Distinguished Technologist, Cloud Native Identity and Authorization

Hewlett Packard Enterprise

. Serve as a hands-on security architect embedded with platform teams to design, drive, and deliver IAM capabilities.

Posted 4/30/2026full-timeHouston • California, Massachusetts, North Carolina, Texas • 🇺🇸 United StatesSeniorLead💰 $194,000 - $412,500 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudDistributed SystemsGoogle Cloud PlatformKubernetes

About the role

Key responsibilities & impact

Serve as a hands-on security architect embedded with platform teams to design, drive, and deliver IAM capabilities.
Lead the architecture and implementation for identity, authorization, and service-to-service security across cloud providers and modern distributed workloads.
Define and drive the platform IAM and authorization strategy, including a unified control plane that supports products at different maturity levels.
Be embedded with product and platform teams to shape implementation outcomes and iterate on designs through delivery.
Architect and review secure identity and authorization systems for cloud (AWS/Azure/GCP), hybrid, and on‑prem deployments.
Build practical, production-oriented threat models and trade‑off analyses that account for real constraints.
Provide hands-on technical leadership: review code and design artifacts, validate authentication/authorization flows, and guide secure integration patterns.
Influence and shepherd adoption: create pragmatic patterns, reference implementations, and migration guides.

Requirements

What you’ll need

15+ years of hands‑on experience building, securing, or leading security platforms, products, or services, with deep focus on identity and authorization.
Proven experience implementing or modernizing IAM systems using OAuth/OIDC, JWT/token architectures, RBAC and ABAC (or hybrid) implementations, delegated authorization, or custom authorization engines.
Strong leadership skills with a history of mentoring and managing technical teams in complex, ambiguous environments.
Strong experience with at least one major cloud (AWS, Azure, GCP) and working knowledge of hybrid/disconnected/on‑prem constraints.
Demonstrated ability to read & analyze code and libraries that implement auth flows and security controls.
Deep understanding of cloud‑native security architectures, application/service security, and identity & access management principles (OIDC, OAuth2, SAML, Zero Trust).
Practical experience with secret management, KMS, identity providers, service mesh auth patterns, and policy enforcement points.
Hands‑on experience with threat modeling, secure design, and pragmatic DevSecOps practices that materially affect product security.
Track record of influencing engineering outcomes across large organizations through technical authority and clear practical guidance.
Comfortable with ambiguity and trade‑offs; able to choose and deliver the right security solutions in complex, constrained environments.
Preferred Experience delivering IAM for platforms that must operate in disconnected or regulated environments.
Built or contributed to authorization libraries, SDKs, or centralized policy engines used by multiple product teams.
Familiarity with authorization policy languages (e.g., Rego/Open Policy Agent) and experience integrating them into platform services.
Experience with scale considerations for token issuance, revocation, and cache/consistency models in distributed systems.
Certified Kubernetes Security Specialist (CKS).
Certified Information Systems Security Professional (CISSP) or Certified Cloud Security Professional (CCSP).
Cloud security certifications such as AWS Certified Security Specialty, Google Professional Cloud Security Engineer, or Microsoft Certified: Azure Security Engineer Associate.

Benefits

Comp & perks

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

IAM capabilitiesOAuthOIDCJWTRBACABACcloud-native security architecturesthreat modelingDevSecOps practicesauthorization policy languages

Soft Skills

leadershipmentoringmanaging technical teamsinfluencing engineering outcomescomfortable with ambiguitydecision makingcommunicationcollaborationproblem solvingadaptability

Certifications

Certified Kubernetes Security Specialist (CKS)Certified Information Systems Security Professional (CISSP)Certified Cloud Security Professional (CCSP)AWS Certified Security SpecialtyGoogle Professional Cloud Security EngineerMicrosoft Certified: Azure Security Engineer Associate