Cyber Identity Systems Architect

Summary

Join the NBCUniversal Operations and Technology (O&T) team and contribute to the strategy for the growing Identity and Access Management (IAM) service portfolio. The role focuses on Identity Governance and Administration (IGA) service support and strategy, involving the evaluation and development of on-prem and cloud-based IGA services. You will translate business requirements into IAM and IGA functionality, develop scalable identity service architectures, and partner with technology and security teams. Success requires a technical architectural mindset, a balanced solution approach, and strong communication skills. The position is fully remote and offers competitive compensation and benefits.

Requirements

• Bachelors Degree or higher in Computer Science related field OR Non-Computer related Degree with equivalent work experience
• 5+ years of experience in an identity architecture role
• 8+ years of overall experience in IAM technical role(s) in a large enterprise that includes experience with modern IGA platforms (SailPoint IIQ, Saviynt, SailPoint IDN, EntraID), Windows Active Directory, Microsoft Azure AD, REST API programming
• In-depth experience with defining secure and hardened information IAM solutions
• Exceptional communication and interpersonal skills; including negotiation, facilitation, and consensus building skills; ability to influence, persuade, and manage polarities without direct control
• High degree of flexibility and ability to work with employees at all levels of the organization with diverse backgrounds
• Makes wise, data-informed decisions, finds and owns problems to closure
• Ability to balance the long-term big picture and short-term implications of tactical decisions
• Possesses an innovative technical mindset with a focus on architecture, strategy, and design
• Strong desire to drive change
• Significant experience with application connection design, consulting experience on IGA functions (i.e. user lifecycle management), access control policies, federation, certifications, access management, MFA, and role management
• Significant experience designing initial infrastructure, on-boarding of applications, role-based access controls, policy and password management, certifications, workflows, work items and rules
• Deep understanding of RBAC, identity policies, identity lifecycle automation and reporting, password policies, separation of duties, user provisioning, and approval workflows in Saviynt, EntraID, SailPoint IIQ, or SailPoint IDN
• Ability to make source code level changes and has worked in a large multinational organization providing hands-on technical architecture services with J2EE development, Database, Java, Bean Shell/JavaScript, JSP/Servlets, SQL
• Experience with REST Web services, SAML 2.0, JDKs, WS-Security, etc
• Experience working with modern and legacy enterprise authentication services (OpenID Connect (OIDC), OAuth2, SAML, WS Fed, Kerberos) and platforms (preferably Active Directory, Entra ID, AWS)
• Experience with enterprise directory architecture, including significant knowledge of Active Directory and Entra ID

Responsibilities

• Translate complex business requirements into IAM and IGA service functionality
• Develop highly scalable identity service architectures serving enterprise, customer access, and external partner requirements
• Produce technical solutions that meet NBCU business objectives and drive compliance with NBCU’s information security goals
• Partner with technology and security teams across NBCU to provide technical expertise, design guidance, and drive best practices
• Catalog risk embedded in legacy authentication implementations and help define a path to industry-aligned secure designs and services
• Create and deliver effective presentations that inform NBCUniversal Senior Leadership teams to drive business relevant information security decisions
• Mentoring/advising other team members
• Lead product evaluations and new technology adoptions
• Maintain strong vendor relationships that drive partnership with NBCU

Preferred Qualifications

• Experience architecting and delivering large-scale Enterprise SailPoint service instances
• Experience developing and delivering Zero Trust architectural designs
• Experience with Venafi / Netwrix/ CyberArk
• Experience with Google Cloud Platform (GCP) and Amazon Web Services (AWS)
• Experience with large-scale ID Verification solutions for Enterprise and Consumer Identity solutions
• A current cybersecurity professional certification (such as CISSP), a current IGA certification
• Additional experience with other areas of IAM, such as Multi-factor Authentication (MFA), passwordless, Privileged Access Management (PAM), and Public Key Infrastructure (PKI)

Benefits

• Fully Remote
• Company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks