Senior Identity Security Architect

We are seeking a Senior Identity Security Architect to help build and scale SpecterOps' remediation and architecture advisory capabilities. This role sits at the intersection of identity architecture, attack path analysis, and enterprise remediation. You will work with customers, researchers, consultants, and product teams to translate attack path findings into practical security outcomes. 

The ideal candidate has significant hands-on experience operating, securing, modernizing, or remediating large enterprise identity environments and understands the realities of implementing security improvements within complex organizations. This individual will play a key role in developing SpecterOps' attack-path-centric remediation methodologies, architectural guidance, and delivery frameworks. 

Salary Range: Expected base salary range: $175,000 - $200,000 USD, plus bonus/equity and benefits depending on experience and location. 

Location: This position is remote, based in the U.S. with optional travel quarterly for in person company events and other ad hoc meetings

•  Candidate must be authorized to work and reside in the United States; we do not currently sponsor immigration visas.

Responsibilities 

Customer Advisory & Remediation

• Serve as a trusted advisor to enterprise customers implementing Identity Attack Path Management programs. 
• Translate BloodHound Enterprise findings and attack path analysis into actionable remediation strategies.
• Help customers prioritize remediation activities based on risk, impact, dependencies, and operational constraints.
• Facilitate discussions across Security, Infrastructure, IAM, Endpoint Management, Engineering teams, and other stakeholders.
• Advise customers on architectural and operational improvements that reduce attack path risk. 

Architecture & Identity Security 

• Provide guidance on Active Directory, Microsoft Entra ID, and hybrid identity architectures. 
• Advise on delegated administration, privileged access management, administrative tiering, identity governance, service account security, and identity modernization initiatives. 
• Assist customers with Privilege Zone development and operationalization. 
• Evaluate identity architectures through an adversary and attack path lens. 

Methodology Development 

• Develop attack-path-centric remediation frameworks, playbooks, and reference architectures. 
• Create repeatable guidance for remediation prioritization, ownership, implementation planning, and validation. 
• Identify recurring customer challenges and codify successful remediation patterns. 
• Help establish scalable delivery methodologies across BloodHound Scentry. 

Internal Enablement 

• Partner with researchers to operationalize emerging tradecraft and attack path research. 
• Support consultants and TAMs through training, mentorship, and guidance. 
• Contribute to the evolution of Identity Attack Path Management methodologies and best practices. 

Requirements 

• 8+ years of experience designing, operating, securing, or modernizing enterprise identity environments. 
• Deep expertise in Active Directory and Microsoft Entra ID. 
• Experience with BloodHound or attack path analysis. 
• Experience with hybrid identity architectures and identity synchronization technologies. 
• Demonstrated experience leading enterprise remediation, modernization, migration, or security improvement initiatives. 
• Strong understanding of administrative tiering, delegated administration, privileged access management, identity governance, and enterprise identity operations. 
• Experience working directly with technical and business stakeholders. 
• Excellent written and verbal communication skills. 
• Experience in consulting, professional services, or customer-facing advisory roles. 
• Experience building methodologies, frameworks, or operational programs. 

Preferred Qualifications 

• Experience supporting large-scale enterprise Active Directory environments (50,000+ users). 
• Familiarity with offensive security concepts, adversary tradecraft, or red team operations. 
• Experience with Okta, Ping Identity, CyberArk, SailPoint, or similar identity platforms. 
• Experience with Microsoft Intune, SCCM, Tanium, Jamf, or other endpoint management platforms. 
• Familiarity with PKI, virtualization platforms, cloud infrastructure, and other critical enterprise technologies. 

What Success Looks Like 

Within the first year, this individual will: 

• Become a core contributor to BloodHound Scentry engagements. 
• Help establish SpecterOps' remediation methodology and architectural guidance frameworks. 
• Improve customer outcomes by helping organizations move from attack path identification to measurable risk reduction. 
• Enable consultants and TAMs through repeatable remediation patterns and implementation guidance. 
• Strengthen SpecterOps' ability to help customers operationalize Identity Attack Path Management at scale. 

What We Offer   

• Health/Dental/Vision/life insurance: 100% covered for both the employee and their family   
• Flexible time off policy     
• 13 paid holidays annually    
• 401(k) with up to 4% company match    
• Equity and quarterly bonus based on company performance    
• Remote work: $1,500 first year allowance to set up home office  
• $500 annual home office allowance after the first year   
• $150 monthly cell phone and internet reimbursement    
• $5,000 annual professional development allowance    
• $5,250 towards continuing education or student loan repayment    
• $1,200 annual benefit for lifestyle, wellness, pet insurance and more   
• A one-time $10,000 benefit towards family planning     
• In person and virtual employee events throughout the year    
• And of course, company swag!    

  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. To request reasonable accommodations, please contact us at careers@specterops.io  

Unsolicited resumes are not accepted  

 #LI-REMOTE