Principal DITO Architect

Architect and drive identity strategy and roadmap across enterprise environments, designing scalable solutions for authentication, authorization, federation, SSO, MFA, PAM, IGA, and directory services that align with business needs and a Zero Trust approach.
Design and implement identity integrations and lifecycle processes (SCIM, OAuth/OIDC, SAML, custom APIs) for cloud and on prem platforms using leading tools (e.g., Azure AD, Okta, Ping, ForgeRock, SailPoint, CyberArk), ensuring reliable provisioning, deprovisioning, and cross domain federation.
Define identity governance, access models, and controls (RBAC, ABAC, entitlement certification, role mining), embed identity into DevSecOps and infrastructure-as-code patterns, and automate policy enforcement, logging, and audit trails to support operational scalability and compliance.
Ensure alignment with major security frameworks and regulatory requirements (NIST CSF, ISO 27001, CIS Controls, SOC2, GDPR, PCI), lead risk assessments and control implementations, produce architecture artifacts and guidance, and collaborate with stakeholders to measure identity program maturity and outcomes.