Identity Security Architect – Entra ID / IAM / Zero Trust

Company Overview

Req ID

396457

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

NTT DATA's Client is currently seeking a Cybersecurity Architecture to join their team in Irving, Texas (US-TX), United States (US).

Job Description – Identity Security Architect – IAM & Zero Trust

Day to Day Job Duties

• Define and execute enterprise identity security strategies and roadmaps aligned with Zero Trust principles and broader cybersecurity objectives.
• Design scalable Identity and Access Management (IAM) architectures supporting workforce identities, privileged identities, service accounts, machine identities, and enterprise applications.
• Develop identity-centric security controls to reduce attack surfaces and prevent identity-based threats.
• Establish architectural standards and design principles for authentication, authorization, access governance, identity lifecycle management, and privileged access.
• Lead engineering, integration, deployment, and operationalization of enterprise identity security platforms, including Sgnl.ai, PlainID, CrowdStrike Identity Protection, and Microsoft Entra ID.
• Partner with security product vendors, architecture teams, engineering teams, infrastructure teams, cloud teams, and application teams to deliver scalable identity-security solutions.
• Integrate identity-security capabilities with enterprise applications, cloud platforms, infrastructure services, authentication platforms, and security tooling.
• Design and expand identity attack-path analysis capabilities to identify exploitable privilege relationships, lateral-movement paths, excessive entitlements, and identity-based risks.
• Implement identity threat detection, risk scoring, attack containment, and remediation capabilities.
• Develop processes and technical controls to proactively identify privilege-escalation paths and unauthorized access opportunities.
• Improve visibility into identity relationships, entitlements, authentication activity, access patterns, and associated security risks.
• Support modernization of enterprise authentication services, including enhancements to authenticator capabilities and user authentication experiences.
• Drive adoption of strong authentication, Multi-Factor Authentication (MFA), adaptive access, and risk-based authentication controls.
• Design and implement Policy-Based Access Control (PBAC) capabilities using platforms such as PlainID.
• Develop identity-aware authorization models that improve enterprise security while reducing access-management complexity.
• Design identity-risk models supporting adaptive authentication, authorization, continuous verification, and Zero Trust access decisions.
• Leverage identity intelligence, security signals, and behavioral context to improve access decisions and security controls.
• Design and integrate IAM capabilities including Single Sign-On, federation, authentication, authorization, identity governance, access management, and Privileged Access Management.
• Develop secure integrations using APIs, modern identity protocols, automation, and cloud-native architectures.
• Translate business, security, regulatory, and technology requirements into secure and scalable identity architecture and engineering solutions.
• Conduct architecture reviews, security-design reviews, product evaluations, and technical implementation discussions.
• Provide technical leadership and guidance to engineering teams implementing identity and access-security solutions.

Basic Qualifications

(What are the skills required for this job with minimum years of experience on each)

• 10+ Years of Deep expertise in Identity and Access Management architecture, identity security, and enterprise access-control frameworks.
• 10+ Years of Strong experience designing and implementing enterprise IAM solutions supporting workforce, privileged, application, and machine identities.
• 10+ Years of Experience with Microsoft Entra ID / Azure Active Directory.
• 10+ Years of Experience implementing and supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), Identity Governance, Access Management, Privileged Access Management (PAM), and federation.
• 10+ Years of Strong understanding of modern authentication and authorization protocols.
• 10+ Years of Hands-on experience engineering, integrating, deploying, and supporting enterprise identity-security products.
• 10+ Years of Strong hands-on experience with identity-security technologies such as:
• Sgnl.ai
• PlainID
• CrowdStrike Identity Protection
• Microsoft Entra ID / Azure AD
• 10+ Years of Experience integrating identity-security platforms with enterprise applications, infrastructure, cloud services, and security systems.
• 10+ Years of Strong understanding of Zero Trust Architecture and identity-centric security principles.
• 10+ Years of Experience with Identity Threat Detection and Response (ITDR).
• 10+ Years of Experience with identity attack-path analysis, privilege-risk identification, and lateral-movement assessment.
• 10+ Years of Experience designing and implementing authorization frameworks and Policy-Based Access Control (PBAC).
• 10+ Years of Experience with risk-based authentication, adaptive access, continuous verification, and identity-risk modeling.
• 10+ Years of Strong product-engineering, solution-design, and enterprise security-delivery experience.
• 10+ Years of Experience using APIs, identity protocols, automation, and cloud-native technologies to integrate security platforms and applications.
• 10+ Years of Experience translating business and security requirements into scalable technical architectures and engineering solutions.
• 10+ Years of Strong understanding of enterprise security architecture, authentication, authorization, access governance, and identity lifecycle-management principles.
• Strong analytical, troubleshooting, problem-solving, stakeholder-management, and technical-leadership skills.
• Ability to collaborate effectively with cybersecurity, IAM, cloud, infrastructure, application, architecture, engineering, and vendor teams.

Degree

Degree requirement not specified in the source job description.

Nice to Have

(But not a must)

• 10+ years of experience in Cybersecurity, Identity and Access Management, Identity Architecture, Security Engineering, or a related security discipline.
• Experience leading enterprise-scale identity-security or IAM transformation programs.
• Experience designing or implementing Zero Trust security programs.
• Familiarity with NIST cybersecurity guidance, Zero Trust frameworks, and modern enterprise security standards.
• Experience working within large, complex, highly regulated enterprise environments.
• Experience implementing large-scale identity threat detection, attack-path analysis, or identity-risk-management programs.
• Experience with advanced Policy-Based Access Control and identity-aware authorization models.
• CISSP certification.
• CCSP certification.
• Microsoft Azure Security Engineer certification.
• CIAM, IAM, or other relevant Identity and Access Management certifications.
• Equivalent cybersecurity, cloud-security, or identity-security certifications.

NTT DATA provides a reasonable range of compensation for U.S.-based positions. The starting pay range for this role is $60-$70/Hour. Actual compensation will depend on a number of factors, including the candidate's relevant experience, technical skills, and other qualifications.

This position is eligible for company benefits including participation in medical, dental, and vision insurance, flexible spending or health savings account, and AD&D insurance, employee assistance, participation in a 401k program, and additional voluntary or legally-required benefits

About NTT DATA

NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at us.nttdata.com

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.