IAM and Security Services Architect

Company Description

NBCUniversal is one of the world’s leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad‑supported streaming service.

We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world‑renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation. Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities.

We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world. Comcast NBCUniversal has announced its intent to create a new publicly traded company (‘Versant’) comprised of most of NBCUniversal’s cable television networks, including USA Network, CNBC, MSNBC, Oxygen, E!, SYFY and Golf Channel along with complementary digital assets Fandango, Rotten Tomatoes, Golf Now, Golf Pass, and Sports Engine.

The well‑capitalized company will have significant scale as a pure‑play set of assets anchored by leading news, sports and entertainment content. The spin‑off is expected to be completed during 2025.

The IAM and Security Services Architect will be a key member of the new Versant Cyber organization. This individual is responsible for design and leading enterprise‑scale identity and security solutions. This role will define the architecture for IAM, IGA, PAM, PKI, and broader security services, while ensuring protection for applications, data, networks, and systems across cloud and on‑prem environments.

• Define IAM and security services architecture roadmap, standards, and reference models.
• Architect identity solutions using Entra /Azure AD, Ping, Okta, Cyber Ark, SailPoint, and related tools.
• Design authentication, SSO, federation, MFA, adaptive access, and privileged access solutions.
• Integrate IAM with cloud providers (AWS, Azure, GCP) and enterprise SaaS applications.
• Embed IAM and security services into Dev Sec Ops  pipelines and application development.
• Define logging and monitoring standards for IAM and security events, integrating with SIEM platforms.
• Architect solutions that secure applications, data, networks, and systems in hybrid environments.
• Conduct security architecture reviews, threat modeling, and design assessments.
• Partner with engineering and operations teams to deliver scalable, resilient security services.
• Ensure compliance with regulatory frameworks (SOX, PCI, GDPR, CCPA, etc.).

• 10 years in cybersecurity, with 5 years in IAM and security architecture.
• Deep expertise in IAM platforms (Azure AD/Entra, Ping, Okta, SailPoint, Cyber Ark, etc.).
• Strong experience in IGA, PAM, MFA, PKI, and identity lifecycle management.
• Proven ability to design secure architectures for applications, data, networks, and systems.
• Application security experience, including authentication/authorization, API security, SSO/MFA, microservices, and SaaS integration.
• Data security experience, including encryption, key management, access control, data classification, and compliance alignment.
• Network security expertise, including segmentation, firewall/IDS/IPS, VPNs, Zero Trust networking, and traffic monitoring.
• Systems security knowledge, including endpoint hardening, privileged access, patching, baselining, and OS‑level monitoring.
• Hands‑on knowledge of cloud IAM (AWS, Azure, GCP) and hybrid enterprise environments.
• Experience with Zero Trust models and identity‑driven access strategies.
• Strong background in API security, certificate/key management, and service account governance.
• Excellent…