Architect Level 3

Description:

The Advanced Security Architect will be a key contributor to the IAM Architecture and Governance team, responsible for the strategy, design, developing, and implementing Kroger's enterprise IAM program. This role will focus on governance of the IAM program in the Access Management (SSO/MFA), Directory Services, IAM Governance, and Privileged access management areas. This role contributes to security best practices by developing modern IAM solutions that improve access processes, reducing friction, and ensure the organization's accounts have the appropriate access at the right time.

Requirements:

• Minimum 3 years of experience in identity and access management, with a focus on Ping One and privileged access management.

• Proficiency in Ping One, Ping Access, and Ping Federate, including DaVinci.

• Strong knowledge of Entra and identity governance solutions.

• Experience with directory services and familiarity with IGA providers (e.g., SailPoint, Saviynt, Radiant, AD, LDAP, Entra).

• Expertise in at least two IAM areas, such as Identity Governance & Administration (IGA), Directory Services (Azure, AD, LDAP Oracle), Access Management (SSO, Federations), and Privileged Access Management (PAM).

• Subject Matter Expert in SAML, OAuth, and OIDC,.

• Collaborative approach, with strong problem-solving and documentation skills to support various stakeholders and expertise levels.

• This role contributes to security best practices by developing modern IAM solutions that improve access processes, reduce friction, and ensure the organization's accounts adhere to zero trust model

Required Skills :
Ping One, PAM, Architecture Must be located near: o Boca Raton, FL o Blue Ash, OH o Charlotte, NC o Portland, OR o San Jose, CA o Deerfield, IL

Basic Qualification :

Additional Skills :

Background Check :
Yes

Drug Screen :
Yes

Notes :
Selling points for candidate :
Project Verification Info :"The information provided below is for Apex Systems AV use only and is not to be distributed publicly, or to any third party. Any distribution of the below information will result in corrective action from Apex Systems Vendor Management. MSA:
Restricted Client Letter:
Will Provide"
Candidate must be your W2 Employee :

Yes
Exclusive to Apex :

No
Face to face interview required :

No
Candidate must be local :

No
Candidate must be authorized to work without sponsorship ::

No
Interview times set : :

No
Type of project :
Master Job Title :

VMS Access Entry
Branch Code :