This is a remote position.
Position Description:
The ServiceNow Identity Security Technical Architect is responsible for defining, designing, and governing enterprise-scale identity security architectures for Templar Shield clients. This role owns the technical and architectural direction of identity security programs, leveraging ServiceNow and the Veza authorization visibility platform to provide continuous insight into identity permissions, risk, and access relationships across complex enterprise environments.
This role operates at the intersection of identity governance, authorization visibility, cybersecurity operations, and enterprise architecture. The Identity Security Technical Architect works directly with client executives, security leadership, enterprise architects, and delivery teams to define identity security strategies, establish scalable architectures, and ensure implementations are secure, auditable, and aligned with regulatory and business requirements.
Primary Responsibilities:
Identity Security Architecture & Strategy
- Own the end-to-end architecture for enterprise identity security programs, including identity governance, authorization visibility, and access analytics.
- Define identity security strategies integrating ServiceNow, Veza, and adjacent cybersecurity platforms.
- Design authorization graph architectures mapping assigned versus effective access, transitive permissions, and privilege inheritance.
- Establish governance frameworks covering human identities, non-human identities, service accounts, APIs, machine identities, and AI agent identities.
- Ensure identity architectures align with zero trust, least privilege, and secure-by-design principles.
Platform & Integration Architecture
- Architect ServiceNow-based identity security solutions integrated with CMDB, IRM, SecOps, ITSM, and external identity platforms.
- Define integration architectures connecting authorization visibility platforms with ServiceNow CMDB, IRM, and SecOps workflows, and security tooling.
- Establish authoritative data sources, reconciliation logic, and identity lineage across hybrid and multi-cloud environments.
- Ensure architectural decisions support scalability, performance, upgradeability, and audit readiness.
Enterprise Risk, Security & Governance Enablement
- Design identity security architectures that support exposure management, vulnerability management, and security operations use cases.
- Ensure identity security insights are consumable by ServiceNow IRM and SecOps workflows.
- Support governance and compliance requirements aligned to NIST, ISO, and industry-specific regulatory frameworks.
Technical Leadership & Delivery Oversight
- Serve as the technical authority for identity security engagements, guiding senior engineers and implementation teams.
- Review and approve solution designs, integrations, custom development, and configuration approaches.
- Lead architecture workshops, design reviews, and executive-level technical discussions with clients.
- Troubleshoot complex architectural, integration, and performance issues.
- Ensure adherence to ServiceNow best practices and long-term platform health.
Practice Growth & Advisory Support
- Support business development through solution architecture, proposals, effort estimates, and RFP responses.
- Advise internal sales and account teams on identity security solution strategy and positioning.
- Contribute to the evolution of Templar Shield’s Identity Security practice, reference architectures, and delivery standards.
- Mentor senior engineers and architects, establishing architectural standards across engagements.
Requirements
- 8–10+ years of experience in Identity and Access Management (IAM), identity security, or cybersecurity architecture roles.
- Demonstrated experience designing and governing enterprise-scale identity security architectures.
- Deep experience with identity governance platforms and authorization visibility solutions (e.g., Veza, SailPoint, Saviynt, Clear Skye, Okta, Microsoft Entra).
- Strong experience integrating identity platforms across cloud, SaaS, and hybrid enterprise environments.
- Expertise governing non-human identities including service accounts, APIs, machine identities, and AI agent identities.
- Hands-on experience with ServiceNow architecture, including CMDB, IRM, SecOps, and platform integration patterns.
- Strong understanding of authorization models, transitive access analysis, and graph-based access relationships.
- Proficiency with REST APIs, identity federation standards (SAML, OAuth 2.0, OIDC, SCIM), and integration design patterns.
- Experience with Python and JavaScript for platform integration, automation, and custom workflow development
- ServiceNow Certified Technical Architect (CTA) or strong progress toward CTA.
- ServiceNow Certified System Administrator (CSA) and/or Certified Implementation Specialist (CIS) certifications.
- Excellent consulting, analytical, and executive-facing communication skills.
- Experience integrating identity platforms across cloud and hybrid environments.
- Strong consulting, analytical, and client advisory skills.
- Willing to travel up to 50% per client requirements
Preferred / Nice-to-Have
- Experience with graph-based authorization models and transitive access analysis
- Experience with ServiceNow IRM and SecOps Modules
- CISSP, CISM, or other relevant security certifications
Benefits
- Competitive compensation + annual performance-based bonus
- 100% remote-first culture
- Benefits include health, dental, LTD, and life insurance coverage
- 401(k) with company match
- Reimbursement for job-related training and certifications
- Work on frontier projects at the cutting edge of AI + Risk Management
Skills Required
- 8-10+ years of experience in identity and access management, identity security, or cybersecurity architecture roles
- Experience designing and governing enterprise-scale identity security architectures
- Deep experience with identity governance and authorization visibility platforms such as Veza, SailPoint, Saviynt, Clear Skye, Okta, or Microsoft Entra
- Experience integrating identity platforms across cloud, SaaS, hybrid enterprise environments
- Experience governing non-human identities, including service accounts, APIs, machine identities, and AI agent identities
- Hands-on ServiceNow architecture experience, including CMDB, IRM, SecOps, and platform integration patterns
- Understanding of authorization models, transitive access analysis, and graph-based access relationships
- Proficiency with REST APIs, SAML, OAuth 2.0, OIDC, SCIM, and integration design patterns
- Experience with Python and JavaScript for platform integration, automation, and custom workflow development
- ServiceNow Certified Technical Architect certification or strong progress toward CTA
- ServiceNow Certified System Administrator and/or Certified Implementation Specialist certification
- Excellent consulting, analytical, and executive-facing communication skills
- Strong consulting, analytical, and client advisory skills
- Willingness to travel up to 50% based on client requirements
- Experience with graph-based authorization models and transitive access analysis
- Experience with ServiceNow IRM and SecOps modules
- CISSP, CISM, or other relevant security certification
What We Do
Templar Shield is a specialized risk, security, identity, and AI governance advisory firm. It helps organizations manage cybersecurity, enterprise risk, operational technology, identity, and emerging AI risks across IT, OT, cloud, and AI systems. The company delivers advisory, integrated risk transformation, consulting, operations, and technical solutions for Fortune 1000 companies and government entities across multiple industries and complex business functions.
