Identity Security Architect (Remote)

About the role

Stryker is hiring a remote Identity Security Architect to design and govern enterprise identity and access management solutions that protect organizational assets while enabling secure access to business systems and applications. The role serves as the technical authority for identity security and works with cybersecurity, infrastructure, cloud, application, enterprise architecture, security operations and business teams across on-premises and cloud environments. Preference will be given to candidates living in the Eastern or Central time zones.

Key responsibilities

• Design and maintain enterprise identity security architecture, standards and reference designs, and develop identity strategies supporting Zero Trust Architecture.
• Architect authentication, authorization, federation, SSO, MFA and identity lifecycle management solutions.
• Lead architecture reviews for IAM projects, cloud implementations and business applications.
• Design and govern Privileged Access Management (PAM) solutions and privileged identity controls.
• Integrate identity security controls with infrastructure, cloud engineering, application development and security operations teams.
• Develop identity governance processes for RBAC, least privilege, segregation of duties and access certification.
• Conduct identity threat modeling, architecture risk assessments and security design reviews.
• Evaluate emerging identity technologies and recommend architectural improvements.
• Support compliance with NIST CSF, ISO 27001, HIPAA, SOX, FDA Cybersecurity Guidance and other regulations.
• Produce architecture documentation, technical standards, implementation guidance and operating procedures.
• Mentor engineering teams implementing identity security capabilities.

Required profile

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering or a related discipline.
• Minimum 8 years of experience in cybersecurity or identity management.
• Minimum 3 years of experience designing enterprise IAM architectures.

Required skills

• Experience implementing SSO, MFA, PAM, Identity Governance and Administration (IGA) and directory services.
• Experience with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, CyberArk, Delinea or similar technologies.
• Cloud identity security across Azure, AWS or Google Cloud.