Full-Time Cyber Identity Systems Architect (SSO)

Join the NBCUniversal Operations and Technology (O&T) team and help drive strategy for the growing Identity and Access Management (IAM) service portfolio.

The O&T IAM Architecture team is responsible for creating strategic solutions and setting the identity roadmap that supports the NBCUniversal enterprise and lines of business. This role is responsible for IAM service support and strategy.

You'll be responsible for evaluating and developing on-prem and cloud-based IAM services with the goal of reducing cyber risk where our personas, devices, and applications consume identity.

Successful candidates will couple an advanced technical mindset with a balanced solution approach, while applying knowledge, flexibility, and strong communication skills.

1. Responsibilities:
2. Translate complex business requirements into IAM service functionality
3. Develop highly scalable identity service architectures serving enterprise, customer access, and external partner requirements
4. Produce technical solutions that meet NBCU business objectives and drive compliance with NBCU’s information security goals
5. Partner with technology and security teams across NBCU to provide technical expertise, design guidance, and drive best practices
6. Catalog risk embedded in legacy authentication implementations and help define a path to industry-aligned secure designs and services
7. Create and deliver effective presentations that inform NBCUniversal Senior Leadership teams to drive business relevant information security decisions
8. Lead product evaluations and new technology adoptions
9. Maintain strong vendor relationships that drive partnership with NBCU

1. Basic Requirements:
2. Bachelor's Degree or higher in Computer Science related field OR Non-Computer related Degree with equivalent work experience
3. 5+ years’ experience in an identity architecture role
4. 8+ years’ experience designing solutions in IAM technical role(s) for large enterprise
5. In-depth experience defining secure and hardened IAM solutions
6. Strong communication and interpersonal skills; including negotiation, facilitation, and consensus building skills; Ability to influence, persuade, and manage polarities without direct control
7. High degree of flexibility and ability to work with employees at all levels of the organization with diverse backgrounds
8. Makes wise, data-informed decisions, finds and owns problems to closure
9. Ability to balance the long-term big picture and short-term implications of tactical decisions
10. Possesses an innovative technical mindset with a focus on architecture, strategy, and design
11. Strong desire to drive change
12. Significant experience designing initial infrastructure, on-boarding of applications, role-based access controls, policy and password management, certifications, workflows, work items and rules
13. Strong understanding of RBAC, identity policies, identity lifecycle automation and reporting, password policies, separation of duties, user provisioning, and approval workflows
14. Experience working with modern and legacy enterprise authentication services (OpenID Connect (OIDC), OAuth2, SAML, WS Fed, Kerberos) and platforms (preferably Active Directory, Entra ID, AWS)
15. Experience with Single-Sign-On, Multi-Factor Authentication, Passwordless Technologies, Privileged Access Management (PAM), and Public Key Infrastructure (PKI)

• Experience architecting and delivering large-scale Enterprise IAM service instances
• Experience with enterprise directory architecture, including significant knowledge of Active Directory and Entra ID
• Experience developing and delivering Zero Trust architectural designs
• Experience with Venafi / Netwrix / CyberArk
• Experience with Google Cloud Platform (GCP) and Amazon Web Services (AWS)
• Experience with large-scale ID Verification solutions for Enterprise and Consumer Identity solutions

• Additional Requirements:

• Fully Remote: This position has been designated as fully remote, meaning that the position is expected to contribute from a non-NBCUniversal worksite, most commonly an employee’s residence.
• This position is eligible for company sponsored benefits
• Salary range: $130,000 - $160,000 (bonus eligible)
• We are accepting applications for this position on an ongoing basis. As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision.

Additional details and information about the role can be found in the original job posting.

What is the last date for applying to the job?

Which countries are accepted for this remote job?