Be an Early Applicant
At CDW, our purpose is to make technology work so people can do great things.
The Role
Own the security and identity architecture for CDW’s MyCDW ServiceNow platform. Lead consolidation of Entra, Okta, and ServiceNow authentication; architect SailPoint-to-Entra IGA migration; define RBAC, lifecycle, certification, governance, and compliance controls; and guide threat modeling, monitoring, risk reduction, and remediation. Partner across technology and compliance teams, lead IAM and security engineers, manage vendors, and develop strategic roadmaps for secure, cost-effective platform transformation.
Summary Generated by Built In
Description
The Principal Security & IAM Architect is responsible for designing and supporting the implementation of the security and identity architecture of the MyCDW platform - CDW Managed Services' unified ServiceNow environment serving thousands of customers and coworkers. This role owns the future-state access management model, the consolidation of fragmented identity platforms (Entra, Okta, and native ServiceNow authentication), and the security controls that protect customer and coworker access across the Managed Services estate. It ensures the security and identity architecture aligns with the organization's business strategy, regulatory obligations, and enterprise hardening standards, and drives the strategic planning, governance, and risk reduction required to operate MyCDW securely at scale.
What you will do
* Define and own the future-state security and access management architecture for the MyCDW ServiceNow platform, covering authentication, authorization, and identity lifecycle management for both customer and coworker users.
* Lead the consolidation of fragmented identity platforms (Entra, Okta, and native ServiceNow authentication) toward a unified, future-state identity model that reduces attack surface, duplicative controls, and licensing cost.
* Architect the SailPoint → Microsoft Entra ID Governance (IGA) migration and the RBAC and access-tier model for ServiceNow, aligning coworker identity to Entra IGA standards.
* Design access request, approval, certification, and lifecycle (joiner / mover / leaver) workflows with clear ownership and auditable controls.
* Ensure the platform and identity model meet security and compliance requirements, including PCI DSS v4.0.1 access-control requirements, SOC 2, and corporate security policies.
* Establish identity and security governance - decision rights, ownership frameworks, and standards - across ITSM processes and the MyCDW platform.
* Define a staged transition that decouples coworker identity (Entra IGA-aligned) from customer identity, minimizing customer disruption and avoiding repeated identity changes for the same customers.
* Partner with the Principal Applications Architect and the Integration & Automation Architect to ensure identity and security designs align to the platform's target-state architecture.
* Evaluate identity, security, and IGA technologies and products to determine their suitability and cost-effectiveness, including benchmarking, proof-of-concept projects, and risk/cost trade-off analysis.
* Implement security monitoring, threat detection, and identity analytics for predictive risk insights and platform health.
* Conduct security and identity risk assessments, threat modeling, and design reviews, and provide remediation guidance for technical debt carried forward from legacy environments.
* Lead, mentor, and set standards for the Managed Services security and IAM engineering team, including security engineers and IAM analysts.
* Effectively communicate and collaborate with development, engineering, infrastructure, compliance, and product stakeholders to ensure the security and identity vision is understood and implemented.
* Create and maintain documentation related to the security and identity architecture, roadmaps, design decisions, control mappings, and technical specifications.
* Resolve complex security and identity issues that arise during design, migration, and operations, providing guidance and solutions to overcome obstacles.
* Balance security requirements with budget and experience constraints to make cost-effective, risk-based decisions.
* Interact with identity and security technology vendors, negotiate contracts, and manage relationships to ensure the organization gets the best value.
* Anticipate and keep up with emerging security and identity threats, standards, and industry trends to recommend innovative, defensible solutions.
What we expect of you
* Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field and 10 years' experience in IT, including security architecture and identity & access management, OR 14 years' experience in IT, security, and IAM.
* Deep, hands-on expertise designing enterprise security and IAM architectures, including authentication, authorization, federation (SAML / OAuth / OIDC), SSO, MFA, and privileged access management.
* Strong, demonstrated experience with Microsoft Entra ID and Entra ID Governance (IGA), and with identity governance platforms such as SailPoint, ideally including migrations between them.
* Expertise in RBAC / ABAC design, access certification, and joiner / mover / leaver identity lifecycle automation.
* Strong knowledge of regulatory and compliance frameworks, particularly PCI DSS v4.0.1, SOC 2, and corporate security and hardening standards, with the ability to map controls to architecture.
* Experience securing SaaS and ITSM platforms (ServiceNow strongly preferred), including platform authentication models and integration security.
* Experience/research in Artificial Intelligence principles as applied to security - identity analytics, anomaly and threat detection, and the access governance of AI agents and automated workflows.
* Ability to develop and implement security and identity strategies that support organizational objectives while reducing risk and cost.
* Experience leading project teams from an architecture perspective, collaborating with stakeholders across departments, and influencing decision-making at a strategic level.
* Demonstrated ability to lead security transformation initiatives, drive risk reduction, and manage change effectively.
* Extensive and demonstrated understanding of network architecture, security principles, infrastructure management, and cloud security.
* Exceptional problem-solving skills and the ability to think strategically, anticipating threats and translating them into actionable, defensible plans aligned with enterprise-wide goals.
* Strong communication and interpersonal skills, including collaboration, leadership, influencing, and conflict resolution.
* Ability to work in a fast-paced, dynamic environment and manage multiple projects simultaneously.
* Proven track record designing and implementing large-scale, complex security and identity solutions.
* Extensive experience in multiple IT domains, such as applications, data, infrastructure, security, and cloud services.
* Relevant certifications such as CISSP, CISM, SailPoint, or Microsoft Identity & Access Administrator (SC-300), a plus.
* Master's degree, a plus. Pay range: $156,400 - $218,920 depending on experience and skill set Annual bonus target of 10% subject to terms and conditions of plan Benefits overview: https://cdw.benefit-info.com/ Salary ranges may be subject to geographic differentials
* CDW is committed to being an AI-fluent organization
* We're looking for people who bring curiosity, a learner's mindset, and a willingness to engage with ever-evolving technology and tools. We value adopting AI as a partner, openness to experimentation, and a shared interest in learning together on AI. Our goal is to create a culture where AI enhances- not replaces- human creativity and decision-making. You don't need to be an expert today; what matters is your readiness to explore, adapt, and grow with us as we integrate AI responsibly and effectively into our work.Additionally, CDW is committed to fostering an equitable, transparent, and respectful hiring process for all applicants. During our application process, our goal is to understand your experience, strengths, skills, and qualifications. As an AI forward company, we see AI not just as a tool, but as a catalyst for new ways of thinking, creating, and communicating. We encourage candidates to embrace an AI mindset, one that's curious, adaptive, and ready to explore what's possible. We welcome thoughtful use of AI to expand your perspective and elevate how you share your story, while ensuring your application remains rooted in your own background, judgment, and voice.
* About Us
* CDW is a Fortune 500 technology solutions provider that helps businesses, government, education, and healthcare organizations achieve what's possible through technology. What makes CDW different isn't just what we do- it's how we do it. At CDW we act as one- building trust, speaking candidly, and working together to achieve more. We play to win- focusing on what matters most and delivering for our customers. And we think forward- staying curious, moving fast, and continuously learning. We believe meaningful work happens when people feel supported, heard, and empowered to contribute. That's why we think of ourselves as coworkers, not just employees- working together to solve complex challenges and deliver real impact for our customers and communities. As a full-stack, full-lifecycle technology partner, CDW brings deep expertise, strong relationships, and broad industry knowledge to help turn ideas into outcomes. When you join CDW, you become part of a collaborative environment where your work matters, your growth is supported, and your contributions help shape what's next. Together, we deliver the full promise of what technology can do.
* Together, we Make Amazing Happen.
* CDW is an equal opportunity employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other basis prohibited by state and local law.
The Principal Security & IAM Architect is responsible for designing and supporting the implementation of the security and identity architecture of the MyCDW platform - CDW Managed Services' unified ServiceNow environment serving thousands of customers and coworkers. This role owns the future-state access management model, the consolidation of fragmented identity platforms (Entra, Okta, and native ServiceNow authentication), and the security controls that protect customer and coworker access across the Managed Services estate. It ensures the security and identity architecture aligns with the organization's business strategy, regulatory obligations, and enterprise hardening standards, and drives the strategic planning, governance, and risk reduction required to operate MyCDW securely at scale.
What you will do
* Define and own the future-state security and access management architecture for the MyCDW ServiceNow platform, covering authentication, authorization, and identity lifecycle management for both customer and coworker users.
* Lead the consolidation of fragmented identity platforms (Entra, Okta, and native ServiceNow authentication) toward a unified, future-state identity model that reduces attack surface, duplicative controls, and licensing cost.
* Architect the SailPoint → Microsoft Entra ID Governance (IGA) migration and the RBAC and access-tier model for ServiceNow, aligning coworker identity to Entra IGA standards.
* Design access request, approval, certification, and lifecycle (joiner / mover / leaver) workflows with clear ownership and auditable controls.
* Ensure the platform and identity model meet security and compliance requirements, including PCI DSS v4.0.1 access-control requirements, SOC 2, and corporate security policies.
* Establish identity and security governance - decision rights, ownership frameworks, and standards - across ITSM processes and the MyCDW platform.
* Define a staged transition that decouples coworker identity (Entra IGA-aligned) from customer identity, minimizing customer disruption and avoiding repeated identity changes for the same customers.
* Partner with the Principal Applications Architect and the Integration & Automation Architect to ensure identity and security designs align to the platform's target-state architecture.
* Evaluate identity, security, and IGA technologies and products to determine their suitability and cost-effectiveness, including benchmarking, proof-of-concept projects, and risk/cost trade-off analysis.
* Implement security monitoring, threat detection, and identity analytics for predictive risk insights and platform health.
* Conduct security and identity risk assessments, threat modeling, and design reviews, and provide remediation guidance for technical debt carried forward from legacy environments.
* Lead, mentor, and set standards for the Managed Services security and IAM engineering team, including security engineers and IAM analysts.
* Effectively communicate and collaborate with development, engineering, infrastructure, compliance, and product stakeholders to ensure the security and identity vision is understood and implemented.
* Create and maintain documentation related to the security and identity architecture, roadmaps, design decisions, control mappings, and technical specifications.
* Resolve complex security and identity issues that arise during design, migration, and operations, providing guidance and solutions to overcome obstacles.
* Balance security requirements with budget and experience constraints to make cost-effective, risk-based decisions.
* Interact with identity and security technology vendors, negotiate contracts, and manage relationships to ensure the organization gets the best value.
* Anticipate and keep up with emerging security and identity threats, standards, and industry trends to recommend innovative, defensible solutions.
What we expect of you
* Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field and 10 years' experience in IT, including security architecture and identity & access management, OR 14 years' experience in IT, security, and IAM.
* Deep, hands-on expertise designing enterprise security and IAM architectures, including authentication, authorization, federation (SAML / OAuth / OIDC), SSO, MFA, and privileged access management.
* Strong, demonstrated experience with Microsoft Entra ID and Entra ID Governance (IGA), and with identity governance platforms such as SailPoint, ideally including migrations between them.
* Expertise in RBAC / ABAC design, access certification, and joiner / mover / leaver identity lifecycle automation.
* Strong knowledge of regulatory and compliance frameworks, particularly PCI DSS v4.0.1, SOC 2, and corporate security and hardening standards, with the ability to map controls to architecture.
* Experience securing SaaS and ITSM platforms (ServiceNow strongly preferred), including platform authentication models and integration security.
* Experience/research in Artificial Intelligence principles as applied to security - identity analytics, anomaly and threat detection, and the access governance of AI agents and automated workflows.
* Ability to develop and implement security and identity strategies that support organizational objectives while reducing risk and cost.
* Experience leading project teams from an architecture perspective, collaborating with stakeholders across departments, and influencing decision-making at a strategic level.
* Demonstrated ability to lead security transformation initiatives, drive risk reduction, and manage change effectively.
* Extensive and demonstrated understanding of network architecture, security principles, infrastructure management, and cloud security.
* Exceptional problem-solving skills and the ability to think strategically, anticipating threats and translating them into actionable, defensible plans aligned with enterprise-wide goals.
* Strong communication and interpersonal skills, including collaboration, leadership, influencing, and conflict resolution.
* Ability to work in a fast-paced, dynamic environment and manage multiple projects simultaneously.
* Proven track record designing and implementing large-scale, complex security and identity solutions.
* Extensive experience in multiple IT domains, such as applications, data, infrastructure, security, and cloud services.
* Relevant certifications such as CISSP, CISM, SailPoint, or Microsoft Identity & Access Administrator (SC-300), a plus.
* Master's degree, a plus. Pay range: $156,400 - $218,920 depending on experience and skill set Annual bonus target of 10% subject to terms and conditions of plan Benefits overview: https://cdw.benefit-info.com/ Salary ranges may be subject to geographic differentials
* CDW is committed to being an AI-fluent organization
* We're looking for people who bring curiosity, a learner's mindset, and a willingness to engage with ever-evolving technology and tools. We value adopting AI as a partner, openness to experimentation, and a shared interest in learning together on AI. Our goal is to create a culture where AI enhances- not replaces- human creativity and decision-making. You don't need to be an expert today; what matters is your readiness to explore, adapt, and grow with us as we integrate AI responsibly and effectively into our work.Additionally, CDW is committed to fostering an equitable, transparent, and respectful hiring process for all applicants. During our application process, our goal is to understand your experience, strengths, skills, and qualifications. As an AI forward company, we see AI not just as a tool, but as a catalyst for new ways of thinking, creating, and communicating. We encourage candidates to embrace an AI mindset, one that's curious, adaptive, and ready to explore what's possible. We welcome thoughtful use of AI to expand your perspective and elevate how you share your story, while ensuring your application remains rooted in your own background, judgment, and voice.
* About Us
* CDW is a Fortune 500 technology solutions provider that helps businesses, government, education, and healthcare organizations achieve what's possible through technology. What makes CDW different isn't just what we do- it's how we do it. At CDW we act as one- building trust, speaking candidly, and working together to achieve more. We play to win- focusing on what matters most and delivering for our customers. And we think forward- staying curious, moving fast, and continuously learning. We believe meaningful work happens when people feel supported, heard, and empowered to contribute. That's why we think of ourselves as coworkers, not just employees- working together to solve complex challenges and deliver real impact for our customers and communities. As a full-stack, full-lifecycle technology partner, CDW brings deep expertise, strong relationships, and broad industry knowledge to help turn ideas into outcomes. When you join CDW, you become part of a collaborative environment where your work matters, your growth is supported, and your contributions help shape what's next. Together, we deliver the full promise of what technology can do.
* Together, we Make Amazing Happen.
* CDW is an equal opportunity employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other basis prohibited by state and local law.
Skills Required
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field plus 10 years of IT experience including security architecture and IAM, or 14 years of IT, security, and IAM experience
- Hands-on enterprise security and IAM architecture experience covering authentication, authorization, federation, SAML, OAuth, OIDC, SSO, MFA, and privileged access management
- Strong experience with Microsoft Entra ID, Entra ID Governance, and identity governance platforms such as SailPoint, ideally including migrations
- Expertise in RBAC, ABAC, access certification, and joiner, mover, leaver lifecycle automation
- Knowledge of PCI DSS v4.0.1, SOC 2, and corporate security and hardening standards, including mapping controls to architecture
- Experience securing SaaS and ITSM platforms, with ServiceNow strongly preferred
- Experience applying artificial intelligence principles to security, including identity analytics, anomaly detection, threat detection, and AI-agent access governance
- Ability to develop and implement security and identity strategies that reduce organizational risk and cost
- Experience leading project teams from an architecture perspective and influencing cross-functional strategic decisions
- Demonstrated experience leading security transformation initiatives and managing organizational change
- Extensive understanding of network architecture, security principles, infrastructure management, and cloud security
- Proven experience designing and implementing large-scale, complex security and identity solutions
- Experience across multiple IT domains, including applications, data, infrastructure, security, and cloud services
- Strong communication, collaboration, leadership, influencing, problem-solving, and conflict-resolution skills
- Ability to manage multiple projects in a fast-paced, dynamic environment
- CISSP, CISM, SailPoint, or Microsoft Identity and Access Administrator SC-300 certification
- Master’s degree
What the Team is Saying
Phil
Practice Vice President
Mason
Sales Intern
Kevin Denison
Director, Strategic Initiatives — U.S. Commercial
Christine A. Leahy
Chair and Chief Executive Officer
CDW Compensation & Benefits Highlights
-
Healthcare Strength — Health coverage is described as comprehensive, with Blue Cross Blue Shield medical options alongside dental, vision, life and disability insurance, plus FSAs/HSAs and mental health/EAP resources. Feedback suggests these core plans form a solid backbone of the package.
-
Parental & Family Support — Family-focused programs include expanded paid parental leave for primary caregivers, adoption assistance, fertility support, childcare and eldercare resources, and onsite Mother’s Rooms. These offerings are prominently featured along with flexibility and work‑life supports.
-
Inclusive Benefits Coverage — Coverage specifically calls out transgender healthcare and dependent care options in addition to mental health resources. This breadth indicates attention to inclusive benefits that address varied employee needs.
CDW Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
CDW Corporation is a leading multi-brand provider of information technology solutions to business, government, education and healthcare customers in the United States, the United Kingdom and Canada. A Fortune 500 company and member of the S&P 500 Index, CDW helps its customers to navigate an increasingly complex IT market and maximize return on their technology investments. For more information about CDW, please visit www.CDW.com. Our broad array of products and services range from hardware and software to integrated IT solutions such as security, cloud, hybrid infrastructure and digital experience.
Why Work With Us
Trust, connection and commitment are at the heart of how we work together to deliver for our customers. It’s why we’re coworkers, not just employees. Coworkers who genuinely believe in supporting our customers and one another. We collectively forge our path forward with a level of commitment that speaks to who we are and where we’re headed.
Gallery
CDW Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
CDW is committed to offering a high quality, flexible work experience centered around connection, collaboration, and coworker well-being. Our flexible hybrid approach enables coworkers to get the best of working from home and being together.
Typical time on-site:
Not Specified
