Senior Identity Security Architect

Responsibilities

Customer Advisory & Remediation

• Serve as a trusted advisor to enterprise customers implementing Identity Attack Path Management programs.
• Translate BloodHound Enterprise findings and attack path analysis into actionable remediation strategies.
• Help customers prioritize remediation activities based on risk, impact, dependencies, and operational constraints.
• Facilitate discussions across Security, Infrastructure, IAM, Endpoint Management, Engineering teams, and other stakeholders.
• Advise customers on architectural and operational improvements that reduce attack path risk.

Architecture & Identity Security

• Provide guidance on Active Directory, Microsoft Entra ID, and hybrid identity architectures.
• Advise on delegated administration, privileged access management, administrative tiering, identity governance, service account security, and identity modernization initiatives.
• Assist customers with Privilege Zone development and operationalization.
• Evaluate identity architectures through an adversary and attack path lens.

Methodology Development

• Develop attack-path-centric remediation frameworks, playbooks, and reference architectures.
• Create repeatable guidance for remediation prioritization, ownership, implementation planning, and validation.
• Identify recurring customer challenges and codify successful remediation patterns.
• Help establish scalable delivery methodologies across BloodHound Scentry.

Internal Enablement

• Partner with researchers to operationalize emerging tradecraft and attack path research.
• Support consultants and TAMs through training, mentorship, and guidance.
• Contribute to the evolution of Identity Attack Path Management methodologies and best practices.

Requirements

• 8+ years of experience designing, operating, securing, or modernizing enterprise identity environments.
• Deep expertise in Active Directory and Microsoft Entra ID.
• Experience with BloodHound or attack path analysis.
• Experience with hybrid identity architectures and identity synchronization technologies.
• Demonstrated experience leading enterprise remediation, modernization, migration, or security improvement initiatives.
• Strong understanding of administrative tiering, delegated administration, privileged access management, identity governance, and enterprise identity operations.
• Experience working directly with technical and business stakeholders.
• Excellent written and verbal communication skills.
• Experience in consulting, professional services, or customer-facing advisory roles.
• Experience building methodologies, frameworks, or operational programs.

Preferred Qualifications

• Experience supporting large-scale enterprise Active Directory environments (50,000+ users).
• Familiarity with offensive security concepts, adversary tradecraft, or red team operations.
• Experience with Okta, Ping Identity, CyberArk, SailPoint, or similar identity platforms.
• Experience with Microsoft Intune, SCCM, Tanium, Jamf, or other endpoint management platforms.
• Familiarity with PKI, virtualization platforms, cloud infrastructure, and other critical enterprise technologies.

What Success Looks Like

Within the first year, this individual will:

• Become a core contributor to BloodHound Scentry engagements.
• Help establish SpecterOps' remediation methodology and architectural guidance frameworks.
• Improve customer outcomes by helping organizations move from attack path identification to measurable risk reduction.
• Enable consultants and TAMs through repeatable remediation patterns and implementation guidance.
• Strengthen SpecterOps' ability to help customers operationalize Identity Attack Path Management at scale.

What We Offer

• Health/Dental/Vision/life insurance: 100% covered for both the employee and their family
• Flexible time off policy
• 13 paid holidays annually
• 401(k) with up to 4% company match
• Equity and quarterly bonus based on company performance
• Remote work: $1,500 first year allowance to set up home office
• $500 annual home office allowance after the first year
• $150 monthly cell phone and internet reimbursement
• $5,000 annual professional development allowance
• $5,250 towards continuing education or student loan repayment
• $1,200 annual benefit for lifestyle, wellness, pet insurance and more
• A one-time $10,000 benefit towards family planning
• In person and virtual employee events throughout the year
• And of course, company swag!