Veza Identity Security Technical Architect

Position Description:  
The ServiceNow Identity Security Technical Architect is responsible for defining, designing, and governing enterprise-scale identity security architectures for Templar Shield clients. This role owns the technical and architectural direction of identity security programs, leveraging ServiceNow and the Veza authorization visibility platform to provide continuous insight into identity permissions, risk, and access relationships across complex enterprise environments. 

Primary Responsibilities: 

Identity Security Architecture & Strategy 

• Own the end-to-end architecture for enterprise identity security programs, including identity governance, authorization visibility, and access analytics. 
  

• Define identity security strategies integrating ServiceNow, Veza, and adjacent cybersecurity platforms. 
  

• Design authorization graph architectures mapping assigned versus effective access, transitive permissions, and privilege inheritance. 
  

• Establish governance frameworks covering human identities, non-human identities, service accounts, APIs, machine identities, and AI agent identities. 
  

• Ensure identity architectures align with zero trust, least privilege, and secure-by-design principles. 
  

Platform & Integration Architecture 

• Architect ServiceNow-based identity security solutions integrated with CMDB, IRM, SecOps, ITSM, and external identity platforms. 
  

• Define integration architectures connecting authorization visibility platforms with ServiceNow CMDB, IRM, and SecOps workflows, and security tooling. 
  

• Establish authoritative data sources, reconciliation logic, and identity lineage across hybrid and multi-cloud environments. 
  

• Ensure architectural decisions support scalability, performance, upgradeability, and audit readiness. 
  

Enterprise Risk, Security & Governance Enablement 

• Design identity security architectures that support exposure management, vulnerability management, and security operations use cases. 
  

• Ensure identity security insights are consumable by ServiceNow IRM and SecOps workflows. 
  

• Support governance and compliance requirements aligned to NIST, ISO, and industry-specific regulatory frameworks. 
  

Technical Leadership & Delivery Oversight 

• Serve as the technical authority for identity security engagements, guiding senior engineers and implementation teams. 
  

• Review and approve solution designs, integrations, custom development, and configuration approaches. 
  

• Lead architecture workshops, design reviews, and executive-level technical discussions with clients. 
  

• Troubleshoot complex architectural, integration, and performance issues. 
  

• Ensure adherence to ServiceNow best practices and long-term platform health. 
  

Practice Growth & Advisory Support 

• Support business development through solution architecture, proposals, effort estimates, and RFP responses. 
  

• Advise internal sales and account teams on identity security solution strategy and positioning. 
  

• Contribute to the evolution of Templar Shield’s Identity Security practice, reference architectures, and delivery standards. 
  

• Mentor senior engineers and architects, establishing architectural standards across engagements.
  

• 8–10+ years of experience in Identity and Access Management (IAM), identity security, or cybersecurity architecture roles. 
  

• Demonstrated experience designing and governing enterprise-scale identity security architectures. 
  

• Deep experience with identity governance platforms and authorization visibility solutions (e.g., Veza, SailPoint, Saviynt, Clear Skye, Okta, Microsoft Entra). 
  

• Strong experience integrating identity platforms across cloud, SaaS, and hybrid enterprise environments. 
  

• Expertise governing non-human identities including service accounts, APIs, machine identities, and AI agent identities. 
  

• Hands-on experience with ServiceNow architecture, including CMDB, IRM, SecOps, and platform integration patterns. 
  

• Strong understanding of authorization models, transitive access analysis, and graph-based access relationships. 
  

• Proficiency with REST APIs, identity federation standards (SAML, OAuth 2.0, OIDC, SCIM), and integration design patterns. 
  

• Experience with Python and JavaScript for platform integration, automation, and custom workflow development 
  

• ServiceNow Certified Technical Architect (CTA) or strong progress toward CTA. 
  

• ServiceNow Certified System Administrator (CSA) and/or Certified Implementation Specialist (CIS) certifications. 
  

• Excellent consulting, analytical, and executive-facing communication skills. 
  

• Experience integrating identity platforms across cloud and hybrid environments. 
  

• Strong consulting, analytical, and client advisory skills. 
  

• Willing to travel up to 50% per client requirements 
  

Preferred / Nice-to-Have 

• Experience with graph-based authorization models and transitive access analysis 
  

• Experience with ServiceNow IRM and SecOps Modules 
  

• CISSP, CISM, or other relevant security certifications