{"id":442514,"url":"https://alion.io/job/fnz-identity-security-privileged-access-architect","title":"Identity Security Privileged Access Architect","company":{"id":172223,"name":"FNZ","domain":"fnz.com","url":"https://alion.io/company/fnz","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":19,"ghost_share":0,"stale_share":0.947,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":49000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false}],"status":"live","first_seen_at":"2026-09-02T00:00:00Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-11-09T06:03:19Z","board_verified":true,"closed_at":null,"days_open":68,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":68},"description":"Job Title: Identity Security Privileged Access Architect\nLocation: Pune, India\nReports to: Head of Identity Security\nRole Description:\nAt FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here within the Security Technology and Ops team, we are on a mission to embed cyber resilience across FNZ, protecting the platforms that support investment solutions for over 20 million people. We are seeking a strong Privileged Access Architect / Engineer to support the design, automation and implementation of Identity and Privileged access management solution (CyberArk). Must have knowledge of identity stores (e.g. EntraID and Active Directory) and cloud identity concepts. Will work across identity solutions as part of Identity security team such as Secrets Management and CyberArk. Must be able to script automated solutions and engage with business stakeholders to solutionise identity concepts. The successful candidate will combine deep technical expertise in security platforms with engineers, drive operational maturity, and deliver engineering improvements across multiple security domains. This role sits within Identity Security. The focus is on engineering and. You will work closely with global engineering teams and the Identity Security function across the global audience.\nSpecific Role Responsibilities\nContribute to the development and improvement of the group privileged Access tool (CyberArk) moving to a possible SaaS solution and hybrid model\nDrive initiatives to mature security controls, services and processes around privileged access\nSupport in building effective governance and oversight of security controls and services.\nSupport in the delivery of the Global technology strategy, Working with the Identity Security Team.\nContribute to the development and maintenance of formal security documentation (i.e. policies, standards).\nSupport the implementation of Just in Time, least privileged processes\nSupport the Global CyberArk Instances (currently 3 on prem instances in place)\nBuild the patterns for Management of Non-Human / Service accounts • AI risk identification for Privileged access\nSupport a controlled monitoring function to manage user sessions\nSupport Groups and users within Groups for key platforms and services\nSupport in the development and delivery of consistent global services that enable delivery of the business goals.\nExperience required\n Primary requirements\nStrong experience of IAM lifecycle and Specifically Entra / AD / Cloud and CyberArk\nStrong Secrets management knowledge controlling SSH, Keys, passwords & Certificates\nSME level knowledge Experience in developing and managing formal security documents.\nProven ability to manage internal stakeholders through a journey of improving maturity.\nGood ability to communicate information security and risk concepts to stakeholders of all levels.\nVendor tooling CyberArk Guardian level knowledge • Coding skillset and knowledge to support other engineers and the Identity Security team\nCloud (MS Azure as a main focus) privileged account strategy and ownership\nAbout FNZ\nFNZ is committed to opening up wealth so that everyone, everywhere can invest in their future on their terms. We know the foundation to do that already exists in the wealth management industry, but complexity holds firms back.\nWe created wealth’s growth platform to help. We provide a global, end-to-end wealth management platform that integrates modern technology with business and investment operations. All in a regulated financial institution.\nWe partner with the world’s leading financial institutions, with over US$2.5 trillion in assets on platform (AoP).\nTogether with our clients, we empower nearly 30 million people across all wealth segments to invest in their future.","description_format":"text","description_chars":3835,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","Custody & Fund Administration"],"lifecycle":[{"event":"open","at":"2026-09-06T07:29:52Z"},{"event":"close","at":"2026-09-30T00:24:50Z"},{"event":"reopen","at":"2026-10-05T12:53:51Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":0.6,"p_active":0.479,"p_room":0.28,"age_days":68,"expected_fill_days":28,"reasons":["seen:35","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/fnz-identity-security-privileged-access-architect","json_url":"https://alion.io/job/fnz-identity-security-privileged-access-architect.json","meta":{"generated_at":"2026-11-09T07:47:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5423,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":172223},"rest":"https://alion.io/mcp/rest/get_company?id=172223"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffnz-identity-security-privileged-access-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffnz-identity-security-privileged-access-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffnz-identity-security-privileged-access-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fnz-identity-security-privileged-access-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffnz-identity-security-privileged-access-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":442514}},{"tool":"search_jobs","arguments":{"company":"fnz.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":442514},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}