Principal Architect - Identity and Access Management (Remote)

Description Connecting People. Uniting the World. There's never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world - with millions of customers and tens of thousands of employees - we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly. We're on a path toward becoming the best airline in the history of aviation. Join our Cybersecurity and Digital Risk (CDR) team to help us also become the leading cyber-safe airline in the industry. United's CDR team is tasked with keeping our customers' and employees' information safe and secure. Our primary mission is to embed cybersecurity into the DNA of United Airlines by reducing business risk through implementation of strong cybersecurity standard processes. United offers a competitive benefits package aimed at keeping you happy, healthy and well-traveled. From employee-run 'Business Resource Group' communities to world-class benefits like parental leave, 401k and privileges like space available travel, United is truly a one-of-a-kind place to work. Are you ready to travel the world and help us keep our airline cyber safe? Apply today! Key Responsibilities: The Principal Architect - Identity & Access Management (IAM) will design a modern CIAM platform that delivers secure, reliable, scalable, and performant systems. The Principal Architect is a senior level position that works closely with development teams, digital product teams, and other teams across the airline to integrate identity security into the product lifecycle from design through deployment. The Principal Architect is a recognized expert in IAM related matters. On any given day, the Principal Architect can be pulled in to evaluate a new tool, review a proposed application change, or provide guidance on identity protocol and their integration. ? Leads design and documentation of Identity & Access Management platform architecture and roadmap ? Leads the design, definition and implementation of security practices and Cybersecurity and Digital Risk standards and policies to ensure product development teams in Digital Technology understand them ? Recommends and implements products/services that support operational needs and security requirements ? Promotes and contributes to the continuous improvement of our security strategy based on risk prioritization and business objectives ? Contribute to discussions on performance testing, disaster recovery, and planning to ensure a reliable and scalable IAM platform. ? Serves as a department Domain Expert, and mentors, trains, and coaches junior members of the IAM team United values diverse experiences, perspectives, and we encourage everyone who meets the minimum qualifications to apply. While having the 'desired' qualifications make for a stronger candidate, we encourage applicants who may not feel they check ALL of those boxes. We are always looking for individuals who will bring something new to the table. Qualifications What's needed to succeed (Minimum Qualifications): ? Bachelor's degree required ? Minimum of 7 years of experience in related field such as cybersecurity and/or IAM ? Experience working with an IAM platforms such as ForgeRock, Okta, Ping Identity, Oracle Access Manager, Cognito, AWS IAM, Azure, Delinea/Thycotic, CyberArk, BeyondTrust, SailPoint, Saviynt, or NetIQ/MicroFocus ? Strong understanding of IAM principles (Customer Identity and Access Management preferred), including authentication, authorization, and user lifecycle management. ? In-depth knowledge of technology like SAML, OAuth/ OAuth2, OpenID Connect, MFA mechanisms, SSO, OIDC, FIDO, WebAuthN, risk-based authentication, data encryption, and session management ? Proven ability to lead projects in the design, implementation, and/or integration of scalable, secure, and customer-centric IAM architectures ? Familiarity with compliance frameworks, privacy regulations or how they impact IAM design ? Must be legally authorized to work in the United States for any employer without sponsorship ? Successful completion of interview required to meet job qualification ? Reliable, punctual attendance is an essential function of the position What will help you propel from the pack (Preferred Qualifications): ? Master's degree ? 10+ years of experience with IAM ? Certifications such as CISM, CISSP, etc. ? Additional cybersecurity experience including any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security, cloud computing ? Expertise of modern software lifecycle development and automated cloud infrastructure deployment ? CIAM specific knowledge of fraud prevention and detection, identity proofing and identity verification technologies, ? Workforce specific knowledge of competencies and controls such as Privileged Account Management (PAM) including privileged account vaulting, privileged session management, and endpoint privilege management, Identity Governance and Administration including identity lifecycle management (joiner, mover, leaver), access certification, and access rights governance ? Experience with Emerging Technologies such as AI/ML ? Background with Automation and DevOps Post expiration date: 1/31/2025