System Architect

US (Remote)

11280

As the recognized global standard for project-based businesses, Deltek delivers software and information solutions to help organizations achieve their purpose. Our market leadership stems from the work of our diverse employees who are united by a passion for learning, growing and making a difference. At Deltek, we take immense pride in creating a balanced, values-driven environment, where every employee feels included and empowered to do their best work.

Our employees put our core values into action daily, creating a one-of-a-kind culture that has been recognized globally. Thanks to our incredible team, Deltek has been named one of America's Best Midsize Employers by Forbes, a Best Place to Work by Glassdoor, a Top Workplace by The Washington Post and a Best Place to Work in Asia by World HRD Congress.

At Deltek, security isn't a gate at the end of the process - it's in the foundation. Enterprise Security & Technology Services (ESTS) brings together security, infrastructure, and technology operations under one organization, led by our CISO, with a mandate to make sure Deltek builds and operates with integrity at every layer. We're a passionate team of technologists and security professionals who work across the entire company - embedded in how services are built, delivered, and supported.

We run agile, we embrace intelligent automation to amplify what our people can do, and we hold ourselves to a high standard because the organizations that depend on Deltek's platform are doing work that can't afford mistakes. If you take your craft seriously, want visibility into how a complex, global technology organization really operates, and believe security should be a first principle - not an afterthought - this is a team that will feel like home.

• Define Deltek's enterprise identity architecture and multi-year roadmap across workforce, privileged, non-human, cloud, AI-agent, partner, and customer identity domains.
• Serve as the technical design authority for IAM-related initiatives and lead architecture reviews, design decisions, and exception evaluations.
• Establish reference architectures, standards, integration patterns, identity data models, control requirements, and lifecycle-management principles.
• Translate enterprise security, risk, compliance, user-experience, and business objectives into scalable identity capabilities.
• Evaluate emerging identity technologies and recommend strategic investments, sequencing, and platform direction.
• Maintain strong implementation accountability by supporting prototypes, critical integrations, design validation, and complex technical problem solving.

• Provide architectural leadership for Saviynt Enterprise Identity Cloud and the broader IGA operating model.
• Define scalable onboarding patterns and governance models for enterprise applications across SaaS, on-premises, and cloud environments.
• Design identity lifecycle, RBAC, ABAC, entitlement, role-mining, segregation-of-duties, access-request, and certification strategies.
• Lead integration architecture across HR systems, Active Directory, Microsoft Entra , cloud platforms, enterprise applications, directories, and security tooling.
• Define data-quality, identity-correlation, ownership, authoritative-source, and reconciliation standards required for reliable governance.
• Guide automation of provisioning, deprovisioning, birthright access, approvals, revocation, remediation, and evidence production.

• Define Deltek's enterprise PAM architecture, target state, control model, and implementation roadmap.
• Establish patterns for credential vaulting, session management, just-in-time and just-enough access, administrative tiering, emergency access, and privileged identity governance.
• Integrate privileged access into the broader identity lifecycle, certification, policy, monitoring, and Zero Trust strategy.
• Partner with Security and Infrastructure teams to reduce standing privilege and improve accountability for administrative access across critical systems.

• Define governance models for service accounts, machine identities, workload identities, service principals, API credentials, tokens, certificates, secrets, automation identities, and AI agents.
• Establish requirements for discovery, registration, accountable ownership, purpose, risk tiering, least…