Security Architect - Security And Compliance.

Costco IT is responsible for the technical future of Costco Wholesale, the third largest retailer in the world with wholesale operations in fourteen countries. Despite our size and explosive international expansion, we continue to provide a family, employee centric atmosphere in which our employees thrive and succeed. As proof, Costco ranks seventh in Forbes "World's Best Employers".
This is an environment unlike anything in the high-tech world and the secret of Costco's success is its culture. The value Costco puts on its employees is well documented in articles from a variety of publishers including Bloomberg and Forbes. Our employees and our members come FIRST. Costco is well known for its generosity and community service and has won many awards for its philanthropy. The company joins with its employees to take an active role in volunteering by sponsoring many opportunities to help others.
Come join the Costco Wholesale IT family. Costco IT is a dynamic, fast-paced environment, working through exciting transformation efforts. We are building the next generation retail environment where you will be surrounded by dedicated and highly professional employees.
The Security Architect (Identity and Access focus) plays a crucial role in our organization's security strategy, focusing on the development and implementation of our identity and access management architecture. This specialist will guide architects and engineers in creating, building, and testing IAM solutions within Costco's IT network. With an in-depth understanding of complex IT systems and cloud technologies, this professional will stay current with industry trends and the latest standards, systems, and protocols, especially those regarding IAM.
If you want to be a part of one of the worldwide BEST companies "to work for", simply apply and let your career be reimagined.
ROLE
• Determines security requirements by evaluating business strategies and requirements.
• Creates comprehensive security requirements documenting certifications, compliance, and privacy requirements prior to product release.
• Identifies dependencies with Costco value streams and shared services based on enterprise Security Architectures.
• Plans security systems by evaluating technologies and developing requirements that adhere to industry best practices.
• Identifies and integrates essential safeguards and practices into the overall solution design of technology initiatives to deliver security requirements, documenting any residual risks.
• Leads the design, development, and implementation of our IAM strategy, aligning it with industry best practices and business objectives.
• Develops timelines for the adoption of strategic direction and new technologies in IAM.
• Analyzes trends in IAM architecture and provides strategic direction and recommendations.
• Ensures that all personnel understand the strategic direction and architectural guidance related to IAM.
• Guides the establishment of disaster recovery procedures and conducts breach of security drills, emphasizing IAM considerations.
• Advocates for governance models, frameworks, and process refinements specific to IAM.
• Collaborates in the creation of intellectual property, such as IAM standards and key reference architectures.
• Serves as an internal senior trusted advisor, providing IAM-focused security consulting services to multiple project teams and IT leaders.
• Develops and implements cloud identity strategies to ensure secure access to cloud-based resources.
• Works with architects to ensure IAM considerations are included in all aspects of the cloud security strategy.
• Analyzes technical risks and advises on risk mitigation strategies.
• Works with the Project Manager, Engineer, technical application leads and Functional/Business Analysts to develop a high-level project schedule, resource plan for the project, and project costs.
• Applies technical knowledge and customer insights to create a modernization roadmap.
• Provides strategic and architectural direction and guidance to enable architects and senior engineers to architect, design, and support cloud infrastructure and its solutions.
• Collaborates with other Architects in developing complex end-to-end Enterprise solutions.
• Determines security requirements by evaluating business strategies and requirements.
• Creates comprehensive security requirements documenting certifications, compliance, and privacy requirements prior to product release.
• Supports Costco's Architecture ecosystem by working with Enterprise Architecture, Solution Architects, System Architects and Platform Architects to ensure security by design.
• Collaborates with peer architects at various levels and helps drive solutions.
• Reviews current security strategies, architecture, and roadmaps for alignment with applicable industry best practices and implementing, evangelizing, and supporting updates.
• Develops timelines for adoption of strategic direction.
• Ensures all personnel have access to and understand strategic direction and related architectural guidance.
• Provides guidance to and architectural support for establishing disaster recovery procedures and conducting breach of security drills.
• Analyzes current trends in technology architecture and provides recommendations.
• Determines the viability of architecture related to organizational requirements.
• Evangelize governance models, frameworks and process refinements.
• Collaborates in the creation of intellectual property such as security standards/key reference architectures.
REQUIRED
• 7 years in a senior architectural role, with a specific focus on IAM and cloud identity for at least 3 years.
• 5 years' experience with Identity and Access Management deployment and management preferably with Ping ID, AAD or other industry leading products.
• Strong understanding of SAML, OAuth/OIDC, SCIM and other authentication modes.
• Knowledge of integration with target systems like Active Directory , LDAP, cloud, web and mobile applications for SSO and provisioning.
• Experience in infrastructure automation/development utilizing APIs is a plus.
• Proven experience in designing and implementing IAM strategies, systems, and solutions.
• Demonstrated ability to work in agile environments focused on fast and continual value delivery.
• Extensive knowledge in IAM, Cloud Identity, Cloud Security, Data Security, Infrastructure Security, Zero Trust, and Security Monitoring.
• Excellent understanding of the latest IAM standards, systems, and authentication protocols.
Recommended
• A Bachelor's degree in Computer Science or equivalent work experience.
• Demonstrated ability to manage time and tasks effectively and logically.
• Strong interpersonal, negotiation, and influencing skills; ability to facilitate complex discussions and bring them to resolution.
Required Documents
• Cover Letter
• Resume
California applicants, please click here to review the Costco Applicant Privacy Notice.
Pay Ranges:
Level 3 - $170,000 - $215,000, Bonus and Restricted Stock Unit (RSU) eligible
Level 4 - $200,000 - $245,000, Bonus and Restricted Stock Unit (RSU) eligible
We offer a comprehensive package of benefits including paid time off, health benefits - medical/dental/vision/hearing aid/pharmacy/behavioral health/employee assistance, health care reimbursement account, dependent care assistance plan, short-term disability and long-term disability insurance, AD&D insurance, life insurance, 401(k), stock purchase plan to eligible employees.
Costco is committed to a diverse and inclusive workplace. Costco is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or any other legally protected status. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to IT-Recruiting@costco.com
If hired, you will be required to provide proof of authorization to work in the United States. Applicants and employees for this position will not be sponsored for work authorization, including, but not limited to H1-B visas.