Skip to main content

About the role

Overview: In this role you will strengthen BCG’s cybersecurity by leading security architecture and governance for enterprise identity and access management. You’ll define standards, guide secure identity solutions, and support the firm’s Zero Trust strategy across hybrid environments. You will partner with the Secure Identity Engineering Squad and global tech teams to ensure secure delivery and governance throughout the solution lifecycle. This position offers impact across people, applications, and infrastructure, within a collaborative, security‑minded culture.
Responsibilities: Define and maintain identity security architecture including authentication, conditional access, governance, and privileged access across a hybrid environment with an enterprise identity inventory Specify architectural requirements for identity platforms (Microsoft Entra ID, Okta) and related controls (MFA, SSO, federation) Define crypto‑agility and PQC transition requirements for credentials, certificates, and secrets for privileged and Tier‑0/Tier‑1 identities Set architectural requirements for identity lifecycle management, privileged access, and non‑human identities including service accounts and AI agents Advance automation and policy‑as‑code for identity governance and automated remediation Provide security architecture governance through reviews, ADRs, and risk escalation when needed Strengthen identity threat protection with controls for credential compromise and token theft, in collaboration with Security Operations Define identity telemetry requirements including logging and monitoring in partnership with Security Operations
Key requirements: 6–10 years in security architecture, infrastructure security, or security engineering Deep expertise in identity security architecture and platforms such as Microsoft Entra ID and Okta Experience securing human and non-human identities (service accounts, workload identities, AI agents) Strong knowledge of identity assurance frameworks (NIST SP 800‑63, ISO/IEC 24760) and Zero Trust architecture Cloud experience across Azure, AWS, and GCP Ability to evaluate risks, define requirements, and guide practical security solutions Proven ability to influence engineering teams and navigate enterprise governance Experience collaborating across global technology teams influence without authority clear communication of technical decisions stakeholder management Microsoft Entra ID Okta identity platforms

Matching similar jobs

JOB OVERVIEW

Experience level

Manager

Location

Atlanta, GA

Occupation

Computer Systems Engineers/Architects

Industry

Computer Systems Design Services

Posted

today

Tired of running searches?

Rank the roles you'd take once, and matches like these arrive on their own.

CREATE PROFILE (opens in a new tab)