{"id":1010897,"url":"https://alion.io/job/trace3-sr-security-solutions-architect-igapamnhi-remote","title":"Sr. Security Solutions Architect | IGA/PAM/NHI (Remote)","company":{"id":1703,"name":"Trace3","domain":"trace3.com","url":"https://alion.io/company/trace3","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":10,"ghost_share":0,"stale_share":0.7,"repost_share":0,"time_to_fill_p50_days":40,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":188000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"PKI","optional":false},{"name":"Active Directory","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Okta","optional":true}],"status":"live","first_seen_at":"2026-09-17T17:56:04Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-11-05T01:23:46Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":48},"description":"Who is Trace3?\nTrace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.\nOur culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!\nTrace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco. \nReady to discover the possibilities that live in technology?\nCome Join Us!\nStreet-Smart - Thriving in Dynamic Times\nWe are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.\nJuice - The “Stuff” it takes to be a Needle Mover \nWe get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.\nTeamwork - Humble, Hungry and Smart\nWe are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures - not just their success. We appreciate the individuality of the people around us.\nJob Summary \nThe Pre-Sales Identity Architect is a senior Identity practitioner and trusted advisor responsible for helping enterprise customers assess current-state capabilities, develop Identity strategies, and architect secure, scalable, and practical solutions. \nWorking closely with Trace3 sales, technical, and delivery teams, this role leads customer discovery sessions, workshops, assessments, roadmap development, solution architecture, and technical sales activities across Identity and Access Management (IAM) disciplines. The ideal candidate has real-world experience designing, implementing, and operating enterprise Identity solutions and can translate that experience into strategic customer engagements and successful business outcomes. \nPrimary focus areas include Authentication, Authorization, Identity Providers (IDP), and Identity Governance & Administration (IGA). Exposure to Privileged Access Management (PAM), Non-Human Identity (NHI), and PKI/Certificate Lifecycle Management (CLM) are additionally nice to have. \nSUMMARY OF ESSENTIAL JOB FUNCTIONS: \nProvide industry leading consultant services to Trace3 customers. \nSupport development of IAM strategy, roadmap, and architecture across key IAM components: \nAuthentication \nAuthorization \nIdentity Governance and Administration (IGA) \nPrivileged Access Management (PAM) \nNon-human Identities (NHI) \nSupport design and deployment of IAM products and services. \nSupport industry standards, regulatory compliance, and customer business requirements. \nPerform systems modeling, simulation, and analysis to identify, analyze, and resolve problems. \nSupport the modernization of on-premises identity solutions, or migration to modern, cloud-native offerings. \nLead IAM pre-sales initiatives around tenant consolidations, identity maturity, and M&A activities \nProvide technical guidance and best practices to customers as needed. \nCollaborate with other departments to develop business cases and go-to-market strategy across other practice areas at Trace3. \nStay current with industry certifications in Identity and Access Management disciplines. \nStay current with industry trends and how they might impact tools, training, and support of existing and potential customers. \nProvide leadership, coaching and mentoring to other team members. \nPerform other duties as required or assigned. \nKey Responsibilities \nCustomer Advisory & Presales \nLead customer discovery sessions, workshops, and Identity assessments. \nDevelop Identity strategies, maturity assessments, and transformation roadmaps. \nServe as a trusted advisor to security leaders, architects, and executive stakeholders. \nPartner with sales teams to identify, qualify, and advance Identity opportunities. \nPresent solution recommendations, business cases, and architectural guidance to customers. \nLead or support proposal development, Statements of Work (SOWs), solution architecture, and technical win strategies. \nLead or support vendor, platform, and solution evaluations by helping customers compare alternatives, understand tradeoffs, and select technologies that align with their long-term Identity strategy. \nIdentity Architecture \nProvide strategy and architectural guidance across: \nCore Identity (Major) Areas \nAuthentication & Authorization \nOkta Workforce Identity Cloud \nMicrosoft Entra ID \nActive Directory \nIdentity Governance & Administration (IGA) \nNon-Human Identity (NHI) \nAdjacent Identity (Minor) Areas \nService Account & Workload Identity Security \nPrivileged Access Management (PAM) \nPKI & Certificate Lifecycle Management (CLM) \nPost-Quantum Cryptography (PQC) Awareness \nPractice Development \nContribute to reusable offerings, workshops, assessments, and reference architectures. \nSupport strategic partner relationships and emerging Identity technologies. \nShare industry trends, customer requirements, and market insights. \nMentor team members and contribute to the growth of the Identity practice. \nRequired Experience: \nBachelor's degree or equivalent experience is preferred. \n6+ years of experience designing, implementing, or architecting Identity and Access Management solutions. \n3+ years in customer-facing consulting, architecture, or presale role. \nStrong hands-on experience with Okta Workforce Identity Cloud or Entra ID required, including architecture, implementation, and customer advisory experience. \nStrong expertise in at least one of the following: Microsoft Entra ID, Okta, or Identity Governance platforms (SailPoint, Saviynt, etc.). \nExperience leading customer workshops, assessments, and architecture discussions. \nExperience developing Identity strategies, roadmaps, or transformation initiatives. \nAbility to communicate effectively with both executive and technical audiences. \nStrong written, verbal, presentation, and relationship-building skills. \nDemonstrated ability to present architectural recommendations and business value to executive and technical audiences. \nPreferred Qualifications: \nCISSP or equivalent security certification. \nOkta certification is strongly preferred; Microsoft Identity, SailPoint, or related certifications are also valued. \nExperience with Non-Human Identity (NHI) and Machine Identity particularly valued; PAM or PKI/CLM experience is also a plus. \nExperience supporting enterprise sales cycles, solution development, and customer advisory engagements. \nActual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.\nEstimated Pay Range\n$188,000—$200,000 USD\nThe Perks\nComprehensive medical, dental and vision plans for you and your dependents\n401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability\nCompetitive Compensation\nTraining and development programs\nMajor offices stocked with snacks and beverages\nCollaborative and cool culture\nWork-life balance and generous paid time off\nOur Commitment\nAt the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.\nWe’re committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, fosters collaboration, boosts teammate satisfaction, and builds a more inclusive culture.\nAs an equal opportunity employer, Trace3 bases all employment decisions based on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.\nAny demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.\nIf you require a reasonable accommodation to complete the application process or participate in an interview, please email .\n***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.","description_format":"text","description_chars":9855,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","AI Consulting & Integration","Cloud Consulting & Migration","IT Resellers & VARs"],"lifecycle":[{"event":"open","at":"2026-09-17T19:51:34Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.48,"p_room":0.55,"age_days":47,"expected_fill_days":40,"reasons":["conf:0","stale_co","velocity","win:tail"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/trace3-sr-security-solutions-architect-igapamnhi-remote","json_url":"https://alion.io/job/trace3-sr-security-solutions-architect-igapamnhi-remote.json","meta":{"generated_at":"2026-11-05T02:16:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2898,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1703},"rest":"https://alion.io/mcp/rest/get_company?id=1703"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrace3-sr-security-solutions-architect-igapamnhi-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrace3-sr-security-solutions-architect-igapamnhi-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrace3-sr-security-solutions-architect-igapamnhi-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/trace3-sr-security-solutions-architect-igapamnhi-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrace3-sr-security-solutions-architect-igapamnhi-remote"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1010897}},{"tool":"search_jobs","arguments":{"company":"trace3.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1010897},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}