{"id":4309824,"url":"https://alion.io/job/newvision-software-consultancy-authz-security-architect","title":"AuthZ Security Architect","company":{"id":4489094,"name":"NewVision Software & Consultancy","domain":"newvision-software.com","url":"https://alion.io/company/newvision-software-and-consultancy","size_band":"501-1000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"API Gateway","optional":false},{"name":"Auth0","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Open Policy Agent","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-05-27T00:00:00Z","employer_posted_date":"2026-11-14","last_verified_at":"2026-11-14T11:21:27Z","board_verified":true,"closed_at":null,"days_open":171,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":171},"description":"AuthZ Architect (CEM + Gatekeeper)\nJob Details\nJob Code AZ-AR-003 Job Family Digital/ Solution Architecture\nGrade / Level Contractor Employment Type Contract\nLocation US Reports To -\nPosition Summary\nThe AuthZ Architect designs and governs client's Authorization (AuthZ) architecture, with a focus on Customer & External Member (CEM) identity scenarios and Gatekeeper policy enforcement frameworks. This role ensures that fine-grained access control policies are consistently applied across APIs, microservices, and portal platforms.\nKey Responsibilities\nDesign the enterprise Authorization (AuthZ) architecture spanning RSM’s Client Entity manager (CEM) identity domains and internal systems.\nArchitect and implement policy enforcement points (PEPs) for API gateways, microservices, and portal platforms.\nDefine authorization models (RBAC, ABAC, ReBAC) and policy frameworks; translate business access requirements into policy rules.\nGovern integration between the AuthZ layer and identity providers (Azure AD / Entra ID, CIAM platforms) and API management gateways.\nLead threat-modelling exercises for access control scenarios; identify and remediate authorization vulnerabilities.\nDefine standards for externalized authorization; advise on Open Policy Agent (OPA), Gatekeeper, or equivalent policy engines.\nCollaborate with application architects (MyRSM, Assurance, Consulting platforms) to embed authorization patterns into solution designs.\nProduce and maintain AuthZ architecture documentation: policy decision point (PDP) diagrams, ABAC attribute catalogues, and access control matrices.\nProvide guidance on regulatory and compliance requirements (SOC 2, ISO 27001, GDPR) as they relate to access control.\nEvaluate emerging AuthZ standards (Zanzibar, SPICE, Cedar) and advise on adoption roadmaps.\nQualifications & Experience\n7+ years of identity, access management, or security architecture experience, with at least 3 years focused on authorization solutions.\nDeep expertise in authorization concepts: RBAC, ABAC, ReBAC, and policy-as-code frameworks.\nHands-on experience with Open Policy Agent (OPA), Gatekeeper, or comparable externalized authorization engines.\nStrong understanding of OAuth 2.0, OpenID Connect, and token-based authorization flows (JWT, SAML).\nExperience with Customer Identity & Access Management (CIAM) platforms (Preferably SailPoint Or Any of the Azure AD B2C, Okta, Auth0).\nFamiliarity with API gateway authorization patterns (Azure API Management, Boomi, AWS API Gateway).\nKnowledge of zero-trust architecture principles and their application to authorization design.\nRelevant certifications (CISSP, CCSP, or vendor-specific IAM certifications) are advantageous.\nExperience working in regulated industries or with compliance frameworks (SOC 2, ISO 27001, GDPR) preferred.\nStrong ability to communicate authorization concepts to both security and non-security stakeholders.\nCore Skills & Technologies\nAuthZ Architecture OPA / Gatekeeper RBAC / ABAC / ReBAC\nOAuth 2.0 OpenID Connect SailPoint\nZero Trust API Security Policy as Code\nAzure AD / Entra ID SOC 2 / ISO 27001\nWorkday Classification Fields\nWorker Type Contingent Worker\nTime Type Full Time\nJob Profile AuthZ Architect (CEM + Gatekeeper)\nJob Family Group Information Technology\nJob Family Technology / Identity & Access Architecture\nManagement Level Contractor\nWork Location US\nCompensation Grade To be set by Compensation team\nSupervisory Organization Digital/ S","description_format":"text","description_chars":3455,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-14T11:21:27Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.535,"p_room":0.28,"age_days":171,"expected_fill_days":44,"reasons":["conf:2","win:tail","crowd:brand"],"computed_at":"2026-11-14T14:13:27Z"},"pay":null,"html_url":"https://alion.io/job/newvision-software-consultancy-authz-security-architect","json_url":"https://alion.io/job/newvision-software-consultancy-authz-security-architect.json","meta":{"generated_at":"2026-11-14T14:13:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14977,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4489094},"rest":"https://alion.io/mcp/rest/get_company?id=4489094"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnewvision-software-consultancy-authz-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnewvision-software-consultancy-authz-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnewvision-software-consultancy-authz-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/newvision-software-consultancy-authz-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnewvision-software-consultancy-authz-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4309824}},{"tool":"search_jobs","arguments":{"company":"newvision-software.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4309824},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}