[Hiring] Principal IAM/PAM Security Architect @Cotiviti

Role Description

The Principal IAM/PAM Security Architect defines and evolves security architecture for identity and privileged access across a large, complex, multi-domain environment spanning Active Directory, Microsoft Entra ID, and Okta, as well as cloud-native identities across AWS, Azure, GCP, and OCI. This role sets security standards for each identity environment, leads the definition of emerging Agentic Identity standards for AI agents and other non-human identities, defines requirements for and drives implementation of the Delinea PAM platform, and owns secrets governance enterprise-wide.

• Define and maintain security architecture and standards across identity environments.
• Serve as the architectural authority for identity security decisions.
• Lead architecture reviews and risk assessments for new identity integrations.
• Define enterprise standards for Agentic Identity governance and lifecycle.
• Track the evolving agentic AI and non-human identity landscape.
• Define security requirements for the Delinea PAM platform.
• Design privileged access controls across on-premises and cloud environments.
• Produce audit-ready evidence of PAM controls aligned to frameworks.
• Own enterprise policy and lifecycle standards for all secrets.
• Drive detection and remediation of hardcoded, unmanaged, or leaked secrets.
• Participate in architecture review boards and governance forums.
• Maintain reference architectures and standards documentation.
• Advise stakeholders on identity risk and control design.
• Complete all responsibilities as outlined in the annual performance review.
• Complete all special projects and other duties as assigned.

Qualifications

• Bachelor’s degree in a technology discipline or equivalent professional experience.
• 8+ years of experience in identity and access management or security architecture roles.
• Demonstrated experience designing security standards across hybrid identity environments.
• Hands-on experience with a PAM platform (Delinea preferred).
• Experience with Active Directory, Microsoft Entra ID, and Okta.
• Knowledge of identity and access models across AWS, Azure, GCP, and OCI.
• Understanding of AI agent architectures and non-human identity governance.
• Hands-on experience with Secret Server and Privilege Manager.
• Familiarity with authentication and authorization protocols.
• Knowledge of security and compliance frameworks.
• Experience with automation and DevOps integration.
• Strong analytical and architectural problem-solving skills.
• Relevant security certifications preferred (e.g., CISSP, CISM, SABSA, CCSP).

Requirements

• Must be able to provide high-speed internet access and office setup.
• Must be able to provide a dedicated, secure work area.
• Remaining in a stationary position, often standing or sitting for prolonged periods.
• Repeating motions that may include the wrists, hands, and/or fingers.
• No adverse environmental conditions expected.

Benefits

• Base compensation ranges from $160,000 to $190,000 per year.
• Eligible for discretionary bonus consideration.
• Competitive benefits package including medical, dental, vision, disability, and life insurance coverage.
• 401(k) savings plans.
• Paid family leave.
• 9 paid holidays per year.
• 17-27 days of Paid Time Off (PTO) per year.