Base Salary
$191k - $297k/yr
Responsibilities
- Lead the design and architecture of enterprise IAM solutions across cloud, on-premises, and hybrid environments.
- Set IAM technical strategy covering identity governance, zero trust identity, cloud IAM, agentic identity, and automation.
- Define standards, architecture, and governance for AI agents, bots, machine identities, and automated services.
- Advise security leadership, engineering teams, business stakeholders, and executives on identity architecture, access risk, and emerging threats.
- Lead identity architecture reviews, threat modeling, identity-related incident response, research, vulnerability analysis, and proof-of-concept development.
- Develop IAM standards, design patterns, and reference architectures aligned with security frameworks, regulations, and industry practices.
- Partner with platform engineering, AI/ML, application, infrastructure, enterprise architecture, DevSecOps, compliance, audit, and risk teams.
- Mentor IAM engineers, analysts, and cybersecurity engineers and foster technical excellence.
- Drive identity automation and tooling initiatives to improve provisioning, access reviews, threat detection, and response.
- Track and communicate IAM metrics, roadmaps, and identity risk posture to executive and board-level stakeholders.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; a master’s degree is preferred.
- At least 12 years of experience in information security, including at least five years focused on IAM in a senior or principal technical leadership role.
- Deep expertise in workforce and customer identity, privileged access management, identity governance, federation, directory services, and agentic identity patterns.
- Experience architecting and implementing IAM solutions in large-scale enterprise environments, including AWS IAM, Azure Entra ID, and GCP IAM.
- Strong understanding of NIST 800-63, OAuth 2.0, OpenID Connect, SAML, SCIM, SPIFFE/SPIRE, and FIDO2/WebAuthn.
- Experience with IGA, PAM, CIAM, SSO/federation, identity orchestration, and identity threat detection and response tools.
- Experience designing identity solutions for service accounts, API keys, machine identities, and AI agents.
- Relevant advanced security certification required, such as CISSP, GIAC, CCSP, OSCP, or equivalent.
- Preferred experience includes IAM transformations in retail or e-commerce, identity-as-code, infrastructure-as-code for IAM, CI/CD identity integration, identity fabric architectures, AI-enhanced identity analytics, vendor evaluation, and identity supply-chain risk management.
- Preferred qualifications include mentoring identity professionals, translating technical security concepts into business risk language, and active security-community participation through speaking, publications, or open-source contributions.
Benefits
- Hybrid Seattle work arrangement requiring at least four days per week in the Nordstrom corporate headquarters.
- Medical, vision, dental, retirement, paid time away, life insurance, and disability benefits.
- Merchandise discount and Employee Assistance Program resources.
- 401(k), paid time off accruals, holidays, and other benefits subject to eligibility requirements.
- The position may be eligible for performance-based incentives or bonuses.
Categories
About Nordstrom
At Nordstrom, we empower our employees to set their sights high and blaze their own trails. This is a place where your success and growth are truly a result of your own efforts and achievements. Our teams are made up of motivated people who work hard to become leaders within the company, at all levels of the organization. These well-traveled paths show how hard work, loyalty, a competitive spirit and your unwavering commitment to the customer can take you and your career to new places. In addition to being a great place to have a career, we’re also committed to respecting the environment and supporting our communities. To learn more, check out NordstromCares.com. Interested in joining the Nordstrom team? See some of our current opportunities under our Careers tab or visit careers.nordstrom.com to apply today.