Sr Cyber Systems Architect (Authentication)

Company Description

NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our global theme park destinations, consumer products, and experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, NBC Sports, Telemundo, NBC Local Stations, Bravo, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through our powerhouse film and television studios, including Universal Pictures, DreamWorks Animation, and Focus Features, and the four global television studios under the Universal Studio Group banner, and operate industry-leading theme parks and experiences around the world through Universal Destinations & Experiences, including Universal Orlando Resort, home to Universal Epic Universe, and Universal Studios Hollywood. NBCUniversal is a subsidiary of Comcast Corporation. Visit www.nbcuniversal.com for more information.

Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.

Job Description

Join the NBCUniversal Operations and Technology (O&T) team and help drive strategy for the growing Identity and Access Management (IAM) service portfolio. The O&T IAM Architecture team is responsible for creating strategic solutions and setting the identity roadmap that supports the NBCUniversal enterprise and lines of business. This role is responsible for IAM service support and strategy. You'll be responsible for evaluating and developing on-prem and cloud-based IAM services with the goal of reducing cyber risk where our personas, devices, and applications consume identity. Successful candidates will couple an advanced technical mindset with a balanced solution approach, while applying knowledge, flexibility, and strong communication skills.

Responsibilities

• Serve on a distributed security and technology team responsible for establishing IAM solutions.
• Lead the design and implementation of IAM capabilities including SSO, directory services, Zero Trust access, MFA, PAM, automation, and behavior‑analytics systems.
• Craft resilient and scalable identity strategies that align with cybersecurity policies and governance structure
• Collaborate with stakeholders to define IAM requirements and design comprehensive solutions for business needs
• Develop highly scalable identity service architectures serving enterprise, customer access, and external partner requirements
• Produce technical solutions that meet NBCU's business objectives and drive compliance with NBCU’s information security goals
• Partner with technology and security teams across NBCU to provide technical expertise, design guidance, and drive best practices
• Create and deliver effective presentations that inform NBCUniversal Senior Leadership teams to drive business relevant information security decisions
• Lead product evaluations and new technology adoptions
• Maintain strong vendor relationships that drive partnership with NBCU
• Create technical documentation with architecture diagrams, configuration guides and operational practices
• Make recommendations to improve automation efficiency, security practices and end user experience
• Execute tactical requests along with supporting strategic vision for rigorous and scalable IAM control

Qualifications

Basic Requirements:

• 5+ years’ experience in an identity architecture role
• 5+ years’ experience designing solutions in IAM technical role(s) for large enterprise
• Bachelor’s degree or higher in computer science, information security, or a non‑computer‑related field, or equivalent work experience
• Strong communication and interpersonal skills; including negotiation, facilitation, and consensus building skills; Ability to influence, persuade, and manage polarities without direct control
• Significant experience designing initial infrastructure, administering IAM systems, access controls, security and risk management, and governance fundamentals
• Strong understanding of RBAC, identity policies, identity lifecycle automation and reporting, password policies, separation of duties, user provisioning, and approval workflows
• Experience working with modern and legacy enterprise authentication services (OpenID Connect (OIDC), OAuth2, SAML, Kerberos) and platforms (preferably Active Directory, Entra ID