Position Title:  Senior Solution Architect Indentity and Access Management

MAKE HISTORY WITH US!

At PMI, we’ve chosen to do something incredible. We’re totally transforming our business and building our future on smoke-free products with one clear purpose - to deliver a smoke-free future.

With huge change, comes huge opportunity. So, wherever you join us, you’ll enjoy the freedom to dream up and deliver better, brighter solutions and the space to move your career forward in endlessly different directions.

JOIN US!

Design, architect, improve, and secure best-in-class Directory and Access Management solutions to authenticate and authorize users’ access, prevent identity-based cyberattacks, and ensure that company data is secured across the global (cloud-based) IT landscape.

WHO ARE WE LOOKING FOR?

We are seeking a highly skilled and experienced Indentity and Access Management Architect with the focus on Identity Security to join our Platform Security team. The ideal candidate will have a strong architectural background in Directory Services, Authentication, Authorization, and other areas related to Identity security.

JOB DESCRIPTION:

Position Overview: We are looking for a Directory, Identity, and Access Management Architect with expertise in the identity security field to join our Platform Security team (also responsible for the Identity and Access Management area). The candidate will focus on the architecture of identity security solutions, including Directory Services, Identity Providers, Identity Governance, Identity Proofing, and other related technologies. The candidate will play a key role in ensuring the security, integrity, and availability of our organization's Identity Solutions. This role requires a deep understanding of identity security best practices, as well as the ability to design and implement robust security architecture.

KEY RESPONSIBILITIES:

1. Directory Services Architecture:

· Design, implement, and help maintain Directory Services (i.e. identity providers) architectures and solutions, based on Microsoft Entra ID stack.

· Develop and help enforcing identity security policies, standards, and procedures (like Conditional Access Policies, etc.).

· Define functional requirements and processes to lead transition of service accounts to managed identities and service principals for all company applications.

2. Access Management Architecture:

· Architecture, help implementing and support operations of access management solution (based on Microsoft Entra stack) to prevent unauthorized access, use, and transmission of sensitive data.

· Design role mining processes to help transition to modern authorization management (Attribute and policy-based authorization models)

· Lead design and deployment of strong multi-factor authentication technologies (hardware tokens based on FIDO2/WebAuthn, U2F, Smart card, OpenPGP, and OTP protocols).

3. Identity Architecture:

· Develop, maintain, and evolve Identity architecture and standards.

· Develop a consistent API strategy to ingest identities from multiple identity sources.

· Define functional requirements for designing Identity Landing Zone solution and co-lead its deployment.

· Define functional requirements for designing modern IGA solution and lead its development

· Design and lead development of Identity proofing framework.

QUALIFICATIONS:

· Bachelor’s or master’s degree in Computer Science, Information Technology, or a related field.

· Proven experience (3+ years) as a Directory (or similar) Architect, in a large corporate environment.

· Deep technical expertise in Microsoft on-prem Active Directory and Entra ID fields

· Previous experience with and a good understanding of Microsoft 365 security solution stack (e.g., Purview, MDCA, Defender, etc.)

· Experience in designing and deploying IGA/Identity landing zone solutions is considered a plus.

· Strong analytical and problem-solving skills.

· Excellent communication and interpersonal abilities.

· High level of personal integrity and work ethics to handle confidential matters professionally and responsibly.

HOW CAN YOU MAKE HISTORY WITH US?

Our success depends on the men and women who come to work every single day with a sense of purpose and an appetite for progress. Join PMI and you too can

• Seize the freedom to define your future and ours. We’ll empower you to take risks, experiment, and explore.

• Be part of an inclusive, diverse culture, where everyone’s contribution is respected; collaborate with some of the world’s best people and feel like you belong.

• Pursue your ambitions and develop your skills with a global business – our staggering size and scale provide endless opportunities to progress.

• Take pride in delivering our promise to society to deliver a smoke-free future.