Sr. Staff IAM Architect
Sunrise, FL · On-site
Qualifications: • Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or ... • 3+ years designing and implementing enterprise IAM architectures. • Deep expertise in:
Sr. Staff IAM Architect
Sunrise, FL · On-site
Qualifications: • Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or ... • 3+ years designing and implementing enterprise IAM architectures. • Deep expertise in:
Cybersecurity Scenario Designer information
What is a cybersecurity scenario designer?
Cybersecurity Scenario Designers are professionals who create realistic simulations and scenarios to test and improve an organization's cybersecurity defenses. They develop exercises such as cyberattack simulations, tabletop exercises, and red team/blue team drills to help security teams prepare for real-world threats. Their work involves understanding potential cyber threats, designing scenarios that mimic these threats, and evaluating how well security teams respond. This role is crucial for identifying vulnerabilities and enhancing an organization’s ability to detect, respond to, and recover from cyber incidents.
What are some common challenges faced by cybersecurity scenario designers when creating realistic training simulations?
Cybersecurity Scenario Designers often face the challenge of balancing realism with training objectives—scenarios must be complex enough to reflect evolving threats, but not so intricate that they overwhelm participants. Keeping scenarios up-to-date with the latest attack vectors and techniques requires continual research and collaboration with incident response teams. Additionally, designers must work closely with technical experts and trainers to ensure that scenarios are relevant to the organization's environment and that learning outcomes are measurable and actionable.
What are the key skills and qualifications needed to thrive as a cybersecurity scenario designer, and why are they important?
To thrive as a Cybersecurity Scenario Designer, you need a strong understanding of cybersecurity principles, threat modeling, and incident response, often supported by a degree in computer science or a related field. Familiarity with tools such as SIEM platforms, penetration testing suites, and cyber range environments, along with certifications like CISSP or CEH, is typically required. Creativity, attention to detail, and effective communication are crucial soft skills for crafting realistic scenarios and collaborating with cross-functional teams. These skills and qualifications ensure the development of relevant, challenging scenarios that prepare organizations to defend against evolving cyber threats.
What are popular job titles related to Cybersecurity Scenario Designer jobs in Boca Raton, FL?
For Cybersecurity Scenario Designer jobs in Boca Raton, FL, the most frequently searched job titles are:
What job categories do people searching Cybersecurity Scenario Designer jobs in Boca Raton, FL look for?
The top searched job categories for Cybersecurity Scenario Designer jobs in Boca Raton, FL are:
What cities near Boca Raton, FL are hiring for Cybersecurity Scenario Designer jobs?
Cities near Boca Raton, FL with the most Cybersecurity Scenario Designer job openings:
UKG rating
7.8
Based on 42 frontline employees who took The Breakroom Quiz
139th of 246 rated software companies
Job description
Why UKG:
At UKG, the work you do matters. The code you ship, the decisions you make, and the care you show a customer all add up to real impact. Today, tens of millions of workers start and end their days with our workforce operating platform. Helping people get paid, grow in their careers, and shape the future of their industries. That's what we do.
We never stop learning. We never stop challenging the norm. We push for better, and we celebrate the wins along the way. Here, you'll get flexibility that's real, benefits you can count on, and a team that succeeds together. Because at UKG, your work matters-and so do you.
UKG is seeking an experienced Identity & Access Management (IAM) Architect to help define, design, and evolve the identity security architecture supporting our global workforce, enterprise platforms, and cloud environments.
As a key member of the Global Security Identity & Access Management team, you will serve as the technical authority for identity architecture, partnering closely with Security Engineering, Product Engineering, Infrastructure, Cloud, and Enterprise Technology teams to build scalable and secure identity solutions.
This role combines deep technical expertise, strategic thinking, and strong collaboration skills to help secure one of the world's largest workforce technology platforms.
Key Responsibilities:
• Define and maintain enterprise IAM reference architectures, standards, and design patterns.
• Develop scalable identity and access management solutions.
• Partner with business and technology stakeholders to align identity capabilities with strategic security objectives.
• Evaluate emerging identity technologies and recommend architectural improvements.
• Design and optimize identity lifecycle management processes including provisioning, deprovisioning, role management, and access certification.
• Develop scalable RBAC and ABAC models across enterprise applications and platforms.
• Ensure identity governance solutions align with security, compliance, and business requirements.
• Support implementation and enhancement of IGA platforms.
• Drive modernization of enterprise authentication services and identity providers.
• Develop secure access patterns for workforce, partner, and third-party access scenarios.
• Design secure privileged access architectures across cloud, infrastructure, and application environments.
• Enable just-in-time (JIT) access, credential vaulting, session management, and privileged account governance.
• Support expansion of PAM capabilities across both human and non-human identities.
• Partner with platform and engineering teams to reduce standing privilege and enforce least privilege principles.
• Improve security, scalability, and operational efficiency of core identity services.
• Perform security architecture reviews and threat modeling for identity-related initiatives.
• Support audit, compliance, and regulatory requirements including SOC, ISO 27001, PCI, and privacy frameworks.
• Identify and mitigate identity-related risks across the enterprise.
• Collaborate with Security Engineering, Platform Engineering, Infrastructure, Cloud Operations, and Enterprise Technology teams.
• Provide architectural guidance during projects, design reviews, and strategic initiatives.
• Create and maintain architecture documentation, standards, and implementation guidance.
• Mentor IAM engineers and contribute to the development of identity security best practices.
Qualifications:
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent experience.
• 8+ years of experience in Identity & Access Management, Security Architecture, or related security engineering roles.
• 3+ years designing and implementing enterprise IAM architectures.
• Deep expertise in: Identity Governance & Administration (IGA), Privileged Access Management (PAM), Identity Lifecycle Management, Authentication and Authorization frameworks
• Strong understanding of: SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, SCIM, Zero Trust principles, RBAC and ABAC models, Cloud identity architecture, Service accounts and machine identity management
• Experience supporting cloud platforms such as Azure, AWS, or Google Cloud.
• Strong written and verbal communication skills with the ability to communicate architectural concepts to technical and non-technical audiences.
Preferred Qualifications:
• Experience with Saviynt, SailPoint, Okta, CyberArk, BeyondTrust, Ping Identity, or similar IAM technologies.
• Industry certifications such as: CISSP, CIAM, CISM, Microsoft Identity & Access Administrator, Certified Identity Management Professional (CIMP)
• Experience supporting SaaS or large-scale cloud-native environments.
• Familiarity with Infrastructure as Code (IaC), automation, and DevSecOps practices.
Key Competencies:
• Strategic and systems thinker.
• Strong security architecture and design skills.
• Ability to balance security, usability, and operational efficiency.
• Strong problem-solving and analytical capabilities.
• Excellent stakeholder management and collaboration skills.
• Ability to influence without direct authority.
• Passion for driving identity modernization and continuous improvement.
Company Overview:
UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched. It's this expertise that equips our customers with the intelligence to solve any challenge in any industry - because great organizations know their workforce is their competitive edge. Learn more at ukg.com.
Equal Opportunity Employer
UKG is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, disability, religion, sex, age, national origin, veteran status, genetic information, and other legally protected categories.
View The EEO Know Your Rights poster
UKG participates in E-Verify. View the E-Verify posters here.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Disability Accommodation in the Application and Interview Process
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com.
The pay range for this position is $145,600 to $209,300. The actual base pay offered may vary depending on skills, experience, job-related knowledge and work location. In addition to base pay, employees may be eligible to participate in a performance-based bonus plan and to receive restricted stock unit awards as part of total compensation. Learn more about UKG's benefits and rewards at https://www.ukg.com/about-us/careers/benefits
At UKG, the work you do matters. The code you ship, the decisions you make, and the care you show a customer all add up to real impact. Today, tens of millions of workers start and end their days with our workforce operating platform. Helping people get paid, grow in their careers, and shape the future of their industries. That's what we do.
We never stop learning. We never stop challenging the norm. We push for better, and we celebrate the wins along the way. Here, you'll get flexibility that's real, benefits you can count on, and a team that succeeds together. Because at UKG, your work matters-and so do you.
UKG is seeking an experienced Identity & Access Management (IAM) Architect to help define, design, and evolve the identity security architecture supporting our global workforce, enterprise platforms, and cloud environments.
As a key member of the Global Security Identity & Access Management team, you will serve as the technical authority for identity architecture, partnering closely with Security Engineering, Product Engineering, Infrastructure, Cloud, and Enterprise Technology teams to build scalable and secure identity solutions.
This role combines deep technical expertise, strategic thinking, and strong collaboration skills to help secure one of the world's largest workforce technology platforms.
Key Responsibilities:
• Define and maintain enterprise IAM reference architectures, standards, and design patterns.
• Develop scalable identity and access management solutions.
• Partner with business and technology stakeholders to align identity capabilities with strategic security objectives.
• Evaluate emerging identity technologies and recommend architectural improvements.
• Design and optimize identity lifecycle management processes including provisioning, deprovisioning, role management, and access certification.
• Develop scalable RBAC and ABAC models across enterprise applications and platforms.
• Ensure identity governance solutions align with security, compliance, and business requirements.
• Support implementation and enhancement of IGA platforms.
• Drive modernization of enterprise authentication services and identity providers.
• Develop secure access patterns for workforce, partner, and third-party access scenarios.
• Design secure privileged access architectures across cloud, infrastructure, and application environments.
• Enable just-in-time (JIT) access, credential vaulting, session management, and privileged account governance.
• Support expansion of PAM capabilities across both human and non-human identities.
• Partner with platform and engineering teams to reduce standing privilege and enforce least privilege principles.
• Improve security, scalability, and operational efficiency of core identity services.
• Perform security architecture reviews and threat modeling for identity-related initiatives.
• Support audit, compliance, and regulatory requirements including SOC, ISO 27001, PCI, and privacy frameworks.
• Identify and mitigate identity-related risks across the enterprise.
• Collaborate with Security Engineering, Platform Engineering, Infrastructure, Cloud Operations, and Enterprise Technology teams.
• Provide architectural guidance during projects, design reviews, and strategic initiatives.
• Create and maintain architecture documentation, standards, and implementation guidance.
• Mentor IAM engineers and contribute to the development of identity security best practices.
Qualifications:
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent experience.
• 8+ years of experience in Identity & Access Management, Security Architecture, or related security engineering roles.
• 3+ years designing and implementing enterprise IAM architectures.
• Deep expertise in: Identity Governance & Administration (IGA), Privileged Access Management (PAM), Identity Lifecycle Management, Authentication and Authorization frameworks
• Strong understanding of: SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, SCIM, Zero Trust principles, RBAC and ABAC models, Cloud identity architecture, Service accounts and machine identity management
• Experience supporting cloud platforms such as Azure, AWS, or Google Cloud.
• Strong written and verbal communication skills with the ability to communicate architectural concepts to technical and non-technical audiences.
Preferred Qualifications:
• Experience with Saviynt, SailPoint, Okta, CyberArk, BeyondTrust, Ping Identity, or similar IAM technologies.
• Industry certifications such as: CISSP, CIAM, CISM, Microsoft Identity & Access Administrator, Certified Identity Management Professional (CIMP)
• Experience supporting SaaS or large-scale cloud-native environments.
• Familiarity with Infrastructure as Code (IaC), automation, and DevSecOps practices.
Key Competencies:
• Strategic and systems thinker.
• Strong security architecture and design skills.
• Ability to balance security, usability, and operational efficiency.
• Strong problem-solving and analytical capabilities.
• Excellent stakeholder management and collaboration skills.
• Ability to influence without direct authority.
• Passion for driving identity modernization and continuous improvement.
Company Overview:
UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched. It's this expertise that equips our customers with the intelligence to solve any challenge in any industry - because great organizations know their workforce is their competitive edge. Learn more at ukg.com.
Equal Opportunity Employer
UKG is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, disability, religion, sex, age, national origin, veteran status, genetic information, and other legally protected categories.
View The EEO Know Your Rights poster
UKG participates in E-Verify. View the E-Verify posters here.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Disability Accommodation in the Application and Interview Process
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com.
The pay range for this position is $145,600 to $209,300. The actual base pay offered may vary depending on skills, experience, job-related knowledge and work location. In addition to base pay, employees may be eligible to participate in a performance-based bonus plan and to receive restricted stock unit awards as part of total compensation. Learn more about UKG's benefits and rewards at https://www.ukg.com/about-us/careers/benefits