At Blackbaud, the Identity & Cloud Security Architect will partner with teams to develop an appropriate security strategy and define, design, and drive the target state identity posture. You will be responsible for designing and implementing identity solutions designed to meet varying business and security requirements in order to embed security (people, processes, and technology) within Blackbaud on-premise and cloud identity platforms.

The successful candidate will have a track record associated with technical security consulting / security architecture with knowledge of security architectures, technologies, standards, and industry guidelines, especially those applicable to identity and access management (IAM), privileged access management (PAM), and Cloud environments (SaaS, PaaS, IaaS).

What you will be doing:

• Defining and building an understanding of current state versus future state identity solutions, and assisting in strategy development to meet the future state.

• Design and consult on the implementation of IAM/PAM enterprise infrastructure supporting critical business systems while ensuring scalability, resiliency and end user experience

• Develop a global IAM/PAM architecture and implementation plans and collaborate with key business partners to prioritize and deliver on the identity security vision and strategy.

• Acting as a subject matter expert in identity solution design by working to deliver IAM best practices for on premise and cloud-based solutions for employees, contractors, vendors and customers.

• Own the identity management policies and processes and drive compliance across Blackbaud products

• Staying current on emerging identity technologies and trends from multiple credible sources to assess relevance and then translate into strategic opportunities and tactical advantages for the organization.

• Reviewing and assessing new third party solutions, and their integration with Blackbaud systems, to ensure the security posture of the organization is not put through undue additional risk.

What we'd like you to have:

• 8+ years of experience and in-depth current knowledge/understanding of:

  • Entitlement management, Identity lifecycle management, Access governance, Privileged access management, password vaulting

  • Multi-factor authentication, Single Sign-On, Risk based authentication, Federation, Just-in-time provisioning

  • Identity products like Azure Activity Directory, CyberArk, Sail Point, Ping, Auth0, etc

  • Cloud computing architecture with Azure, AWS and/or Google Cloud Platform

• 6+ years experience designing and implementing complex and highly available security solutions at an enterprise-scale.

• 6+ years experience in managing various stakeholder relationships to get consensus on security solutions/projects.

• 6+ years experience with Security Architecture (e.g., SABSA, TOGAF, etc.)

• A high level of risk-intelligence and risk awareness with a balanced approach when assessing risk.

• Pragmatic, highly organized attitude, exceptional time management skills

• Industry credentials like: CISSP, CCSP, CRISC, SANS/GIAC certification(s), AWS certification(s), Azure certification(s) are preferred

#LI-REMOTE

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture. Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype. Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com.

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program