Senior Identity Security Architect

About the company

SpecterOps provides adversary-focused cybersecurity products, services and training centered on BloodHound Enterprise for identifying, prioritizing and remediating identity-based attack paths across Active Directory, Entra ID and hybrid environments.

About this role

<p><span data-contrast="auto">We are seeking a Senior Identity Security Architect to help build and scale SpecterOps' remediation and architecture advisory capabilities. This role sits at the intersection of identity architecture, attack path analysis, and enterprise remediation. You will work with customers, researchers, consultants, and product teams to translate attack path findings into practical security outcomes.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></p> <p><span data-contrast="auto">The ideal candidate has significant hands-on experience&nbsp;operating, securing, modernizing, or remediating large enterprise identity environments and understands the realities of implementing security improvements within complex organizations.&nbsp;This individual will play a key role in developing SpecterOps' attack-path-centric remediation methodologies, architectural guidance, and delivery frameworks.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></p> <p><strong><span data-contrast="auto">Salary Range</span></strong><span data-contrast="auto">:&nbsp;Expected base salary range: $</span><span data-contrast="auto">175,000 - $200,000 USD,&nbsp;</span><span data-contrast="auto">plus bonus/equity and benefits depending on experience and location.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></p> <p><strong><span data-contrast="auto">Location: </span></strong>This position is remote, based in the U.S. with optional travel quarterly for in person company events and other ad hoc meetings</p> <ul> <li>&nbsp;Candidate must be authorized to work and reside in the United States; we do not currently sponsor immigration visas.</li> </ul> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Responsibilities</span></span></strong><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":80}">&nbsp;</span></p> <p><span data-contrast="none"><span data-ccp-parastyle="heading 3">Customer Advisory &amp; Remediation</span></span></p> <ul> <li><span data-contrast="auto">Serve as a trusted advisor to enterprise customers implementing Identity Attack Path Management programs.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></li> <li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Translate&nbsp;BloodHound&nbsp;Enterprise&nbsp;findings and attack path analysis into actionable remediation strategies.</span></li> <li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1">Help customers prioritize remediation activities based on risk, impact, dependencies, and operational constraints.</li> <li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1">Facilitate discussions across Security, Infrastructure, IAM, Endpoint Management, Engineering teams, and other stakeholders.</li> <li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1">Advise customers on architectural and operational improvements that reduce attack path risk.<span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></li> </ul> <p><span data-contrast="none"><span data-ccp-parastyle="heading 3">Architecture &amp; Identity Security</span></span><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":80}">&nbsp;</span></p> <ul> <li><span data-contrast="auto">Provide guidance on Active Directory, Microsoft Entra ID, and hybrid identity architectures.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></li> <li><span data-contrast="auto">Advise&nbsp;on&nbsp;delegated administration, privileged access management, administrative tiering, identity governance, service account security, and identity modernization initiatives.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></li> <li><span data-contrast="auto">Assist customers with Privilege Zone development and operationalization.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></li> <li><span data-contrast="auto">Evaluate identity architectures through an adversary and attack path lens.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></li> </ul> <p><span data-contrast="none"><span data-ccp-parastyle="heading 3">Methodology Development</span></span><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":80}">&nbsp;</span></p> <ul> <li><span data-contrast="auto">Develop attack-path-centric remediation frameworks, playbooks, and reference architectures.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></li> <li><span data-contrast="auto">Create repeatable guidance for remediation prioritization, ownership, implementation planning, and validation.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></li> <li><span data-contrast="auto">Identify recurring customer challenges and codify successful remediation&nbsp;patterns.</span><span data-ccp-props="{"335551550":6,"335551620":6}">&nbsp;</span></li> <li><span data-contrast="auto">Help&nbsp;establish&nbsp;scalable delivery methodologies across&nbsp;Bloo