{"id":2449022,"url":"https://alion.io/job/caesars-entertainment-cybersecurity-senior-iam-architect","title":"Cybersecurity Senior IAM Architect","company":{"id":1758419,"name":"Caesars Entertainment","domain":"caesars.com","url":"https://alion.io/company/caesars-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":76,"open_postings":147,"ghost_share":0,"stale_share":0.952,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Las Vegas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":90000,"max_usd":179000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"CyberArk","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-13T14:16:12Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-26T00:22:48Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"We are seeking an experienced and highly skilled Senior Identity & Access Management Architect (Level 12) to provide enterprise architecture leadership for Active Directory, Microsoft Entra ID, Microsoft 365, and hybrid identity services. This principal-level role defines, designs, and governs secure, resilient identity capabilities across on-premises and cloud environments.\n\nThe architect will own the end-to-end strategy for directory services, Entra Privileged Identity Management (PIM), authentication, identity operations, and identity integrations.\n\nYou will act as a senior technical decision-maker and SME for identity architecture, establishing standards for MFA, Conditional Access, modern authentication, lifecycle controls, and Zero Trust while ensuring identity services support operational needs and regulatory obligations.\n\n Enterprise Identity Architecture (AD and Hybrid Identity)\nLead the design and architecture of Active Directory and Microsoft Entra ID hybrid environments, including domain and forest strategy, AD and Entra migrations and consolidations, tenant integration, identity synchronization, and identity transition planning for mergers, acquisitions, and divestitures.\n\nDefine enterprise standards for identity lifecycle, identity operations, authentication, directory services, MFA, Conditional Access, and Entra Privileged Identity Management (PIM).\n\nArchitect high availability, disaster recovery, and scalability models for identity systems.\n\nLead modernization efforts such as legacy domain remediation, AD hardening, cloud identity integration, and secure Microsoft 365 administrative architecture.\n\nProvide AD and Entra privileged-identity requirements and integration guidance to teams responsible for enterprise PAM platforms.\n\nIdentity Security Strategy & Zero Trust\nDevelop and enforce identity security strategy aligned to Zero Trust architecture principles.\n\nDefine and implement controls for tiered administration, privileged role activation through Entra PIM, PAWs, AD tiering, credential protection, MFA, Conditional Access, and attack surface reduction.\n\nLead initiatives to reduce identity-based risk, including privileged account sprawl, excessive standing access, stale accounts, and unmanaged service or non-human identities.\n\nDrive adoption of passwordless and modern authentication technologies, including MFA, FIDO2, and Windows Hello for Business.\n\nPartner with PAM and security teams to align AD and Entra privileged identities with least-privilege, just-in-time access, monitoring, and credential lifecycle controls.\n\nCross-Platform Identity Integration\nArchitect integration among Active Directory, Entra ID, Microsoft 365, IAM and identity governance platforms, identity security tools, and enterprise applications.\n\nDefine identity and access architecture standards across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP), including workforce access, privileged roles, workload identities, federation, and governance.\n\nDefine standards for SSO, federation, and authentication protocols (SAML, OIDC, OAuth).\n\nOversee identity integration across on-premises, cloud, SaaS, and third-party systems, including appropriate integration with PAM platforms when privileged identities are in scope.\n\nEnsure consistent identity governance across all platforms, including human, service, workload, and other non-human identities.\n\nActive Directory Engineering Governance\nDefine standards for AD object design, OU structure, GPO strategy, DNS integration, and identity synchronization.\n\nLead AD health, performance, and security initiatives including audits, remediation, and optimization.\n\nOversee enterprise-wide initiatives such as AD consolidation, domain migrations, and forest restructuring.\n\nProvide expert escalation support for complex AD-related issues.\n\nSecurity, Risk & Compliance Oversight\nEnsure identity platforms meet applicable regulatory and security standards, including SOX, PCI, and NIST.\n\nLead efforts to audit and monitor directory activity, privileged role use, authentication, and access control effectiveness.\n\nPartner with SIEM, endpoint, and security teams to integrate identity telemetry for detection and response, including capabilities such as CrowdStrike Identity Threat Protection and other identity security tools.\n\nDefine access review, certification, and governance processes across identity systems.\n\nTechnical Leadership & Strategy\nServe as the principal architect and SME for identity and access management across the organization.\n\nDefine the long-term architectural roadmap for identity services, aligning with enterprise and cybersecurity strategy.\n\nProvide hands-on guidance and technical direction to IAM engineers and architects.\n\nInfluence executive stakeholders and drive adoption of secure identity practices across business units.\n\nIncident Response & Operational Excellence\nProvide expert-level support during identity-related incidents, including AD compromise, credential attacks, Entra role misuse, authentication failures, and identity service disruptions.\n\nLead root cause analysis and remediation for identity security incidents, coordinating with PAM platform owners when privileged access tooling is involved.\n\nEstablish monitoring, alerting, and response procedures for identity infrastructure and identity threat detections.\n\nEnsure resilience and recovery capabilities for identity services.\n\nReporting & Documentation\nDevelop architectural documentation, standards, and design patterns for enterprise identity systems.\n\nProvide executive-level reporting on identity security posture, risks, and initiatives.\n\nMaintain detailed documentation for AD, Entra ID, Microsoft 365 identity architecture, Entra PIM, and related privileged-identity integrations to support operational continuity.\n\nContinuous Improvement & Innovation\nStay current with advancements in Active Directory security, Entra ID, Microsoft 365, cloud IAM, modern authentication, identity threat protection, and privileged-identity practices.\n\nEvaluate emerging technologies, including AI-enabled identity capabilities and governance approaches for non-human identities, to improve identity security and operational efficiency.\n\nMaintain awareness of emerging agentic AI security considerations, including agent identity, delegated authority, permissions, credential use, and appropriate human oversight.\n\nDrive automation initiatives across identity lifecycle, provisioning, access governance, identity operations, and privileged role management.\n\nBachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.\n\n7+ years of experience in identity and access management, directory services, identity security, or related enterprise architecture roles.\n\nDeep expertise in Active Directory and Microsoft Entra ID, including hybrid identity, identity synchronization, authentication, directory security, and enterprise-scale architecture.\n\nRequired experience designing and governing Entra Privileged Identity Management (PIM), privileged role activation, approval, access review, and least-privilege controls.\n\nStrong knowledge of Microsoft 365 administration and architecture, including identity, role, authentication, and security dependencies across the platform.\n\nKnowledge of cloud IAM concepts and access models across Microsoft Azure, AWS, and GCP, including federation, privileged roles, workload identities, and governance. Deep expertise in every cloud platform is not required.\n\nStrong experience with identity operations and security controls, including MFA, Conditional Access, SSO, federation, passwordless authentication, identity lifecycle, access governance, and monitoring.\n\nWorking knowledge of privileged access management concepts and the ability to provide AD, Entra, and privileged-identity requirements to PAM platform teams. Familiarity with CyberArk or an equivalent PAM platform is beneficial; deep platform administration expertise is not required.\n\nKnowledge of applicable regulatory and security frameworks, including SOX, PCI, and NIST, and their relationship to identity and access controls.\n\nKnowledge of AI-related identity risks and controls, workload identities, service accounts, machine identities, and other non-human identities is preferred.\n\nAwareness of agentic AI security, including agent identities, delegated permissions, credential handling, and human oversight, is a plus.\n\nExperience with CrowdStrike Identity Threat Protection or other identity threat detection and response or identity security tools is a plus.\n\nExperience with scripting and automation, such as PowerShell or Python, for identity administration, reporting, and control enforcement is a plus.\n\nStrong troubleshooting, problem-solving, and analytical skills.\n\nExcellent communication skills with the ability to collaborate effectively with cross-functional teams and present technical information to non-technical stakeholders.\n\nExperience leading enterprise identity architecture, modernization, security, or operational improvement initiatives.\n\nSignificant experience supporting mergers, acquisitions, divestitures, or other large-scale Active Directory and Entra ID migrations and consolidations-including tenant, domain, forest, identity synchronization, coexistence, and transition planning-is a strong plus.","description_format":"text","description_chars":9384,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-13T14:16:12Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.628,"p_room":0.9,"age_days":12,"expected_fill_days":29,"reasons":["conf:5","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/caesars-entertainment-cybersecurity-senior-iam-architect","json_url":"https://alion.io/job/caesars-entertainment-cybersecurity-senior-iam-architect.json","meta":{"generated_at":"2026-10-26T09:48:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13337,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1758419},"rest":"https://alion.io/mcp/rest/get_company?id=1758419"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcaesars-entertainment-cybersecurity-senior-iam-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcaesars-entertainment-cybersecurity-senior-iam-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcaesars-entertainment-cybersecurity-senior-iam-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/caesars-entertainment-cybersecurity-senior-iam-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcaesars-entertainment-cybersecurity-senior-iam-architect"}]}