Principal Cybersecurity Architect – Identity, IAM & Zero Trust

Qualifications

• 8+ years in information security, with 4+ years in an architecture or senior engineering role
• Deep expertise in Zero Trust frameworks (NIST SP 800-207, BeyondCorp) and identity-centric security
• Strong understanding of threat modeling methodologies (STRIDE, PASTA, ATT&CK)
• Hands-on experience with enterprise IAM platforms — Microsoft Entra ID, Okta, Ping Identity, or equivalent
• Strong grasp of federation protocols: SAML 2.0, OIDC, OAuth 2.0, SCIM
• Experience with PAM platforms (CyberArk, BeyondTrust, Delinea) and secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
• Familiarity with CIEM tooling and cloud IAM governance across at least two major cloud platforms
• Experience designing and governing identity lifecycle and IGA processes (SailPoint, Saviynt, or equivalent a plus)
• Strong understanding of threat modelling methodologies (STRIDE, ATT&CK) and their application to identity attack surfaces
• Excellent communication skills — able to translate complex architecture into clear guidance for engineers, business stakeholders, and executives
• Provan experience using diplomacy skills
• Certifications (preferred):CISSP, SABSA, TOGAF, Microsoft SC-100, Okta Certified Architect, or equivalent

Certain states and localities require employers to post a reasonable estimate of the salary range. A reasonable estimate of the current base pay range for this position is $150,400 to $188,000 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that are not included in the base pay.

The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following...