Senior IAM Security Architect - Remote

$150,000 - $200,000/Yr

EPAM Systems - San Francisco, CA

Full-time - Senior

Remote - San Francisco, CA

Professional, Scientific, and Technical Services

About the position

The Senior IAM Security Architect role at EPAM Systems focuses on designing and implementing robust identity and access management solutions. The position aims to ensure that security architectures are risk-free and compliant with industry standards. The ideal candidate will have extensive experience in security architecture, particularly in identity and access management, and will work collaboratively with cross-functional teams to enhance security measures.

Responsibilities

• Develop identity and access management solutions, including lifecycle management, access management (SSO, SAML, OIDC), identity governance, and privileged access management.
• Plan, design, and implement security architectures for multi-cloud systems and workloads.
• Gather business, functional, and non-functional requirements to design security risk-free architectures as part of existing security posture improvements or migration projects.
• Utilize best security practices from various domains including public and private clouds, network, containerization, microservices, and S-SDLC.
• Collaborate with engineering, infrastructure, development, database, and security operations teams on physical and logical system design.
• Develop corporate security standards in collaboration with C-management and other teams.
• Design and implement security and disaster recovery strategies.
• Report to C-level management and security directors.
• Estimate and build project plans and organize security engineers' work.

Requirements

• Direct Security-focused education (Bachelors+) or proven equivalent experience.
• 8+ years of experience in developing Identity and Access Management Solutions.
• 5+ years of experience as a security architect within Identity Access Management or Privileged Access Management.
• Specific skills in at least 2 of the following products: Okta, Auth0, Sailpoint, CyberArk, Ping Identity, Saviynt, and/or Forgerock.
• Successfully executed at least one Cloud security project.
• Security consulting experience in at least one business domain.
• Experience working with the DevOps team.
• Experience configuring security controls and policies (NIST SP 800-53).
• Experience successfully delivering security service-oriented projects.
• Experience successfully implementing any Enterprise Security programs.
• Experience with at least one business domain's compliance standards and proven record of successfully building compliant architectures.
• Hands-on proficiency is a must.

Benefits

• Medical, Dental and Vision Insurance (Subsidized)
• Health Savings Account
• Flexible Spending Accounts (Healthcare, Dependent Care, Commuter)
• Short-Term and Long-Term Disability (Company Provided)
• Life and AD&D Insurance (Company Provided)
• Employee Assistance Program
• Unlimited access to LinkedIn learning solutions
• Matched 401(k) Retirement Savings Plan
• Paid Time Off - the employee will be eligible to accrue 15-25 paid days, depending on specific level and tenure with EPAM
• Paid Holidays - nine (9) total per year
• Legal Plan and Identity Theft Protection
• Accident Insurance
• Employee Discounts
• Pet Insurance
• Employee Stock Purchase Program
• Participation in the discretionary annual bonus program
• Participation in the discretionary Long-Term Incentive (LTI) Program