Specialist II - Cloud Infrastructure Services

: Specialist II - Cloud Infrastructure Services (Senior Identity Security Lead) Position Overview The Senior Identity Security Lead is the accountable owner for all identity security strategic execution, advisory services, and identity analytics and risk management activities. This is a senior technical leadership role requiring demonstrable expertise across modern identity architecture, governance, and risk management. The individual in this position serves as the named provider lead responsible for translating the organization's identity security roadmap into executable delivery plans and providing ongoing technical advisory on emerging identity threats and technologies. This role operates under the strategic direction and oversight of the Identity Security Lead, who retains final decision-making authority on all architectural direction and roadmap priorities. The Senior Identity Security Lead translates approved initiatives into actionable execution plans and provides subject matter expertise across the identity estate. Key Responsibilities Strategic Execution & Roadmap Delivery Review the organization's Identity Security roadmap and strategic direction as defined by the Identity Security Lead Translate approved requirements into executable delivery plans with clear timelines, milestones, and success criteria Implement agreed strategic initiatives within committed timelines while maintaining alignment with organizational business and security objectives Provide comprehensive technical guidance to internal teams and stakeholders during the implementation and migration of identity solutions, ensuring architectural consistency Conduct regular architecture assessments of the identity estate, documenting current state, identifying gaps, and producing actionable improvement recommendations for the Identity Security Lead's consideration Collaborate effectively with infrastructure, security, application development, and business stakeholder teams to deliver integrated identity solutions Advisory Services & Emerging Technologies Stay current with identity vendor landscape developments, including product roadmaps, deprecation risks, and emerging capability gaps Provide advisory input on emerging identity security trends, threats, and technological advancements, including: Identity analytics and risk assessment methodologies AI-driven identity risk detection and anomaly identification Non-human identity (NHI) and service account management SaaS identity security and multi-cloud identity governance Passwordless and phishing-resistant authentication technologies Present recommendations and threat intelligence to the Identity Security Lead for strategic consideration and decision-making Contribute to the Identity Security roadmap backlog based on threat intelligence, industry benchmarking, observed estate risks, and regulatory developments Identity Analytics & Risk Management (IARM) Monitor identity telemetry and analytics across in-scope platforms (currently CrowdStrike IDP, Entra ID Protection, and CyberArk) to identify anomalous patterns and unusual access behavior Detect indicators of credential-based attack, insider threat activity, and unauthorized access escalation Produce regular identity risk reports covering: Anomaly detection trends and patterns High-risk accounts and suspicious user behavior Privilege escalation patterns and access deviations Peer-group analytics and behavioral baselines Deliver identity risk reports to the Identity Security Lead and Cyber Security Manager on a regular cadence Ensure strict adherence to identity security policies and escalate confirmed or suspected identity compromises to the SOC and Cyber Security Manager without delay Advise the Identity Security Lead on opportunities to apply data-driven and machine learning-assisted approaches to identity risk detection as tooling capabilities mature Support implementation of identity risk scoring, peer-group analytics, and advanced detection capabilities as directed by the Identity Security Lead Cross-Functional Collaboration Partner with the Identity Security Lead to translate strategic vision into technical execution plans Work closely with infrastructure and platform teams to ensure identity solutions integrate seamlessly with the broader technology environment Engage with security teams and SOC to coordinate incident response and threat mitigation related to identity compromise Communicate technical identity concepts to non-technical stakeholders and business leaders Maintain stakeholder awareness of identity security risks, mitigation activities, and strategic initiatives Required Qualifications & Experience 10+ years of hands-on experience in identity architecture, governance, and management across enterprise environments Demonstrated expertise across multiple identity domains: Identity and Access Management (IAM) architecture and implementation Identity Governance and Administration (IGA) platforms and processes Privileged Access Management (PAM) and privileged user governance Deep technical expertise with: Microsoft Entra ID (Azure AD) architecture, configuration, and governance Active Directory (AD) infrastructure, group policy, and directory services Ability to translate complex technical architecture into business-aligned strategic roadmaps and communication materials Demonstrated success working with regulatory requirements and compliance frameworks including: Financial Conduct Authority (FCA) regulations and guidance General Data Protection Regulation (GDPR) Protection of Personal Information Act (POPIA) Proven ability to communicate effectively with both technical teams and senior stakeholders, translating identity security concepts for diverse audiences Experience designing and implementing identity solutions that balance security objectives with operational efficiency and user experience Preferred Qualifications & Experience Experience with identity analytics platforms and tools (e.g., CrowdStrike IDP, Entra ID Protection, CyberArk) Hands-on experience with advanced authentication technologies including passwordless, multi-factor, and phishing-resistant approaches Working knowledge of non-human identity (NHI) and service account management Experience managing identity security within multi-cloud environments Familiarity with identity threat landscape, emerging attacks, and threat-informed defense approaches Relevant industry certifications (e.g., CISSP, CCSK, identity-specific certifications) Experience in financial services or regulated industry environments Key Competencies Technical Leadership: Ability to provide authoritative technical guidance and make sound architectural decisions in complex identity environments Strategic Thinking: Capacity to align technical identity solutions with broader business and security strategy Risk Management: Strong understanding of identity risks, threat vectors, and mitigation strategies Communication: Ability to explain complex identity concepts to diverse stakeholder groups from technical practitioners to C-level executives Stakeholder Management: Experience managing expectations and building consensus among technical teams, business units, and security leadership Problem-Solving: Strong analytical and troubleshooting capabilities for complex, enterprise-scale identity challenges Continuous Learning: Commitment to staying current with rapidly evolving identity security landscape and emerging technologies Accountability: Takes ownership of deliverables and outcomes, providing transparent communication on progress and challenges Success Metrics & Key Performance Indicators Successful delivery of identity security strategic initiatives within agreed timelines and budgets Regular, actionable architecture assessments and improvement recommendations delivered to the Identity Security Lead Timely identification and escalation of identity anomalies and security risks