</p></li></ul></div></div><div><div><ul><li><p>
Experience with the implementation of identify lifecycle processes, such as provisioning, de-provisioning and access reviews</p></li></ul></div><div><ul><li><p>
Experience developing workflows for joiner, mover and leaver scenarios and automating identity tasks</p></li></ul></div><div><ul><li><p>
Experience in security protocols and products: Understanding of Active Directory, Kerberos, LDAP, SAML, OAuth, and OIDC</p></li></ul></div><div><ul><li><p>
Experience integrating identity governance platforms with systems such as ServiceNow, Workday, Oracle, and cloud platforms, including AWS and Azure</p></li></ul></div><div><ul><li><p>
Fluency in DevOps Concepts, Cloud Architecture, and the Software Development Lifecycle</p></li></ul></div><div><ul><li><p>
Knowledge of developer tooling across the software development life cycle (task management, source code, building, deployment, operations, real-time communication)</p></li></ul></div><div><ul><li><p>
Experience with micro-services oriented architecture and extensible REST APIs</p></li></ul></div><div><ul><li><p>
Fluency and specialization with at least one modern language such as Java, Go, or Python</p></li></ul></div><div><ul><li><p>
Proficiency in scripting languages such as PowerShell, Perl, or Bash</p></li></ul></div><div><ul><li><p>
Strong problem-solving abilities and a proactive approach to identifying and mitigating security risks and vulnerabilities</p></li></ul></div><div><ul><li><p>
Excellent communication skills, able to communicate complete technical concepts to technical and non-technical stakeholders</p></li></ul></div><div><p><b><br>
Experience</b></p></div><div><ul><li><p>
4+ years of experience in developing Identity Governance and Access Management solutions for large enterprises at scale</p></li></ul></div><div><ul><li><p>
3+ years of experience with architecture and design</p></li></ul></div><div><ul><li><p>
3+ years of experience with AWS, GCP, Azure, or another cloud service</p></li></ul></div><div><ul><li><p>
2+ years of experience in open-source frameworks is desired</p></li></ul></div><p></p><div><p><b>
Education</b></p></div><div><ul><li><p>
Bachelor&rsquo;s degree in computer science, Information Systems, or equivalent education or work experience</p></li></ul></div></div><p></p><p><b><br>
Annual Salary</b></p>
$105,000.00 - $215,000.00<p>
The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include, but are not limited to, the scope and responsibilities of the role, the selected candidate&rsquo;s work experience, education and training, the work location as well as market and business considerations.</p><br>
<p></p>
GEICO will consider sponsoring a new qualified applicant for employment authorization for this position.<p></p><p><b><br>
The GEICO Pledge:</b></p><p></p><p><b>
Great Company:</b> At GEICO, we help our customers through life&rsquo;s twists and turns. Our mission is to protect people when they need it most and we&rsquo;re constantly evolving to stay ahead of their needs.</p><p>
We&rsquo;re an iconic brand that thrives on innovation, exceeding our customers&rsquo; expectations and enabling our collective success. From day one, you&rsquo;ll take on exciting challenges that help you grow and collaborate with dynamic teams who want to make a positive impact on people&rsquo;s lives.</p><p></p><p><b>
Great Careers:</b> We offer a career where you can learn, grow, and thrive through personalized development programs, created with your career &ndash; and your potential &ndash; in mind. You&rsquo;ll have access to industry leading training, certification assistance, career mentorship and coaching with supportive leaders at all levels.</p><p></p><p><b>
Great Culture:</b> We foster an inclusive culture of shared success, rooted in integrity, a bias for action and a winning mindset. Grounded by our core values, we have an an established culture of caring, inclusion, and belonging, that values different perspectives. Our teams are led by dynamic, multi-faceted teams led by supportive leaders, driven by performance excellence and unified under a shared purpose.</p><p>
As part of our culture, we also offer employee engagement and recognition programs that reward the positive impact our work makes on the lives of our customers.</p><p></p><p><b>
Great Rewards:</b> We offer compensation and benefits built to enhance your physical well-being, mental and emotional health and financial future.</p><ul><li>
Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family&rsquo;s overall well-being.</li><li>
Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.</li><li>
Access to additional benefits like mental healthcare as well as fertility and adoption assistance.</li><li>
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.</li></ul><p></p><p>
The equal employment opportunity policy of the GEICO Companies provides for a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religious creed, national origin, ancestry, age, gender, pregnancy, sexual orientation, gender identity, marital status, familial status, disability or genetic information, in compliance with applicable federal, state and local law. GEICO hires and promotes individuals solely on the basis of their qualifications for the job to be filled.</p><p></p><p>
GEICO reasonably accommodates qualified individuals with disabilities to enable them to receive equal employment opportunity and/or perform the essential functions of the job, unless the accommodation would impose an undue hardship to the Company. This applies to all applicants and associates. GEICO also provides a work environment in which each associate is able to be productive and work to the best of their ability. We do not condone or tolerate an atmosphere of intimidation or harassment. We expect and require the cooperation of all associates in maintaining an atmosphere free from discrimination and harassment with mutual respect by and for all associates and applicants.</p></div>

Senior Engineer, Identity and Access Management

Jefferies LLC

<div><p>We are seeking a highly driven and business‑aligned <b>Identity BISO / Business Identity Officer (BIO) </b>to serve as a key leader for Jefferies&rsquo; <b>Segregation of Duties (SoD) Initiative </b>and broader identity governance program. This role partners closely with business units, application teams, technology owners, and control functions to ensure SoD risks are identified, assessed, remediated, and prevented as part of our Identity &amp; Access Management strategy.
</p><p>This position exists at the intersection of <b>identity security </b>, <b>risk management </b>, and <b>business enablement </b>. The Identity BISO/BIO ensures our identity controls&mdash;including SoD, role governance, access governance, and certification processes&mdash;are effectively adopted across the enterprise. The role strengthens governance, drives cross‑functional alignment, and advances the identity security roadmap in collaboration with the IAM leadership team.<br>
</p><div></div><p><b>Key Responsibilities
</b></p><p><b>1. SoD Program Leadership
</b></p><ul><li>Lead the day‑to‑day execution of the enterprise Segregation of Duties (SoD) initiative, including risk assessment, policy enforcement, and remediation tracking.
</li><li>Partner with business owners, IT application teams, and control partners to define, validate, and refine SoD rulesets and conflict matrices.
</li><li>Facilitate prioritization of SoD issues and deliver regular reporting to senior stakeholders, including dashboards and KPI tracking.
</li></ul><p><b>2. Business Partnership &amp; Stakeholder Engagement
</b></p><ul><li>Act as the primary liaison between Global Information Security and assigned business units, understanding their processes, applications, and risk landscape.
</li><li>Conduct workshops, working sessions, and recurring governance meetings with business and IT teams (e.g., SOD Weekly Management Connect) to drive alignment and resolve issues.
</li><li>Communicate program updates, risks, and requirements to senior leaders in a clear and actionable manner.
</li></ul><p><b>3. Identity Governance &amp; Control Execution
</b></p><ul><li>Collaborate with application owners to ensure appropriate role design, access certifications, and control implementation that reduce SoD violations.
</li><li>Support annual and ongoing certification cycles, partnering with business and technology teams (e.g., 2026 Certification Process sessions) to ensure compliant execution.
</li><li>Work with audit, compliance, and risk teams to support assessments and drive closure of identified issues.
</li></ul><p><b>4. Program Governance &amp; Continuous Improvement
</b></p><ul><li>Maintain and enhance SoD standards, procedures, and governance artifacts.
</li><li>Recommend and drive improvements to tooling, automation, reporting, and integration with IAM systems (e.g., IGA platform, entitlement data quality, and application onboarding).
</li><li>Monitor control performance and identify opportunities to tighten controls or reduce manual effort.
</li></ul><p><b>5. Cross‑Functional Collaboration
</b></p><ul><li>Coordinate with IAM engineering, security architecture, compliance, internal audit, application teams, and external partners.
</li><li>Facilitate discussion around SoD implications during new application onboarding, system upgrades, and process changes.
</li>Serve as an internal subject matter expert on SoD and access risk.<br>
<li>
</li></ul><p></p><p><b>Required Qualifications
</b></p><ul><li>5&ndash;10 years of experience in Information Security, Risk Management, IT Governance, Identity &amp; Access Management, or related fields.
</li><li>Direct experience with Segregation of Duties frameworks, access control models, and entitlement governance.
</li><li>Strong understanding of business processes in financial services (e.g., trade lifecycle, finance, operations, regulatory reporting).
</li><li>Proven track record of managing cross‑functional programs and driving outcomes with business and technology teams.
</li><li>Exceptional communication, facilitation, and relationship‑building skills.
</li>Ability to interpret complex technical and business issues and translate them into actionable plans.<br>
<li>
</li></ul><div></div><p><b>Preferred Qualifications
</b></p><ul><li>Experience with IGA platforms (SailPoint, Saviynt, or similar).
</li><li>Knowledge of role‑based access control (RBAC) design principles.
</li><li>Familiarity with regulatory frameworks (SOX, FFIEC, NIST, ISO27001).
</li><li>Prior consulting or BISO-type experience supporting business units.
</li>Strong analytical skills and comfort working with data.<br>
<li>
</li></ul><p></p><p>Primary Location Full Time Salary Range of $145,000 - $200,000.</p></div>

VP, Identity & Access Management - BISO

Search 10000+ Identity access management architect jobs near you this March. New roles added regularly across leading industries. Apply today.