Cyber Identity Systems Architect SSO
Cyber Identity Systems Architect SSO
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Join the NBCUniversal Operations and Technology (O&T) team and help drive strategy for the growing Identity and Access Management (IAM) service portfolio. The O&T IAM Architecture team is responsible for creating strategic solutions and setting the identity roadmap that supports the NBCUniversal enterprise and lines of business. This role is responsible for IAM service support and strategy. Youll be responsible for evaluating and developing onprem and cloudbased IAM services with the goal of reducing cyber risk where our personas devices and applications consume identity. Successful candidates will couple an advanced technical mindset with a balanced solution approach while applying knowledge flexibility and strong communication skills.
Responsibilities:
- Translate complex business requirements into IAM service functionality
- Develop highly scalable identity service architectures serving enterprise customer access and external partner requirements
- Produce technical solutions that meet NBCU business objectives and drive compliance with NBCUs information security goals
- Partner with technology and security teams across NBCU to provide technical expertise design guidance and drive best practices
- Catalog risk embedded in legacy authentication implementations and help define a path to industryaligned secure designs and services
- Create and deliver effective presentations that inform NBCUniversal Senior Leadership teams to drive business relevant information security decisions
- Lead product evaluations and new technology adoptions
- Maintain strong vendor relationships that drive partnership with NBCU
Qualifications :
Basic Requirements:
- Bachelors Degree or higher in Computer Science related field OR NonComputer related Degree with equivalent work experience
- 5 years experience in an identity architecture role
- 8 years experience designing solutions in IAM technical role(s) for large enterprise
- Indepth experience defining secure and hardened IAM solutions
- Strong communication and interpersonal skills; including negotiation facilitation and consensus building skills; Ability to influence persuade and manage polarities without direct control
- High degree of flexibility and ability to work with employees at all levels of the organization with diverse backgrounds
- Makes wise datainformed decisions finds and owns problems to closure
- Ability to balance the longterm big picture and shortterm implications of tactical decisions
- Possesses an innovative technical mindset with a focus on architecture strategy and design
- Strong desire to drive change
- Significant experience designing initial infrastructure onboarding of applications rolebased access controls policy and password management certifications workflows work items and rules
- Strong understanding of RBAC identity policies identity lifecycle automation and reporting password policies separation of duties user provisioning and approval workflows
- Experience working with modern and legacy enterprise authentication services (OpenID Connect (OIDC) OAuth2 SAML WS Fed Kerberos) and platforms (preferably Active Directory Entra ID AWS)
- Experience with SingleSignOn MultiFactor Authentication Passwordless Technologies Privileged Access Management (PAM) and Public Key Infrastructure (PKI)
Desired Characteristics:
- Experience architecting and delivering largescale Enterprise IAM service instances
- Experience with enterprise directory architecture including significant knowledge of Active Directory and Entra ID
- Experience developing and delivering Zero Trust architectural designs
- Experience with Venafi / Netwrix / CyberArk
- Experience with Google Cloud Platform (GCP) and Amazon Web Services (AWS)
- Experience with largescale ID Verification solutions for Enterprise and Consumer Identity solutions
- A current cybersecurity professional certification (such as CISSP) a current IGA certification
Additional Requirements:
- Fully Remote: This position has been designated as fully remote meaning that the position is expected to contribute from a nonNBCUniversal worksite most commonly an employees residence.
This position is eligible for company sponsored benefits including medical dental and vision insurance 401(k) paid leave tuition reimbursement and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. Salary range: $130000 $160000 (bonus eligible)
We are accepting applications for this position on an ongoing basis.
Additional Information :
As part of our selection process external candidates may be required to attend an inperson interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversals policy is to provide equal employment opportunities to all applicants and employees without regard to race color religion creed gender gender identity or expression age national origin or ancestry citizenship disability sexual orientation marital status pregnancy veteran status membership in the uniformed services genetic information or any other basis protected by applicable law.
If you are a qualified individual with a disability or a disabled veteran and require support throughout the application and/or recruitment process as a result of your disability you have the right to request a reasonable accommodation. You can submit your request to .
For LA County and City Residents Only: NBCUniversal will consider for employment
qualified applicants with criminal histories or arrest or conviction records in a manner
consistent with relevant legal requirements including the City of Los Angeles Fair Chance
Initiative For Hiring Ordinance the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act where applicable.
Remote Work :
Yes
Employment Type :
Fulltime
Employment Type
Remote
