Identity & Access Management Architect

1750 Tysons (12023), United States of America, McLean, Virginia

Identity & Access Management Architect

Job Responsibilities

• As an IAM Data Architect, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution

• Responsible for designing scalable and resilient big data applications and cloud data warehouses

• Build current and future state architectures, threat models, leveraging agile methodologies

• Lead design of systems using data to help determine AuthN and AuthZ decisions

• Provide technical expertise and architect an enterprise security/user entity behavior analytics (UEBA) platform for the workforce - identifying use cases, design, POC’s, AI/ML model development, train UEBA machine learning model and testing

• Research and publish implementable Identity and Access Management (IAM) data architecture patterns and solutions

• Define governance process and develop tools for managing IAM data including data integration with source systems and corresponding data pipelines

• Responsible for adherence to data transformation and Enterprise Data Management (EDM) standards

• Deal effectively with ambiguous and unstructured problems and situations

• Knowledge of payment services compliance standards, regulations and cyber security frameworks (NIST SP 800-63, PCI DSS, CCPA, GDPR, SOX etc..)

• Developing and maintaining an IAM data product map to support the reference framework

• Working with Data Engineers to review and validate understanding of customer or solution requirements and translate initial scope into technical deliverables

• Assess current IAM data solutions, integrate with standard enterprise identity platforms and recommend new approaches

• Creating architectural documentation and artifacts to support Capital One’s data transformation journey

• Use and maintain open source software frameworks

You might notice that there’s no mention of specific languages or technologies. That’s because your commitment to learning new things is every bit as important to us as what you have already done. Maybe even more so because we don’t want to be doing the same thing tomorrow that we’re doing today. You accept change, want to grow, and evolve into a better member of the team. But just in case, here are some buzzword-worthy tools and technologies we currently use: Scaled Agile, AWS, IAM, Python, R, Hbase, Hadoop, Apache Spark, Apache NIFI, Apache Storm, Apache Kinesis, Google Cloud DataFlow, Microservices, Distributed systems, Github, Jenkins, DevSecops

Basic Qualifications

• Bachelor’s Degree

• At least 5 years of solution architecture experience

• At least 5 years of experience designing big data applications

• At least 5 years experience with data management or data governance tools

• At least 3 years of software development experience

• At least 3 years of experience with Identity & Access Management (IAM)

• At least 3 years of experience implementing stream-processing frameworks (Apache Spark, Apache NIFI, Apache Storm, Apache Kinesis, or Google Cloud Data Flow)

Preferred Qualifications:

• 5 years of experience in a public cloud environment (AWS, GCP or Azure)

• 5 years experience with machine learning models

• 2 years experience integrating security controls in DevOps pipelines

• 5 years experience with CI/CD

• 5 years of experience in directory services (Active Directory or LDAP)

• 3 years of experience with UEBA platforms

• 2 years of experience with Architecture frameworks (TOGAF or SABSA)

• 2 years of experience with SIEM technologies (Splunk or ArcSight)

• 2 years of experience with privileged access management programs or tools

• CEH, CISSP, SANS GCIA, or CISM Certification

Capital One will consider sponsoring a new qualified applicant for employment authorization for this position.

No agencies please. Capital One is an Equal Opportunity Employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex, race, color, age, national origin, religion, physical and mental disability, genetic information, marital status, sexual orientation, gender identity/assignment, citizenship, pregnancy or maternity, protected veteran status, or any other status prohibited by applicable national, federal, state or local law. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).