Architect, Cybersecurity, Identity Security - Remote

Stryker is hiring an Identity Security Architect to design and govern enterprise identity and access management solutions across on-premises and cloud environments. The role provides technical leadership for identity security architecture, IAM projects, privileged access, identity governance, risk assessments, and regulatory compliance.

Responsibilities:

• Design and maintain enterprise identity security architecture, standards, and reference designs
• Develop identity strategies that support Zero Trust Architecture and enterprise digital transformation
• Architect authentication, authorization, federation, single sign-on (SSO), multi-factor authentication (MFA), and identity lifecycle management solutions
• Lead architecture reviews for IAM projects, cloud implementations, and business applications
• Design and govern Privileged Access Management (PAM) solutions and privileged identity controls
• Integrate identity security controls with Infrastructure, Cloud Engineering, Enterprise Architecture, Application Development, and Security Operations teams
• Develop identity governance processes for role-based access control (RBAC), least privilege, segregation of duties (SoD), and access certification
• Conduct identity threat modeling, architecture risk assessments, and security design reviews
• Evaluate emerging identity technologies and recommend architectural improvements
• Support compliance with NIST CSF, ISO 27001, HIPAA, SOX, FDA Cybersecurity Guidance, and applicable regulatory requirements
• Develop architecture documentation, technical standards, implementation guidance, and operating procedures
• Provide technical leadership and mentorship to engineering teams implementing identity security capabilities

Requirements:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline
• Minimum 8 years of experience in cybersecurity or identity management
• Minimum 3 years of experience designing enterprise IAM architectures
• Experience implementing SSO, MFA, PAM, Identity Governance and Administration (IGA), and directory services
• Experience with Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, CyberArk, Delinea, or similar technologies, including cloud identity security across Azure, AWS, or Google Cloud