Senior Identity Security Architect

SpecterOps

Senior Identity Security Architect advising SpecterOps customers on identity architecture and remediation. Translating BloodHound attack paths into measurable enterprise risk reduction.

Posted 8/19/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $175,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Active Directory and Microsoft Entra ID, with a strong focus on developing and implementing Identity Attack Path Management strategies. Proven ability to lead enterprise remediation initiatives and facilitate collaboration across technical and business stakeholders to enhance identity security.

Highest-signal resume keywords

Active Directory ExpertiseMicrosoft Entra ID ProficiencyIdentity Attack Path AnalysisEnterprise Remediation LeadershipIdentity Governance Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Synchronization TechnologiesHybrid Identity ArchitecturesPrivileged Access ManagementDelegated AdministrationAdministrative TieringIdentity ModernizationRemediation Framework DevelopmentAttack Path AnalysisOperational Program BuildingConsulting Experience

Soft Skills

Excellent Communication SkillsStakeholder EngagementMentorship and Training

Tools & Technologies

BloodHoundOktaPing IdentityCyberArkSailPointMicrosoft IntuneSCCMTaniumJamf

Industry Keywords

Identity Attack Path ManagementEnterprise Identity OperationsAdversary TradecraftRed Team OperationsPKICloud InfrastructureVirtualization Platforms

Tech Stack

Tools & technologies

CloudJamf

About the role

Key responsibilities & impact

Serve as a trusted advisor to enterprise customers implementing Identity Attack Path Management programs
Translate BloodHound Enterprise findings and attack path analysis into actionable remediation strategies
Help customers prioritize remediation activities based on risk, impact, dependencies, and operational constraints
Facilitate discussions across Security, Infrastructure, IAM, Endpoint Management, Engineering teams, and other stakeholders
Advise customers on architectural and operational improvements that reduce attack path risk
Provide guidance on Active Directory, Microsoft Entra ID, and hybrid identity architectures
Advise on delegated administration, privileged access management, administrative tiering, identity governance, service account security, and identity modernization initiatives
Assist customers with Privilege Zone development and operationalization
Evaluate identity architectures through an adversary and attack path lens
Develop attack-path-centric remediation frameworks, playbooks, and reference architectures
Create repeatable guidance for remediation prioritization, ownership, implementation planning, and validation
Identify recurring customer challenges and codify successful remediation patterns
Help establish scalable delivery methodologies across BloodHound Scentry
Partner with researchers to operationalize emerging tradecraft and attack path research
Support consultants and TAMs through training, mentorship, and guidance
Contribute to the evolution of Identity Attack Path Management methodologies and best practices
Become a core contributor to BloodHound Scentry engagements
Establish SpecterOps' remediation methodology and architectural guidance frameworks
Improve customer outcomes by helping organizations move from attack path identification to measurable risk reduction
Enable consultants and TAMs through repeatable remediation patterns and implementation guidance
Strengthen SpecterOps' ability to help customers operationalize Identity Attack Path Management at scale

Requirements

What you’ll need

8+ years of experience designing, operating, securing, or modernizing enterprise identity environments
Deep expertise in Active Directory and Microsoft Entra ID
Experience with BloodHound or attack path analysis
Experience with hybrid identity architectures and identity synchronization technologies
Demonstrated experience leading enterprise remediation, modernization, migration, or security improvement initiatives
Strong understanding of administrative tiering, delegated administration, privileged access management, identity governance, and enterprise identity operations
Experience working directly with technical and business stakeholders
Excellent written and verbal communication skills
Experience in consulting, professional services, or customer-facing advisory roles
Experience building methodologies, frameworks, or operational programs
Candidate must be authorized to work and reside in the United States; immigration visa sponsorship is not currently provided
Preferred: Experience supporting large-scale enterprise Active Directory environments (50,000+ users)
Preferred: Familiarity with offensive security concepts, adversary tradecraft, or red team operations
Preferred: Experience with Okta, Ping Identity, CyberArk, SailPoint, or similar identity platforms
Preferred: Experience with Microsoft Intune, SCCM, Tanium, Jamf, or other endpoint management platforms
Preferred: Familiarity with PKI, virtualization platforms, cloud infrastructure, and other critical enterprise technologies

Benefits

Comp & perks

Health/Dental/Vision/life insurance: 100% covered for both the employee and their family
Flexible time off policy
13 paid holidays annually
401(k) with up to 4% company match
Equity and quarterly bonus based on company performance
Remote work: $1,500 first year allowance to set up home office
$500 annual home office allowance after the first year
$150 monthly cell phone and internet reimbursement
$5,000 annual professional development allowance
$5,250 towards continuing education or student loan repayment
$1,200 annual benefit for lifestyle, wellness, pet insurance and more
A one-time $10,000 benefit towards family planning
In person and virtual employee events throughout the year
Company swag