Hiring: Security Architect, Identity and Access Management Company: Grainger Location: Lake Forest, IL Job Posted Time: 2026-09-16 23:36:00 Employment Type: Full-time / Remote Target Skills & Keywords : AWS, Auth0, CyberArk, IAM, Istio, JWT, LLM, Machine Learning, OAuth2, OIDC, OWASP, Okta, PKI, SAML, SIEM, SaaS, Service Mesh About the job Experience: •10+ years in information security or identity engineering, including 8+ years in security architecture with at least 6 years focused on identity •At least 6 years focused on identity Qualifications: •Deep expertise designing enterprise identity architectures for large, complex organizations, with ownership of the strategy and target state rather than platform administration or technology engineering •Bachelor’s degree preferred; equivalent professional experience accepted •Preferred certifications: CISSP, CCSP, SABSA, IDPro CIDPRO, or vendor identity certifications •Proven ability to align senior technology and business stakeholders behind multi-year identity direction amid competing priorities •Expert understanding of OAuth 2.0/2.1, OIDC, SAML, SCIM, JWT, mTLS, token exchange, PKCE, and FIDO2/WebAuthn, including their common implementation failure modes •Deep experience with workforce and customer identity platforms in hybrid environments (e.g., Okta, Microsoft Entra ID, Auth0, etc), Active Directory, conditional access, and passwordless authentication •Strong cloud identity skills in AWS-primary environments: IAM policy and SCP design, permission boundaries, role assumption, and entitlements at scale •Specialized expertise in non-human and machine identity: workload identity, secrets management, certificate lifecycle and PKI (e.g., Venafi, AWS Certificate Manager), and service mesh identity (e.g., Istio, SPIFFE) •Solid functional working knowledge of AI and agentic identity: agent authentication patterns, delegated authority, scope minimization, MCP and AI gateway security, and frameworks such as the OWASP Top 10 for LLM Applications, MITRE ATLAS, and the NIST AI RMF •Substantive understanding of OT/ICS identity, including shared operator accounts, vendor remote access, IT/OT identity separation, and IEC 62443 zone and conduit concepts Compensation: •$135,400 - $225,600 / year •Flexible work environment (work from home / hybrid options) Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!