identity access management architect

Synnect Group L.L.C-FZ

<p>Experience Required</p><ul><li>10+ years experience in Identity &amp; Access Management.</li><li>Proven experience architecting enterprise IAM solutions.</li><li>Deep Saviynt experience (implementation and governance).</li><li>Demonstrated RBAC and role modelling expertise.</li><li>Experience designing SoD frameworks in enterprise environments.</li><li>Experience integrating IAM with ERP systems (Oracle preferred).</li><li>Experience aligning IAM with ITSM platforms.</li><li>Experience operating in transformation or greenfield environments.</li></ul><p>INTERNAL</p><p>INTERNAL</p><ul><li>Experience designing privileged access governance frameworks.</li></ul><p>Job Type: Full-time</p><p>Pay: AED15,000.00 - AED18,000.00 per month</p><p>Work Location: In person</p>

Senior Identity & Access Management Architect (Saviynt)

NTT DATA

<b>Req ID:</b> 366994
<br><br>
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
<br><br>
We are currently seeking a Active Directory/Azure AD Senior Identity Access Management (IAM) Architect - to join our team in Plano, Texas (US-TX), United States (US).
<br><br>
Systems Eng. Sr. Specialist Advisor– Active Directory/Entra ID
<br><br>
Role Overview
<br><br>
The NTT DATA Services Security organization is looking for talented security-oriented Systems SR. Engineering with strong Active Directory, DNS, DHCP, GPO, ADFS/Entra ID, MFA, SSO and related Identity skills. This role will be part of a larger dedicated security team dedicated to supporting, troubleshooting, upgrading Active Directory, Entra ID and related Identity technologies.
<br><br>
<b>Role Responsibilities:</b><br>
<ul>
<li>Active Directory designing, Architecture Solutions, Integration with platforms Applications</li>
<li>Develop an architecture of directory solutions for Windows, Unix, and related platforms</li>
<li>Experience in consolidations of multiple forest and domains and demonstrated understanding on User accounts, machine accounts, GPOs</li>
<li>Understand the requirement and create a migration plan for any services i.e. DNS, DHCP, and Certificate Services (PKI) etc.</li>
<li>Analyzing the requirement and design a solution to fulfil the requirement with zero impact to other platforms</li>
<li>Develop a power shell scripting with AD modules or VB .Net based on the requirements</li>
<li>Manage Azure active directory design, Architect Solutions, Integration with platforms Applications and AD connector to Entra</li>
<li>Auditing the security logs and integrating with SIEM</li>
<li>Conducting POC with multiple vendors for AD solutions and prepare detailed test cases. Create a clear recommendation document with pros and cons for senior management</li>
<li>Vulnerability Assessment and Management related to Active Directory, DNS Windows platforms</li>
<li>Active Directory consolidations including application integration working with application teams</li>
<li>Recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results</li>
</ul>
<b>Required Qualifications:</b><br>
<ul>
<li>Minimum 8 years relevant experience in Architecture and designing, solutions Migrating Active Directory, Entra ID ,Windows End points</li>
<li>Strong Demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains. Hands on experience in successful consolidation of AD Forests and Domains</li>
<li>Must have strong hands-on experience working on Entra ID (Azure Active Directory)</li>
<li>Extensive Experience working as Entra IDmin for enterprise Active Directory setup and maintenance</li>
<li>Strong experience in AD Trusts, two-way Trusts and one-way Trusts and deep knowledge of Active Directory Schemas and meta data</li>
<li>Strong Knowledge on Entra ID Identity Management Integration with on premise</li>
<li>Strong knowledge of Entra ID technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities.</li>
<li>Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices</li>
<li>Strong hands-on experience in coding in PowerShell scripting</li>
<li>Strong Knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk</li>
<li>Good knowledge on ADFS and Entra ID sync connectors</li>
<li>Strong familiarity with DNS Active Directory integrated, partitions and Infoblox DHCP systems and Migration of services from Active Directory any platform</li>
<li>Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc.,</li>
<li>Expertise in Active Directory versions 2003, 2008R2, 2012R2 2016, 2019 and Azure Active Directory</li>
<li>Good knowledge and hands on experience in setting up lab based on the solution requirements</li>
<li>Demonstrated working knowledge and hands on experience in AD disaster recovery, Replication issues and resolution using tools such as repadmin</li>
<li>Demonstrated experience in writing and applying GPOs, especially related to domain consolidations</li>
<li>Good Knowledge on Active Directory windows audit logs and levels and SIEM integration</li>
<li>Good knowledge on Networking, firewalls, including host firewalls, DNS, DHCP, DFS Network load balancers and Secure Global Directory or Secure LDAP</li>
<li>Good knowledge on Cryptography, certificates, PKI, symmetric, asymmetric keys, Encryption hash algorithms</li>
<li>Good knowledge on AD authentication protocols Kerberos, NTLM, LDAP, LDAPS LDAP-Start TLS</li>
<li>Good knowledge on Network log capturing analyzing the network packet captures through the tools Wireshark, Tshark, Microsoft NM etc.,</li>
<li>Good knowledge on application integration with LDAP Kerberos i.e. Keytab, krb5 etc.,</li>
<li>Good knowledge on AD migration tools like ADMT, Quest etc., knowledge on AD trusts, forest, domain tree structures, sites, DNS, GPOs, OU, FRS, DFSR.</li>
<li>Good knowledge on any Identity Access Management tools like FIM, MIM, OIM, Quest etc.,</li>
<li>Exposure to SAML, OAuth, OpenID and other security/IAM related standards</li>
<li>Strong hands-on familiarity with host-based security solutions, Forensic Investigation agents, and Compliance scanning and reporting, Hardening Active Directory</li>
<li>Knowledge of single sign-on, federation, active directory/LDAP, Kerberos/NTLM authentication integrated Windows authentication</li>
<li>Good knowledge on Identity management and Role based access control, attribute-based access control entitlement management</li>
<li>Good knowledge on power shell scripting with AD modules or VB .Net and ability to write scripts based on the requirement</li>
<li>Excellent communication skills, especially verbal and written</li>
<li>Good documentation skills to write a design configuration documents version controls</li>
<li>Excellent Interpersonal skill and ability to work as part of a team</li>
<li>Home office for remote work</li>
<li>Ability to work some weekends and late nights performing approved changes</li>
<li>ITIL V3 or later experience, experience in writing change request and attending Change Advisory Boards (CAB) meeting</li>
<li>Experience with Security Controls and compliance</li>
</ul>
About NTT DATA
<br><br>
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.
<br><br>
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
<br><br>
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

Active Directory/Azure AD Senior Identity & Access Management (IAM) Architect -

<b>Req ID:</b> 366813
<br><br>
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
<br><br>
We are currently seeking a Active Directory/Azure AD-Senior Identity Access Management (IAM) Architect to join our team in Plano, Texas (US-TX), United States (US).
<br><br>
Systems Eng. Sr. Specialist Advisor– Active Directory/Entra ID
<br><br>
Role Overview
<br><br>
The NTT DATA Services Security organization is looking for talented security-oriented Systems SR. Engineering with strong Active Directory, DNS, DHCP, GPO, ADFS/Entra ID, MFA, SSO and related Identity skills. This role will be part of a larger dedicated security team dedicated to supporting, troubleshooting, upgrading Active Directory, Entra ID and related Identity technologies.
<br><br>
<b>Role Responsibilities:</b><br>
<ul>
<li>Active Directory designing, Architecture Solutions, Integration with platforms Applications</li>
<li>Develop an architecture of directory solutions for Windows, Unix, and related platforms</li>
<li>Experience in consolidations of multiple forest and domains and demonstrated understanding on User accounts, machine accounts, GPOs</li>
<li>Understand the requirement and create a migration plan for any services i.e. DNS, DHCP, and Certificate Services (PKI) etc.</li>
<li>Analyzing the requirement and design a solution to fulfil the requirement with zero impact to other platforms</li>
<li>Develop a power shell scripting with AD modules or VB .Net based on the requirements</li>
<li>Manage Azure active directory design, Architect Solutions, Integration with platforms Applications and AD connector to Entra</li>
<li>Auditing the security logs and integrating with SIEM</li>
<li>Conducting POC with multiple vendors for AD solutions and prepare detailed test cases. Create a clear recommendation document with pros and cons for senior management</li>
<li>Vulnerability Assessment and Management related to Active Directory, DNS Windows platforms</li>
<li>Active Directory consolidations including application integration working with application teams</li>
<li>Recommend security best practices to achieve stated business objectives, advises on risk assumptions for any variances granted, and provides alternatives to achieve desired end results</li>
</ul>
<b>Required Qualifications:</b><br>
<ul>
<li>Minimum 8 years relevant experience in Architecture and designing, solutions Migrating Active Directory, Entra ID ,Windows End points</li>
<li>Strong Demonstrated experience with Active Directory migration tool or equivalent and consolidation of Global Forest and Domains. Hands on experience in successful consolidation of AD Forests and Domains</li>
<li>Must have strong hands-on experience working on Entra ID (Azure Active Directory)</li>
<li>Extensive Experience working as Entra IDmin for enterprise Active Directory setup and maintenance</li>
<li>Strong experience in AD Trusts, two-way Trusts and one-way Trusts and deep knowledge of Active Directory Schemas and meta data</li>
<li>Strong Knowledge on Entra ID Identity Management Integration with on premise</li>
<li>Strong knowledge of Entra ID technologies, including authentication models, federation, Multifactor Authentication (MFA), conditional access policies and other relevant capabilities.</li>
<li>Knowledge of best practices in AD/Azure Privileged access management and modern AD/Azure Secured Administration practices</li>
<li>Strong hands-on experience in coding in PowerShell scripting</li>
<li>Strong Knowledge on IAM disciplines like PIM and Privilege Administrative Accounts PAM solutions such as CyberArk</li>
<li>Good knowledge on ADFS and Entra ID sync connectors</li>
<li>Strong familiarity with DNS Active Directory integrated, partitions and Infoblox DHCP systems and Migration of services from Active Directory any platform</li>
<li>Demonstrated knowledge and experience in AD assessment in terms of OU delegation, GPOs, permission etc.,</li>
<li>Expertise in Active Directory versions 2003, 2008R2, 2012R2 2016, 2019 and Azure Active Directory</li>
<li>Good knowledge and hands on experience in setting up lab based on the solution requirements</li>
<li>Demonstrated working knowledge and hands on experience in AD disaster recovery, Replication issues and resolution using tools such as repadmin</li>
<li>Demonstrated experience in writing and applying GPOs, especially related to domain consolidations</li>
<li>Good Knowledge on Active Directory windows audit logs and levels and SIEM integration</li>
<li>Good knowledge on Networking, firewalls, including host firewalls, DNS, DHCP, DFS Network load balancers and Secure Global Directory or Secure LDAP</li>
<li>Good knowledge on Cryptography, certificates, PKI, symmetric, asymmetric keys, Encryption hash algorithms</li>
<li>Good knowledge on AD authentication protocols Kerberos, NTLM, LDAP, LDAPS LDAP-Start TLS</li>
<li>Good knowledge on Network log capturing analyzing the network packet captures through the tools Wireshark, Tshark, Microsoft NM etc.,</li>
<li>Good knowledge on application integration with LDAP Kerberos i.e. Keytab, krb5 etc.,</li>
<li>Good knowledge on AD migration tools like ADMT, Quest etc., knowledge on AD trusts, forest, domain tree structures, sites, DNS, GPOs, OU, FRS, DFSR.</li>
<li>Good knowledge on any Identity Access Management tools like FIM, MIM, OIM, Quest etc.,</li>
<li>Exposure to SAML, OAuth, OpenID and other security/IAM related standards</li>
<li>Strong hands-on familiarity with host-based security solutions, Forensic Investigation agents, and Compliance scanning and reporting, Hardening Active Directory</li>
<li>Knowledge of single sign-on, federation, active directory/LDAP, Kerberos/NTLM authentication integrated Windows authentication</li>
<li>Good knowledge on Identity management and Role based access control, attribute-based access control entitlement management</li>
<li>Good knowledge on power shell scripting with AD modules or VB .Net and ability to write scripts based on the requirement</li>
<li>Excellent communication skills, especially verbal and written</li>
<li>Good documentation skills to write a design configuration documents version controls</li>
<li>Excellent Interpersonal skill and ability to work as part of a team</li>
<li>Home office for remote work</li>
<li>Ability to work some weekends and late nights performing approved changes</li>
<li>ITIL V3 or later experience, experience in writing change request and attending Change Advisory Boards (CAB) meeting</li>
<li>Experience with Security Controls and compliance</li>
</ul>
About NTT DATA
<br><br>
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.
<br><br>
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
<br><br>
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

Active Directory/Azure AD-Senior Identity & Access Management (IAM) Architect

Xcel Energy

<div><p>Are you looking for an exciting job where you can put your skills and talents to work at a company you can feel proud to be a part of? Do you want a workplace that will challenge you and offer you opportunities to learn and grow? A position at Xcel Energy could be just what you&rsquo;re looking for.</p><p></p><div><div><p>
We have 1 open position for an AI-focused Security Architect (Sr or Principal) and 1 open position for an OT-focused Security Architect (Sr. or Principal). Both descriptions below &ndash;</p></div><p></p><div><p><b><br>
AI-focused Security Architect</b></p></div><p></p><div><p><b>
Position Summary</b></p></div><div><p>
This is a hybrid AI/IAM Security Architect role; ensure that Xcel&rsquo;s artificial intelligence (AI) and machine learning (ML) capabilities are designed, deployed, and operated securely&mdash;while also serving as a security architecture lead for Identity &amp; Access Management (IAM) more broadly across the enterprise (not limited to agentic or AI-specific identity). This role provides security oversight for AI-enabled products and platforms (including generative AI/LLM solutions) and for IAM capabilities such as authentication, authorization, privileged access, and identity governance, partnering with engineering, data, infrastructure, and business teams to define secure-by-design patterns from the ground up. A successful candidate will combine strategic thinking with hands-on technical depth across AI/ML architectures, data protection, IAM architecture, and emerging threats. They will advise stakeholders on methods and practices that achieve business outcomes while reducing risk, and will champion standards, architectural patterns, and governance that strengthen the security and trustworthiness of Xcel&rsquo;s AI footprint and IAM program. This role is part of the larger security architecture organization and will collaborate with peers as well as technology and business teams.</p></div><p></p><div><p><b>
Essential Responsibilities</b></p></div><div><ul><li><p>
AI &amp; IAM Security Architecture: Design security reference architectures and guardrails for AI/ML and generative AI solutions and for enterprise IAM capabilities, including authentication, authorization, privileged access, identity governance, and secure integration patterns.</p></li></ul></div><div><ul><li><p>
AI &amp; IAM Security Governance: Define and maintain control baselines and guardrails for AI-enabled platforms and enterprise IAM (e.g., model inventory, risk tiering, approval gates; identity standards, access reviews, and privileged access requirements) and ensure compliance drift is detected and addressed.</p></li></ul></div><div><ul><li><p>
Threat Modeling &amp; Risk Analysis: Conduct threat modeling and risk assessments for AI use cases (e.g., prompt injection, data leakage, model inversion/extraction, supply-chain risks) and provide advisory services to programs and operations.</p></li></ul></div><div><ul><li><p>
Secure AI Engineering Practices: Partner with product and engineering teams to embed security requirements into the AI lifecycle (data sourcing, training/fine-tuning, evaluation, deployment, monitoring, and retirement).</p></li></ul></div><div><ul><li><p>
Regulation, Privacy, and Compliance: Ensure AI solutions and IAM controls align with applicable regulatory expectations and internal policies (e.g., privacy, critical infrastructure requirements), including controls for sensitive data used in AI workflows.</p></li></ul></div><div><p><b><br>
Minimum</b><b> </b><b>Requirements</b><b> </b><b>(Senior Security Architect)</b><b> </b><b>&ndash;</b><b> </b><b>$112,200 - 159,400</b><b>:</b></p></div><div><ul><li><p>
Minimum of 8 years&rsquo; experience in IT including 5 years&rsquo; direct experience in IT engineering and cyber security.</p></li></ul></div><div><ul><li><p>
Demonstrated verbal/written communication and presentation skills.</p></li></ul></div><div><ul><li><p>
Demonstrated experience collaborating with internal stakeholders, 3rd parties, and management.</p></li></ul></div><div><ul><li><p>
Ability to influence without direct authority.</p></li></ul></div><div><ul><li><p>
Experience with technology implementation projects for enterprise-scale organizations.</p></li></ul></div><div><p><b><br>
Minimum</b><b> </b><b>Requirements</b><b> </b><b>(Principal Security Architect)</b><b> </b><b>&ndash;</b><b> </b><b>$129,000 &ndash; 183,200:</b></p></div><div><ul><li><p>
5 years of experience in systems architecture or systems engineering.</p></li></ul></div><div><ul><li><p>
10 years of experience in Information Security.</p></li></ul></div><div><ul><li><p>
3 years of experience designing complex systems.</p></li></ul></div><div><ul><li><p>
3 years of experience with systems integration and engineering.</p></li></ul></div><div><ul><li><p>
Strong oral and written communication skills.</p></li></ul></div><div><ul><li><p>
Must be able to understand and respond to clients' business needs.</p></li></ul></div><div><ul><li><p>
Demonstrated experience collaborating with internal employees, third parties, and management to develop solutions and ensure stakeholder buy-in.</p></li></ul></div><div><ul><li><p>
Ability to influence without direct authority.</p></li></ul></div><div><ul><li><p>
Preferred: Information Security experience in the electric utility industry.</p></li></ul></div><div><ul><li><p>
Preferred: Experience with technology implementation projects for enterprise-scale organizations.</p></li></ul></div><div><p><b><br>
Preferred Requirements</b></p></div><div><ul><li><p>
Hands-on experience with AI models and solutions (including generative AI/LLMs), such as model selection/integration, training or fine-tuning, retrieval-augmented generation (RAG), inference services, and model monitoring/operations in a production environment.</p></li></ul></div><div><ul><li><p>
Strong understanding of AI security threats and mitigations (e.g., prompt injection, insecure tool/function calling, data leakage, jailbreaks, model inversion/extraction, poisoning, and supply-chain risks).</p></li></ul></div><div><ul><li><p>
Experience with enterprise IAM patterns and controls (e.g., SSO/federation, OAuth2/OIDC, RBAC/ABAC, conditional access, managed identities/service principals, and PAM), applied across enterprise applications and cloud platforms; experience applying these patterns to AI/ML platforms and data services is a plus.</p></li></ul></div><div><ul><li><p>
Experience with IAM architecture and/or operations, such as identity governance (IGA), access reviews and attestations, role engineering, conditional access, and privileged access management (PAM).</p></li></ul></div><div><ul><li><p>
Knowledge of relevant regulations and compliance requirements such as NERC-CIP, TSA, and SOX, plus emerging AI/privacy and IAM-related regulatory expectations as applicable.</p></li></ul></div><div><ul><li><p>
Experience partnering with product, data, platform, and MLOps/DevOps teams to deliver secure AI solutions and to implement IAM controls (e.g., least privilege access, service identity, and privileged access workflows).</p></li></ul></div><div><ul><li><p>
Familiarity with AI governance and risk management practices (e.g., model inventory, documentation, human oversight, third-party model/vendor risk).</p></li></ul></div></div><p></p><div><div><p><b><br>
OT-focused Security Architect</b></p></div><div><p><b><br>
Position Summary</b></p></div><div><p>
The security architect ensures that Xcel&rsquo;s technology services are designed and delivered securely across both Information Technology (IT) and Operational Technology (OT) environments. This role emphasizes security for industrial and critical infrastructure facilities such as electric substations, gas compressor stations, and generation sites. This is an opportunity to partner with operations and engineering teams to define practical security approaches that protect reliability and safety while enabling business outcomes. A successful candidate will bring hands-on experience in roles such as controls engineering, field technician/field operations, or industrial control system (ICS) design or operations, along with strong security architecture skills. They will advise stakeholders on security methods and practices, champion best practices and standards that reduce risk across Xcel&rsquo;s footprint, and collaborate with peers across security, technology, and business teams.</p></div><div><p><b><br>
Essential Responsibilities</b></p></div><div><ul><li><p>
OT/ICS Security Architecture: Work with the business to define security patterns and reference architectures for industrial control environments (e.g., SCADA, DCS, PLC/HMI).</p></li></ul></div><div><ul><li><p>
Network Segmentation &amp; Remote Access: Define and govern segmentation (zones/conduits), secure remote access, and monitoring strategies for OT networks and vendor/contractor connectivity.</p></li></ul></div><div><ul><li><p>
Governance &amp; Standards: Develop security control baselines, hardening standards, and exception processes for OT assets and supporting infrastructure; ensure compliance drift is managed.</p></li></ul></div><div><ul><li><p>
Operational Collaboration: Partner with controls engineering, field technicians, plant operations, and maintenance teams to implement security improvements that work in real-world operating environments.</p></li></ul></div><div><ul><li><p>
Incident Readiness: Improve detection and response for OT environments, including logging/telemetry requirements, playbooks, and tabletop exercises with operations.</p></li></ul></div><div><ul><li><p>
Documentation and Reusability: Create products such as use cases and implementation patterns.</p></li></ul></div><div><ul><li><p>
Regulation and Compliance: Ensure adherence to regulatory frameworks such as NERC CIP and TSA Security Directive 2, including applicability to OT facilities and supporting IT/cloud services where used.</p></li></ul></div><div><p><b><br>
Minimum</b><b> </b><b>Requirements</b><b> </b><b>(Senior Security Architect)</b><b> </b><b>&ndash; comp range:</b><b> </b><b>$112,200 - 159,400</b></p></div><div><ul><li><p>
Minimum of 8 years&rsquo; experience in IT including 5 years&rsquo; direct experience in IT engineering and cyber security.</p></li></ul></div><div><ul><li><p>
Demonstrated verbal/written communication and presentation skills.</p></li></ul></div><div><ul><li><p>
Demonstrated experience collaborating with internal stakeholders, 3rd parties, and management.</p></li></ul></div><div><ul><li><p>
Ability to influence without direct authority.</p></li></ul></div><div><ul><li><p>
Experience with technology implementation projects for enterprise-scale organizations.</p></li></ul></div><div><p><b><br>
Minimum</b><b> </b><b>Requirements</b><b> </b><b>(Principal Security Architect)</b><b> </b><b>&ndash; comp range:</b><b> </b><b>$129,000 &ndash; 183,200</b></p></div><div><ul><li><p>
5 years of experience in systems architecture or systems engineering.</p></li></ul></div><div><ul><li><p>
10 years of experience in Information Security.</p></li></ul></div><div><ul><li><p>
3 years of experience designing complex systems.</p></li></ul></div><div><ul><li><p>
3 years of experience with systems integration and engineering.</p></li></ul></div><div><ul><li><p>
Strong oral and written communication skills.</p></li></ul></div><div><ul><li><p>
Must be able to understand and respond to clients' business needs.</p></li></ul></div><div><ul><li><p>
Demonstrated experience collaborating with internal employees, third parties, and management to develop solutions and ensure stakeholder buy-in.</p></li></ul></div><div><ul><li><p>
Ability to influence without direct authority.</p></li></ul></div><div><ul><li><p>
Preferred: Information Security experience in the electric utility industry.</p></li></ul></div><div><ul><li><p>
Preferred: Experience with technology implementation projects for enterprise-scale organizations.</p></li></ul></div></div><p></p><div><div><p><b><br>
Preferred Requirements</b></p></div><div><ul><li><p>
5+ years of experience in security architecture, cybersecurity engineering, or control systems engineering, including work that interfaces with industrial/OT environments.</p></li></ul></div><div><ul><li><p>
Hands-on experience with OT/ICS technologies and environments (e.g., SCADA, PLC/HMI, DCS) and the operational constraints of critical infrastructure.</p></li></ul></div><div><ul><li><p>
Knowledge of network segmentation concepts and secure remote access patterns for OT/vendor connectivity.</p></li></ul></div><div><ul><li><p>
Experience with OT security frameworks and guidance (e.g., IEC 62443, NIST SP 800-82) and applying them pragmatically in operating environments.</p></li></ul></div><div><ul><li><p>
Experience working with vendors/contractors supporting industrial equipment and control systems, including secure access and support models.</p></li></ul></div><div><ul><li><p>
Certifications such as GICSP, CISSP, CCSP, CCSK, or AWS Certified Security.</p></li></ul></div><div><ul><li><p>
Knowledge of relevant regulations and compliance requirements such as NERC CIP, TSA, and 10 CFR 810.</p></li></ul></div></div><p></p><p><br>
As a leading combination electricity and natural gas energy company, Xcel Energy offers a comprehensive portfolio of energy-related products and services to 3.4 million electricity and 1.9 million natural gas customers across eight Western and Midwestern states. At Xcel Energy, we strive to be the preferred and trusted provider of the energy our customers need. If you&rsquo;re ready to be a part of something big, we invite you to join our team.</p><p></p><p>
All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.</p><p></p><p>
Individuals with a disability who need an accommodation to apply please contact us at recruiting@xcelenergy.com.</p><p></p>
Non-Bargaining<p></p>
The anticipated starting base pay for this position is: $112,200.00 to $183,200.00 per year<p></p>
This position is eligible for the following benefits: Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Reimbursement Account, Health Care Reimbursement Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Volunteer Paid Time Off (VPTO), Parental Leave<p></p><p>
Benefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part.</p><p></p><p>
In any materials you submit, you may redact or remove age-identifying information including but not limited to dates of school attendance and graduation. You will not be penalized for redacting or removing this information.</p><p></p>
Deadline to Apply: 05/08/26<p></p><p>
EEO is the Law | EEO is the Law Supplement | Pay Transparency Nondiscrimination | Equal Opportunity Policy (PDF) | Employee Rights (PDF)</p><p></p><p>
All Xcel Energy employees and contractors share responsibility for protecting the company's information and systems by adhering to cybersecurity policies, standards, and best practices, recognizing that cybersecurity is everyone's responsibility.</p><p></p><p><b><br>
ACCESSIBILITY STATEMENT</b></p><p>
Xcel Energy endeavors to make https://www.xcelenergy.com/ accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Xcel Energy Talent Acquisition at recruiting@xcelenergy.com. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.</p></div>

Senior / Principal Security Architect (AI/OT)

NETS-International Group

<div>
 <p>
  <strong>
   Job Overview
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  This role defines architecture standards, leads platform integration across multi-vendor ecosystems, and ensures alignment with overall mission-critical network security objectives.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Define and own the end-to-end device and endpoint security architecture across mobile, IoT, and enterprise domains.
 </p>
 <p>
  - Architect integrations between EDR, MDM, MTD, and identity platforms for unified threat visibility and zero-trust enforcement.
 </p>
 <p>
  - Evaluate and implement device compliance frameworks aligned with NCA, CST, and ISO 27001 regulations.
 </p>
 <p>
  - Lead vendor assessments and proof-of-concepts for emerging endpoint protection technologies.
 </p>
 <p>
  - Provide guidance on IoT platform security configuration and network segmentation best practices.
 </p>
 <p>
  - Coordinate with other tower leads (Infrastructure, Data Security, and Digital Identity) for multi-domain alignment under ADC 450 MSS.
 </p>
 <p>
  - Act as design authority for endpoint control baselines, encryption standards, and secure access policies.
 </p>
 <p>
  - Oversee vulnerability remediation, patch orchestration, and posture management initiatives.
 </p>
 <p>
  - Mentor technical teams and drive continuous improvement of endpoint and IoT security capabilities.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Required Qualifications
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Bachelor&rsquo;s degree in Cybersecurity, Network Engineering, or related field.
 </p>
 <p>
  - Several years&rsquo; experience in endpoint, device, or IoT security architecture and operations.
 </p>
 <p>
  - Proven track record of leading enterprise-scale device security implementations and integrations.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Required Certifications
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Matrix42 Certified Architect or Microsoft Intune Expert.
 </p>
 <p>
  - CrowdStrike Certified Falcon Expert or SentinelOne Ranger Certification.
 </p>
 <p>
  - VMware Workspace ONE Architect or Ivanti Advanced Administrator.
 </p>
 <p>
  - CISSP, CCSP, or equivalent strategic security certification.
 </p>
</div>


DTS Security Consultant

Concentrix

<p></p><div><p>Job Title:
</p>Cloud &amp; AI Infrastructure / Endpoint Cloud Solution Architect (CSA) (Arabic-English)
<p></p><p>Job Description
</p>Technical Products and Services (TPS):
<br>
<br>
We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.
<br>
<br>
The global technology and services leader that powers the world&rsquo;s best brands, today and into the future. We&rsquo;re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we&rsquo;re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.
<br>
<br>
The Concentrix Technical Products and Services team is the driving force behind Concentrix&rsquo;s transformation, data, and technology services. We integrate world-class digital engineering, creativity, and a deep understanding of human behavior to find and unlock value through tech-powered and intelligence-fueled experiences. We combine human-centered design, powerful data, and strong tech to accelerate transformation at scale. You will be surrounded by the best in the world providing market leading technology and insights to modernize and simplify the customer experience. Within our professional services team, you will deliver strategic consulting, design, advisory services, market research, and contact center analytics that deliver insights to improve outcomes and value for our clients. Hence achieving our vision.
<br>
<br>
Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we&rsquo;re proud to be recognized with awards such as &quot;World's Best Workplaces,&quot; &ldquo;Best Companies for Career Growth,&rdquo; and &ldquo;Best Company Culture,&rdquo; year after year.
<br>
<br>
Join us and be part of this journey towards greater opportunities and brighter futures.
<p></p><p><b>JOB SUMMARY
</b></p><p>The Cloud &amp; AI Infrastructure / Endpoint Cloud Solution Architect (CSA) is a senior technical role responsible for delivering end to end Azure infrastructure, identity, monitoring, resiliency, and cloud endpoint solutions. This role spans identity (Microsoft Entra ID), resiliency and protection (Azure Backup), hybrid infrastructure (Azure Local / Azure Stack HCI), observability (Azure Monitor), and cloud desktops (Azure Virtual Desktop and Windows 365).<br>
</p><p><br>
The CSA operates within Microsoft Global Delivery / CSU, delivering proactive, outcome-based engagements and supporting customer success through architectural guidance, design validation, deployment readiness, and operational excellence.
<br>
This role is designed to reflect multi skill CSA profiles supported by ESXP / OneProfile and Unified Skills Experience, where a CSA can hold multiple Azure and Endpoint skills in a single profile.
</p><p></p><p><b>Responsibilities
</b></p><p></p><div><b>Azure Identity &amp; Access
</b><br>
<ul><li>Design and validate Microsoft Entra ID architectures including identity lifecycle, access governance, hybrid identity, and secure access patterns.
</li><li>Guide customers on identity integration with Azure Virtual Desktop, Windows 365, and Azure workloads.
</li><li>Ensure identity designs align with Zero Trust and Microsoft best practices.<br>
</li></ul></div><div><br>
<b>Azure Infrastructure Resiliency &amp; Protection
</b><br>
<ul><li>Architect and deliver Azure Backup solutions for IaaS, hybrid, and Azure Local environments.
</li><li>Design backup, restore, and disaster recovery strategies aligned with customer RPO/RTO requirements.
</li><li>Provide resiliency guidance for mission critical workloads.<br>
</li></ul></div><div><br>
<b>Hybrid Infrastructure (Azure Local / Azure Stack HCI)
</b><br>
<ul><li>Design, validate, and support Azure Local (Azure Stack HCI) deployments and integrations with Azure services.
</li><li>Guide customers on hybrid management, lifecycle operations, and modernization paths.
</li><li>Align hybrid infrastructure designs with Azure governance and monitoring standards.<br>
</li></ul></div><div><br>
<b>Observability &amp; Operations
</b><br>
<ul><li>Design and implement Azure Monitor solutions including Log Analytics, alerts, diagnostics, and operational insights.
</li><li>Enable customers to achieve operational visibility, performance monitoring, and proactive issue detection.
</li><li>Align monitoring strategies across Azure, hybrid, and endpoint workloads.<br>
</li></ul></div><div><br>
<b>Cloud Desktops &amp; Endpoint Virtualization
</b><br>
<ul><li>Architect and deliver Azure Virtual Desktop (AVD) and Windows 365 (W365) solutions.
</li><li>Guide customers on image management, identity integration, security, networking, and user experience optimization.
</li><li>Support enterprise adoption of cloud desktops as part of modern workplace and endpoint strategies.<br>
</li></ul></div><div><br>
<b>Delivery &amp; Engagement
</b><br>
<ul><li>Deliver Value Based Deliverables (VBDs), technical workshops, design reviews, and deployment assistance.
</li><li>Act as a trusted advisor, translating business requirements into secure, scalable architectures.
</li><li>Ensure accurate labor logging, profile completeness, and skills reviews in ESXP / OneProfile.
</li></ul></div><p></p><p><b>Qualifications
</b></p><p></p><div><b>Required Technical Skills
</b><br>
The CSA is expected to hold and maintain multiple skills concurrently, as supported by the Unified Skills Experience:
<br>
<ul><li>Microsoft Entra ID (Identity &amp; Access Management)
</li><li>Azure Backup
</li><li>Azure Local / Azure Stack HCI
</li><li>Azure Monitor
</li><li>Azure Virtual Desktop (AVD)
</li><li>Windows 365 (W365)<br>
</li></ul></div><p><br>
Multiple skills in a single CSA profile are explicitly supported and encouraged within CSA Global Delivery and ESXP skill taxonomy.<br>
</p><div><br>
<b>Accreditations &amp; Readiness
</b><br>
<ul><li>Required or in progress CSA accreditations aligned to the above skills
</li><li>Ability to maintain skills and accreditations in accordance with dispatch and staffing standards
</li><li>Regular review and submission of skills every 90 days as per CSA tooling guidance<br>
</li></ul></div><div><br>
<b>Professional Capabilities
</b><br>
<ul><li>Strong architectural thinking across identity, infrastructure, operations, and endpoint services
</li><li>Excellent stakeholder communication and customer facing delivery skills
</li><li>Ability to operate across multiple solution areas while maintaining depth in primary skills
</li><li>Comfortable working in enterprise, regulated, and hybrid environments
 </li></ul></div><p></p><p><b>#LI-Remote #Egypt
</b></p><p></p><p>Location:
</p>EGY Work-at-Home
<p></p><p>Language Requirements:
</p><p></p><p>Time Type:
</p>Full time</div>

Cloud & AI Infrastructure / Endpoint Cloud Solution Architect (CSA) (Arabic-English)

Starlink Qatar

<div>
 <p>
  We are seeking a
  <strong>
   Cybersecurity Architect
  </strong>
  to define and govern the end-to-end security architecture for platform capabilities and vendor-delivered solutions. The role ensures
  <strong>
   secure-by-design implementation
  </strong>
  across cloud-agnostic deployments.
 </p>
 <p>
  You will establish security standards, reference architectures, and assurance processes covering
  <strong>
   identity, network segmentation, application security, data protection, and operational security monitoring
  </strong>
  . Working with stakeholders, vendors, and operations teams, the architect drives
  <strong>
   threat modeling, security controls validation, and compliance evidence readiness
  </strong>
  , including SIEM/SOAR integration, vulnerability management, and incident response procedures. The role ensures consistent security posture across multi-tenant environments and multiple cloud platforms.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Define
   <strong>
    security reference architecture and baseline controls
   </strong>
   for cloud, Kubernetes, applications, and data services.
  </li>
  <li>
   Lead
   <strong>
    security governance
   </strong>
   : design reviews, threat modeling, security exceptions, and risk acceptance processes.
  </li>
  <li>
   Define
   <strong>
    identity and access controls
   </strong>
   (Entra ID, RBAC, PIM/JIT, conditional access, service principals, secrets management).
  </li>
  <li>
   Design
   <strong>
    network security architecture
   </strong>
   (segmentation/trust zones, private endpoints, WAF, egress controls, firewall policies).
  </li>
  <li>
   Establish
   <strong>
    application security standards
   </strong>
   (OWASP, secure SDLC, SAST/DAST, dependency/SBOM, container image signing).
  </li>
  <li>
   Define
   <strong>
    data security controls
   </strong>
   (classification, encryption/CMK/HSM, DLP, key management, retention, secure deletion).
  </li>
  <li>
   Own
   <strong>
    security monitoring requirements and integrations
   </strong>
   : Defender for Cloud (CSPM/CWPP), Sentinel (SIEM), SOAR playbooks, alert tuning.
  </li>
  <li>
   Define
   <strong>
    vulnerability management and patching processes
   </strong>
   for OS/Kubernetes/runtime components, including SLA targets and reporting.
  </li>
  <li>
   Support
   <strong>
    incident response readiness
   </strong>
   : runbooks, tabletop exercises, forensic logging, evidence handling, and post-incident improvements.
  </li>
  <li>
   Provide
   <strong>
    assurance of vendor deliverables and go-live readiness
   </strong>
   (pen test coordination, remediation validation, compliance evidence packs).
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Skills &amp; Abilities
  </strong>
 </p>
 <ul>
  <li>
   Deep understanding of
   <strong>
    cloud security architecture, zero-trust networking, and Kubernetes/container security
   </strong>
   .
  </li>
  <li>
   Strong capability in
   <strong>
    IAM design and privileged access governance
   </strong>
   in regulated environments.
  </li>
  <li>
   Ability to translate
   <strong>
    risk and compliance requirements into practical technical controls and acceptance criteria
   </strong>
   .
  </li>
  <li>
   Experience implementing
   <strong>
    security monitoring, detection engineering, and incident response processes
   </strong>
   .
  </li>
  <li>
   Strong
   <strong>
    stakeholder influence
   </strong>
   and ability to enforce standards across multiple vendors and teams.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Education &amp; Experience
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in
   <strong>
    Computer Science, Information Technology, Cybersecurity
   </strong>
   ; Master&rsquo;s degree highly preferred.
  </li>
  <li>
   <strong>
    8+ years
   </strong>
   in cybersecurity architecture or security engineering roles in government, telco, finance, or critical infrastructure.
  </li>
  <li>
   Hands-on experience securing
   <strong>
    Azure and at least one other cloud
   </strong>
   (GCP/AWS), including hybrid connectivity and shared responsibility.
  </li>
  <li>
   Proven experience with
   <strong>
    SIEM
   </strong>
   (Microsoft Sentinel preferred) and
   <strong>
    CSPM/CWPP
   </strong>
   (Defender for Cloud preferred).
  </li>
  <li>
   Experience with
   <strong>
    secure SDLC, vulnerability management, penetration testing coordination, and remediation programs
   </strong>
   .
  </li>
  <li>
   Relevant certifications preferred:
   <strong>
    CISSP/CCSP, CISM, Azure Security Engineer, CKA/CKS, ISO 27001 awareness
   </strong>
   .
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Preferred Tools
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Security posture &amp; SIEM:
   </strong>
   Microsoft Defender for Cloud, Microsoft Sentinel, SOAR playbooks
  </li>
  <li>
   <strong>
    Container/Kubernetes security:
   </strong>
   image scanning (Trivy/Anchore), policy-as-code (OPA/Gatekeeper), cosign/Sigstore, Kubernetes audit tools
  </li>
  <li>
   <strong>
    Identity &amp; secrets:
   </strong>
   Azure Entra ID, PIM, Key Vault/KMS/HSM, PAM tooling
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Soft Skills
  </strong>
 </p>
 <ul>
  <li>
   Risk-based
   <strong>
    decision-making
   </strong>
   and ability to articulate trade-offs clearly
  </li>
  <li>
   Strong facilitation of
   <strong>
    threat modeling and security design reviews
   </strong>
  </li>
  <li>
   Clear, structured
   <strong>
    documentation and compliance evidence mindset
   </strong>
  </li>
  <li>
   Calm, decisive leadership during
   <strong>
    incidents and high-pressure situations
   </strong>
  </li>
  <li>
   <strong>
    Collaborative approach
   </strong>
   that enables delivery while maintaining security standards
  </li>
 </ul>
</div>


Cybersecurity Architect

Search 10000+ Identity access management architect jobs near you this May. New roles added regularly across leading industries. Apply today.