Join Deloitte's Cyber practice as an Associate Director in IAM Security. You will play a pivotal role in designing and maintaining robust security architectures, ensuring the protection of valuable assets. This position offers the opportunity to shape cyber risk management strategies and leverage new technologies to address evolving threats. Explore a career where you can be secure, vigilant, and resilient.

Develop and uphold comprehensive security architectures for Identity and Access Management (IAM). Integrate security seamlessly into solutions from conception through production in collaboration with engineering teams. Establish and enforce security architecture standards, including reference designs for identity, network, application, and infrastructure components relevant to IAM. Evaluate, recommend, and drive the adoption of cutting-edge security tools and technologies. Conduct thorough reviews of designs and threat models to identify security vulnerabilities and guide remediation efforts within IAM systems. Create secure design patterns specifically tailored for IAM, alongside detailed documentation, diagrams, and guidelines to educate teams on security best practices. Provide architectural insights and design modifications to support incident response and prevent future occurrences.

A Bachelor's degree in Computer Science, Security, or a related field is required, with an advanced degree being preferred. Possess at least 7 years of information security experience, with a significant focus on architect or design roles. Demonstrate a deep understanding of security principles across various layers. Familiarity with architecture frameworks like TOGAF and SABSA, and protocols such as OAuth, SAML, and Kerberos is essential. Practical experience with security tooling including WAF, CASB, Cloud Security Posture Management, and SIEM is necessary. Ability to translate high-level security requirements into scalable, modular designs is critical, complemented by excellent documentation skills. Relevant security certifications such as SABSA, CISSP-ISSAP, or TOGAF are advantageous. Exposure to enterprise architecture, microservices, and cloud/hybrid environments is beneficial. Experience designing security for regulated industries like finance or healthcare is a plus. Publishing thought leadership or speaking at security conferences is desirable.