Identity and Data Security Architect at Aqueduct Tech

Aqueduct Tech

Hybrid, Canton MA·4d ago

Mid LevelFull-timeAWSAIAPIML

Salary Range

$97,750 - $132,250 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

Aqueduct Technologies is seeking an Identity and Data Security Architect to serve as a senior, customer-facing technical architect responsible for designing, enforcing, and operationalizing identity- and data-centric security controls that govern access to sensitive data across hybrid and cloud environments.

Key Responsibilities

→Lead DSPM-led data discovery and posture management deployments across cloud, SaaS, and data platforms
→Lead discovery engagements to identify where sensitive data resides, how it is accessed, and where controls break down
→Translate findings into prioritized technical roadmaps aligned to business impact and cyber risk
→Own the data access control plane and operate alongside secure access and network security architectures
→Design controls that govern who can access sensitive data independent of how or where users connect
→Implement conditional access, lifecycle governance, and identity controls tied directly to data sensitivity
→Architect and configure IAM and IGA platforms such as Microsoft Entra ID and Okta
→Translate DSPM findings into enforcement actions, including entitlement reduction and access governance changes
→Design and enforce DLP strategies for data at rest and data in transit
→Implement browser- and endpoint-based data controls using secure access technologies
→Architect API and non-human identity security models using identity-based authentication and authorization
→Secure data lakes, warehouses, and lakehouses using identity-aware access, classification, and policy enforcement
→Design controls governing access to data used in analytics, AI/ML, and LLM-enabled workloads
→Act as a player and coach on larger engagements, providing design leadership while contributing directly to execution
→Design identity and data access controls that function during incidents, recovery events, and degraded operating states
→Develop internal reference architectures, patterns, and delivery standards for identity and data access security

Requirements

✓6+ years of progressive experience in identity, data security, or access governance roles
✓Demonstrated ability to own outcomes end-to-end, from strategy through hands-on implementation
✓Hands-on experience deploying and operationalizing DSPM platforms (Cyera, Laminar)
✓Strong experience with IAM and IGA platforms such as Entra ID and Okta
✓Practical experience using tools such as Cyera, Laminar, BigID and Varonis
✓Solid understanding of identity-based API authentication and authorization
✓Understanding of modern cloud, data platforms, and identity-aware application architectures
✓Working knowledge of incident response, business impact analysis, and BC/DR concepts
✓Strong customer-facing communication skills
✓Summary Bullets
✓Design and enforce identity and data security controls across hybrid and cloud environments
✓Lead data discovery and posture management deployments across various platforms
✓Translate business risk and regulatory requirements into technical controls
✓Architect and configure IAM and IGA platforms like Microsoft Entra ID and Okta
✓Implement conditional access and lifecycle governance tied to data sensitivity
✓Design DLP strategies for data at rest and in transit
✓Secure data lakes, warehouses, and lakehouses using identity-aware access
✓Requirement Bullets
✓6+ years of experience in identity, data security, or access governance
✓Experience with DSPM platforms (Cyera, Laminar)
✓Strong experience with IAM and IGA platforms
✓Practical experience with data discovery and access governance tools
✓Understanding of identity-based API authentication
✓Knowledge of modern cloud and data platforms
✓Working knowledge of incident response and BC/DR concepts
✓Strong customer-facing communication skills
✓Benefit Bullets
✓[]