Senior Identity Security Architect (Cybersecurity)

Location: Remote, United States; candidates must be authorized to work and reside in the United States. Optional quarterly travel for in-person company events and other meetings.

Salary: $175,000–$200,000 USD base annually, plus bonus, equity, and benefits depending on experience and location.

Company

SpecterOps develops identity security and attack path management solutions, including BloodHound Enterprise and BloodHound Scentry.

What you will do

• Advise enterprise customers implementing Identity Attack Path Management programs.
• Translate BloodHound Enterprise findings and attack path analysis into prioritized remediation strategies.
• Provide guidance on Active Directory, Microsoft Entra ID, hybrid identity, privileged access, identity governance, and identity modernization.
• Evaluate identity architectures through an adversary and attack path perspective and support Privilege Zone operationalization.
• Develop remediation frameworks, playbooks, reference architectures, and repeatable implementation guidance.
• Train and mentor consultants and TAMs while partnering with researchers to operationalize emerging attack path research.

Requirements

• 8+ years of experience designing, operating, securing, modernizing, or remediating enterprise identity environments.
• Deep expertise in Active Directory and Microsoft Entra ID, including hybrid identity architectures and synchronization technologies.
• Experience with BloodHound or attack path analysis.
• Experience leading enterprise remediation, modernization, migration, or security improvement initiatives.
• Strong knowledge of administrative tiering, delegated administration, privileged access management, identity governance, and enterprise identity operations.
• Experience with technical and business stakeholders, consulting or customer-facing advisory work, and methodology or framework development.

Nice to have

• Experience supporting enterprise Active Directory environments with 50,000+ users.
• Familiarity with offensive security, adversary tradecraft, or red team operations.
• Experience with Okta, Ping Identity, CyberArk, SailPoint, Intune, SCCM, Tanium, Jamf, PKI, virtualization, or cloud infrastructure.

Culture & Benefits

• Remote work with a $1,500 first-year home office allowance and $500 annual allowance thereafter.
• 100% company-paid health, dental, vision, and life insurance for employees and families.
• Flexible time off, 13 paid holidays, and a 401(k) with up to 4% company match.
• Equity, quarterly performance-based bonus, and $150 monthly cell phone and internet reimbursement.
• Annual professional development, continuing education or student loan repayment, and lifestyle and wellness benefits.
• In-person and virtual employee events throughout the year.