Senior IAM Cybersecurity Architect

Your Opportunity:

Health Shared Services (HSS) - Technology Services has an exciting opportunity for a highly skilled Senior Identity and Access Management (IAM) Cybersecurity Architect to join the Technology Architecture & Solutions (TAS) team. The Senior IAM Cybersecurity Architect will play a key role in strengthening the organization's identity security architecture and cybersecurity posture. This position will provide architectural leadership in protecting enterprise identity services, directories, privileged accounts, authentication mechanisms and access infrastructure against evolving cyber threats. Working across on-premises, public cloud environments, the position will define and evolve identity security architectures, technical controls and reference patterns aligned with enterprise cybersecurity strategies, Zero Trust principles and regulatory requirements. The role will focus on preventing, detecting and responding to identity-based threats while ensuring the security, resilience and recoverability of identity services supporting mission-critical clinical and corporate operations. The successful candidate will bring extensive experience in identity security and cybersecurity architecture, strong technical knowledge of enterprise identity platforms and security controls, and the ability to engage senior leaders, architects, engineers, security operations and operational teams to translate cybersecurity requirements into practical and sustainable solutions. The TAS team provides architecture and engineering services across AHS Technology Services, including End User Devices, Unified Communications (Voice/Video), Network, Compute, Storage, Database, Identity and Access Management, Cloud, AI, Security Technical Controls and Facilities Technology, foundationally supporting clinical and corporate service delivery.

Description:

Senior IAM Cybersecurity Architect is responsible for: Identity security strategy. Define identity security architecture, standards and roadmap; assess maturity, threats and gaps; set priorities. Security controls and Zero Trust. Define controls based on Zero Trust, least privilege and defence-in-depth. Establish patterns for authentication, authorization, federation, SSO, MFA, passwordless and conditional access. Secure human and non-human identities, including service, application and workload accounts, credentials, certificates and secrets. Hybrid identity and directories. Architect Active Directory, Entra ID and hybrid identity, including directory sync, trust and app integration. Guide directory hardening, administrative isolation, identity tiering and protection from credential theft, privilege escalation and lateral movement. Privileged access and threat protection. Architect PAM, including credential vaulting, session monitoring, JIT access, privileged workstations and third-party access. Define identity threat models, attack-path analysis and controls against identity compromise and privilege misuse. Define ITDR and SIEM/SOAR integration for identity threat detection and response. Cyber recovery and resilience. Define identity recovery architecture, protected backups, isolated recovery, emergency administration, redundancy and high availability; ensure continuity and DR for critical services. Assurance and leadership. Review IAM architecture and controls; guide remediation of vulnerabilities, audit findings and control gaps. Integrate cybersecurity, privacy and regulatory requirements; ensure auditability, risk management and exception processes. Promote security automation and Identity-as-Code/IaC using scripts and APIs. Guide IAM and delivery teams; communicate architecture decisions and risks to leaders.