Lead Identity & Access Architect
Mythics, LLC
full-time
Posted on:
Location Type: Office
Location: Virginia Beach • Virginia • United States
Visit company websiteExplore more
Job Level
Tech Stack
About the role
- Lead hands-on discovery of Active Directory and Entra ID environments to uncover attack paths, shadow admins, and misconfigured GPOs
- Identify the highest-impact choke points representing the majority of client risk and map findings to time-bound remediation steps with clear owners
- Deliver executive briefings that translate technical findings into business impact, roadmaps, and Identity Risk Scorecards
- Lead proof-of-remediation engagements for top findings and measure impact before broader rollout
- Guide clients from reactive, password-based security toward enforced Zero Trust and least-privilege architectures
- Identify and remediate risks from orphaned service principals, automated service accounts, and shadow AI agents
- Build and maintain reusable automation and a Git-based playbook library using PowerShell, KQL, Python, and Neo4j/Cypher
- Ensure alignment to NIST SP 800-53, CISA directives, FedRAMP, and CMMC; produce artifacts supporting audits and accreditations
- Mentor pod engineers and support knowledge transfer across engagements
- Perform all other duties as assigned
Requirements
- Bachelor's degree in an IT-related field or equivalent experience
- 12–15 years in cybersecurity consulting; 5+ years leading identity modernization engagements
- Deep, hands-on experience with Microsoft's identity and security stack: Entra ID, Conditional Access, PIM, Defender for Identity, Sentinel, and Microsoft 365 Defender
- Experience in U.S. Public Sector frameworks (NIST SP 800-207/800-53, FedRAMP, CMMC) highly desirable
- Proficiency with Active Directory and Entra ID; working knowledge of BloodHound, PingCastle, and Purple Knight required
- Fluency in PowerShell, KQL, Python, and Neo4j/Cypher
- Ability to see an environment through an attacker's eyes and communicate risks clearly to executive stakeholders
- Familiarity with common adversary tactics and structured threat modeling approaches
- Strong written and verbal communication skills; able to translate technical findings into executive narratives
- DevOps hygiene (Git, PRs, CI) and a product-oriented mindset toward automation
Benefits
- Comprehensive Health, Dental, and Vision plans
- Premier 401k retirement plan with corporate matching and a 529 college saving plan
- Tax-advantaged Health Savings Account and Dependent Care Flexible Spending Account options
- Legal Resources
- Generous work/life balance opportunities supported by a PTO bank, paid holidays, leave programs and additional flex time off
- Employee referral program
- Employee recognition, gift and reward program
- Tuition reimbursement for continuing education
- Remote or hybrid work options
- Engaging company events such as team building activities, annual awards and kick-off parties
- Health and wellness-focused activities
- Relaxation Spaces
- In-office gourmet coffee, tea, fresh fruit and healthy snacks
- Corporate GREEN approach – tracking energy consumption for reduction and purchasing only environmentally friendly products for our offices
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
Active DirectoryEntra IDPowerShellKQLPythonNeo4jCypheridentity modernizationZero Trust architectureleast-privilege architecture
Soft Skills
communication skillsmentoringknowledge transferexecutive briefingrisk assessmentproblem-solvingcollaborationleadershiptechnical translationstakeholder engagement
Certifications
Bachelor's degree in IT-related fieldNIST SP 800-53FedRAMPCMMC