Apply on Employer Site

United Airlines · 2 weeks ago

Principal Architect - Identity & Access Management Workforce

Chicago, IL

Full-time

Onsite

Senior Level, Lead/Staff

$137K/yr - $179K/yr

7+ years exp

United Airlines is on a path to becoming the best airline in aviation history, seeking to lead the industry in cyber safety and security. The Principal Architect – Workforce Identity & Access Management will design and implement secure identity platforms, working closely with various teams to integrate identity security into product lifecycles and optimize user experiences.

HospitalityIn-Flight EntertainmentService IndustryTransportationTravel

No H1B

Responsibilities

Leads design, technical innovation, and documentation of Workforce Identity & Access Management platform architecture and roadmap

Translates business requirements into technical architecture

Leads the design, definition and implementation of risk-based authentication and authorization identity security best practices and updating

Champions Cybersecurity and Digital Risk standards and policies to ensure clarity with technology teams

Recommends and implements products/services that support workforce identity operational needs and security requirements, considering performance, compliance, and business continuity needs that ensure performant, scalable, highly available, and resilient IAM capabilities

Promotes and contributes to the continuous improvement of security culture and strategy based on business objectives and security priorities

Participates in capacity planning, formulating and contributing to Objectives and Key Results

Serves as a department Subject Matter Expert, and mentors, trains, and coaches junior members of the IAM team

Qualification

Identity ManagementAuthentication ProtocolsSecurity ArchitectureZero Trust PrinciplesCloud Identity PlatformsRisk-based AuthenticationIAM Tooling DevelopmentNIST Cybersecurity FrameworkCollaborationCommunication SkillsMentoringProblem Solving

Required

Bachelor's degree (STEM field preferred)

7+ years of experience working with cloud/hybrid-based identity and zero-trust enablement platforms related to ForgeRock, Okta, Ping Identity

Experience specific to Microsoft Entra and Duo preferred

Deep expertise in identity management, authentication, authorization, and security architecture, including technologies like SSO, MFA, SAML, OAuth2, OIDC, FIDO, and Zero Trust principles

Hands-on experience developing enterprise security architecture; Demonstrated ability to build custom IAM tooling for automation, integration, and enhanced capabilities and working with security development lifecycle processes and tools

Strong collaborator, able to influence and build productive relationships across technical and business teams

Ability to effectively articulate security and identity concepts to technical and non-technical audiences

Familiarity with NIST Cybersecurity Framework, PCI and SOX requirements

Must be legally authorized to work in the United States for any employer without sponsorship

Successful completion of interview required to meet job qualification

Reliable, punctual attendance is an essential function of the position

Preferred

Master's degree in computer science, Engineering, or Cybersecurity

Certifications such as CISM, CISSP, CRISC, CEH

Minimum of 10 years of experience in related field, including any combination of the following: threat modeling, secure coding, identity management and authentication, security architecture, data science, machine learning, cryptography, system administration and network security, cloud computing, governance risk and compliance

10+ years of experience working with an IAM platforms or technology like Oracle Access Manager, AWS IAM, Azure Active Directory, Zscaler

Demonstrated ability to set technical direction and lead organizations through complex architectural transformations

Proven experience effectively leveraging AI technologies for identity management, such as ML-based access anomaly detection and generative AI for governance

Airline Industry experience

Familiarity with transportation sector specific regulatory and compliance requirements

Experience in leading/architecting large-scale identity transformation projects

Security threat modeling and risk assessments

Experience implementing Zero Trust architecture

Experience with large language models for security automation

Experience leading technical teams and mentoring IAM professionals

Experience with multi-cloud environments