Cybersecurity Architect - Identity

The application window will close October 15, 2026.

The primary work location for this role is remote with a remote work model.

Envestnet is an adaptive

Wealth

Tech company that is redefining the future of wealth management byhelpingadvisors meet the moment with its comprehensive technology, actionable insights, and industry leading support.

Backed byover
25 years of experience and approximately $7.0 trillion in platform assets, Envestnet is trusted by over one third of financial advisors across leading banks, wealth managers, brokerages, and RIAs.

The Security Governance team plays a critical role in protecting and enabling Envestnet’s wealth management technology platform by embedding security, risk management, and regulatory compliance into the fabric of the business. Partnering closely with engineering, product, cloud, data, HR, and compliance teams, the group develops security architecture, governance frameworks, and resilient controls that safeguard critical financial systems while helping teams innovate quickly and securely.

What sets this team apart is its forward-looking approach to security, leveraging automation and AI to modernize risk management, strengthen customer trust, and ensure secure adoption of emerging technologies.

Responsible for the overall architecture and design of security infrastructure, including engineering, implementation, integration and technical services and support. Defines specifications for operating system applications and modifies / maintains existing applications. Designs, integrates and implements infrastructure including hardware, software and various configurations. Designs and deploys systems based on business and user requirements. Plans, conducts and directs the analysis of business problems to be solved with automated systems.

• Interfaces daily with IT and security counterparts, clients and third-parties to ensure an overall integrated approach to understanding and meeting global technical and security needs.
• Provides cybersecurity architecture advice and consultation across major program and solution levels.
• Designs and develops new systems, applications and solutions for cyber systems and networks.
• Ensures system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security testing and evaluation.
• Contributes to the creation of cybersecurity architecture principles, standards and patterns, publishing and distributing as appropriate.
• Actively drives the definition of engineering standards and technologies / frameworks and leads associated working groups.
• Provides complex analysis of potential risks to information systems security and recommends innovative solutions.
• Integrates network security controls into an environment to identify risks and reduce their impact.
• Define the enterprise identity governance architecture, roadmap, and control framework across AD, Entra , Okta, IGA, PAM, cloud, SaaS, workforce, client, privileged, and non-human identities.
• Govern identity lifecycle controls, including provisioning, deprovisioning, access requests, certifications, entitlement management, segregation of duties, remediation, monitoring, and evidence generation.
• Lead IGA and PAM modernization through workflow automation, connectors, application onboarding, certification engines, integrations, reporting, vaulting, session management, just-in-time access, reviews, exceptions, and monitoring.
• Design and maintain authentication, authorization, and access governance controls, including SSO, MFA, federation, conditional access, RBAC/ABAC, tenant separation, client administration, entitlement design, and privileged client access.
• Partner with HR, engineering, cloud, product, and IT to automate lifecycle management, improve identity data quality, and reduce identity sprawl, dormant accounts, unmanaged access, lifecycle risk, and SaaS identity gaps.
• Align identity controls to enterprise policy, risk appetite, audit, regulatory, client assurance, NIST CSF, NIST 800-53, NIST 800-63, and applicable ISO 42001 expectations.

• Candidates should demonstrate the relevant experience, skills, and capabilities needed to successfully perform in the role. Relevant experience may be gained through current responsibilities, prior roles, project work, leadership opportunities, or other comparable experiences.
• Deep experience with identity governance, IAM, IGA, PAM, access reviews, requests, approvals, certifications, entitlement management, RBAC/ABAC, segregation of duties, control monitoring, and evidence generation.
• Strong working knowledge of AD, Entra , Okta, cloud identity, SSO, MFA, federation, conditional access, group governance, directory modernization, identity data quality, and access architecture.
• Experience improving provisioning, deprovisioning, joiner/mover/leaver processes, authoritative source…