Apply on Employer Site

Sony Interactive Entertainment · 12 hours ago

Principal Identity Architect

United States, San Diego, CA

Full-time

Hybrid

Lead/Staff

$220K/yr - $329K/yr

15+ years exp

Sony Interactive Entertainment is a global leader in entertainment producing the PlayStation family of products and services. They are seeking a Principal Identity Architect to establish the strategy for identity management and evolve the organization’s identity management capabilities, focusing on architecting and managing identity services across hybrid environments.

Consumer GoodsMusicVideo Games

Work & Life Balance

H1B Sponsor Likely

Responsibilities

Lead the strategy, design and implementation of enterprise-wide identity and access management (IAM) solutions, with a strong focus on Active Directory and Microsoft Entra (Azure AD)

Architect and design hybrid identity solutions across on-premises and cloud platforms, including multi-forest AD environments and Azure AD integration

Lead the design of enterprise role models (RBAC/ABAC), separation of duties (SoD), and least-privilege access frameworks

Define policies, workflows, and controls for access request, approval, and certification processes

Lead troubleshooting and root-cause analysis for complex identity issues across the enterprise

Provide subject matter expertise in the deployment and management of Active Directory, including replication, Group Policy, DNS, trusts, Kerberos and secure AD hardening practices

Drive the adoption of modern authentication protocols such as OAuth, OIDC, SAML, and Kerberos

Modernize access solutions with Zero Trust Authentication architectures

Lead initiatives to improve identity security posture through privileged access management (PAM), least-privilege models, and conditional access policies in Azure AD

Architect and implement Microsoft Entra ID Governance and Conditional Access policies to ensure compliance with regulatory requirements (e.g., SOX, GDPR)

Design and implement Single Sign-On (SSO) solutions and multi-factor authentication (MFA) strategies across enterprise and cloud applications

Collaborate with security teams to integrate identity solutions with SIEM and security monitoring platforms for advanced threat detection and incident response

Serve as a key advisor for mergers, acquisitions, and cloud migrations, ensuring seamless integration of identity and access management systems

Qualification

Active DirectoryMicrosoft Entra (Azure AD)Authentication ProtocolsIAM SolutionsPrivileged Access Management (PAM)Identity GovernanceAzure InfrastructurePowerShell & AutomationHybrid IdentityMonitoring & TroubleshootingInnovationLeadershipCommunicationProblem-solvingCollaborationStrategic ThinkingProject ManagementAdaptabilityCustomer Focus

Required

Bachelor's or Master's degree in Computer Science, Information Technology, or a related experience

15+ years of experience in IT infrastructure with a focus on identity and access management

10+ years of hands-on experience with Active Directory and Azure AD in an enterprise setting

Expert-level knowledge of Active Directory (AD): Extensive experience with AD forest/domain design, GPO management, AD replication, trusts, DNS, and AD hardening best practices

Microsoft Entra (Azure AD): Deep experience in managing Azure AD environments, hybrid identity management (Azure AD Connect), Conditional Access, Identity Governance, and application management

Strong expertise in authentication protocols (OAuth 2.0, OIDC, SAML, Kerberos, NTLM), PKI, and MFA solutions

Hands-on experience with Privileged Access Management (PAM), Identity Governance, Role-Based Access Control (RBAC), and managing user lifecycle automation

Deep expertise in IGA platforms (SailPoint, Saviynt, Azure AD Identity Governance, or comparable)

Proven ability to design and deliver large-scale IGA programs supporting complex global organizations

Knowledge of Zero Trust principles, Conditional Access policies, identity protection tools, and integration with security systems (SIEM, SOAR)

Proficiency in Azure architecture, including virtual networks, virtual machines, Azure AD, Azure Identity Protection, and Azure Key Vault

Advanced skills in PowerShell scripting for automation of identity-related tasks and configuration

Experience integrating on-prem AD with cloud services using technologies like Azure AD Connect, ADFS, and third-party federation services

Proficiency with monitoring tools like Azure Monitor, Log Analytics, and troubleshooting tools for AD and Azure AD

Understanding of and exceptional skills in several of the following areas: cloud computing, microservices, distributed systems, data structure, operating system internals, storage systems, embedded system, and databases

Mastery of agile methodologies, code reviews, testing frameworks, CI/CD tools and DevOps practices

Proven ability to Lead some of the most complex and demanding programs, Demonstrates the ability to lead technical teams, provide mentorship, and inspire innovation within cross-functional teams

Excellent verbal and written communication skills with the ability to translate complex technical concepts into business terms for stakeholders

Strong analytical and troubleshooting skills, with a focus on root cause analysis and resolution of identity-related issues

Ability to work across diverse teams including IT security, infrastructure, application developers, and external vendors

Visionary mindset with the ability to think strategically about identity architecture and align it with future business goals

Experience in leading complex identity management projects from concept to completion, ensuring timelines, budgets, and stakeholder satisfaction

Ability to manage ambiguity and adjust to changing priorities, technologies, and business requirements

Strong focus on user experience and stakeholder satisfaction, balancing security and ease of use in identity solutions

Continuous learning mindset and the ability to adopt new technologies and processes that drive efficiency and security

Preferred

Professional certifications like Microsoft Certified: Identity and Access Administrator Associate, Azure Solutions Architect Expert, or similar are highly desirable

Familiarity with security frameworks like NIST, ISO 27001, or CIS benchmarks is a plus

Benefits

Medical

Dental

Vision

Matching 401(k)

Paid time off

Wellness program

Coveted employee discounts for Sony products

Bonus package

Company

Sony Interactive Entertainment

Sony Interactive Entertainment is responsible for the PlayStation brand and family of products and services.

Founded in 1993

San Mateo, California, USA

10001+ employees

https://www.sie.com

H1B Sponsorship

Sony Interactive Entertainment has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2025 (290)

2024 (258)

2023 (208)

2022 (279)

2021 (210)

2020 (213)