Architect, Identity Security

At DanaheranIdentity SecurityArchitectis responsible fordesigningand implementingidentity-security architecture across allDanaherdigital principles.In this role enterprise strategy is setcollaborativelybybusiness IT andsecuritystakeholders. Theroleshapes and refines the identity-securityrequirements then owns turning it into adoptable designs for authentication authorization lifecycle governance federation conditional access and identity threat detection.The role requires that individualsworkbothindependently and integrates withstakeholders inHR ITSM infrastructure cloud and application teams.

This position reports to theDirectorIdentity Security&Privileged Access Managementand is part of theenterprise-wide Danaher Information Security (DIS)Identity & Privileged Access Managementteam; this position is remote.

In this role you will have the opportunity to:

• Architect identity security across workforce privileged machine customer and partner identities: authentication authorization lifecycle IGA federation conditional access ITDR.

• Design safe authenticator recovery and service-desk anti-social-engineeringcontrols.

• Engineer/prototype integration patterns (HRIS directories IdP SIEM/UEBA) tovalidatedesigns.

• Design the sustainability & governance model: role/entitlement models identity analytics and architecture review cadence.

The essential requirements of the job include:

• Bachelors degree in Cybersecurity Computer Science Information Technology Engineering or related field.

• 9 years of cybersecurity experience with a focus on identity and access management (GCRF P4 Bachelors-track minimum; recommended pending Comp sign-off).

• Experience designing identity security architecture across workforce privileged machine or customer identities including authentication authorization Joiner-Mover-Leaver lifecycle role/entitlement modeling access certification and Segregation of Duties.

• Hands-on experience with enterprise identity platforms (such as Microsoft Entra ID Okta Ping SailPoint or Saviynt) and identity protocols (SAML OIDC OAuth SCIM).

• Experience working independently with HR IT service management infrastructure and application teams to design and govern identity controls.

It would be a plus if you alsopossesspreviousexperience in:

• Experience with identity threat detection and response (ITDR) identity analytics/UEBA or non-human / machine identity governance (NHI).

• CISSP CISM Microsoft SC-300 or a relevant IAM platform certification.