Architect: Enterprise Identity & Data Security (MIRION)

• Architect: Enterprise Identity & Data Security
• Location: can be located at one
• of our North America sites
• Mirion is looking for motivated, experienced, and expert cyber defenders.
• As part of corporate cyber security team and reporting to Chief Information Security Officer (CISO), the Enterprise Identity & Data Security Architect shall perform responsibilities and have qualification, experience and expertise as described below.

POSITION RESPONSIBILITIES

• Define the enterprise wide IAM and Data Security strategy addressing the needs of global IT operations, Operational Technologies (OT – factories / sites) and Connected Products – IIoT solution being offered by Mirion in focused industry verticals.
• Act as an IAM subject matter expert addressing different aspects of the solution – Identity, Authentication, Authorization, Access-Control and Life-cycle Management.
• Act as a Data Security subject matter expert addressing confidentiality, integrity, and privacy requirements.
• Define IAM and Data Security policies, governance model and industry standards adoption.
• Design technical architecture and operational processes to implement Identity and Data Security solutions. A coherent, reusable, reliable and phased architecture to help the business grow and change while aligning to strategic vision.
• Drive adoption of IAM and Data Security controls globally (IT and OT/IIoT) and with different division’s Connected Products offering to Mirion customers.
• Keep track of emerging security threats, technology trends and maintain agile solution framework that can align to growing need of organization while offering resilient cyber security control.
• Work with partner organization to manage IAM and Data Security operations. Operate in-scope cyber security controls at highest assurance level.
• Identify the white space to implement most cost-effective means of achieving organizational goals.
• Be champion of cyber security discipline and participate/offer user training, educational sessions to internal / external users.

QUALIFICATION REQUIRED

• 10+ years of experience as security engineer/architect – must have worked on large enterprise wide IAM and Data security policy, process, and technology implementation.
• Industry recognized certifications are a plus – e.g., CISSP, SSCP, SANS GSEC, ECSA or similar
• In-depth knowledge of NIST SP 800-53, NIST SP 800-63, NIST SP 800-171, NIST SP 800-57, NIST SP 800-175, GDPR

In-Depth knowledge of Identity and Access management

• designing and onboarding processes related to identity management from the business and technical perspective (e.g., identity enrollment, provisioning, credential management, federation, requesting access and entitlement, accountability of entitlements)
• design and implement solution using – AD/LDAP, OAuth, OpenID, SAML, Kerberos, SCIM, SPML, XACML | WebAuthN, FIDO, U2F, TOTP, HOTP
• deep expertise in Azure-AD architecture design (B2B/B2C), SSO, federation, delegated administration, privilege-access-management, 2FA/MFA, Password-less authentication.
• Extensive experience in
• Crypto, key-management & PKI technology – Hash, Symmetric / Asymmetric encryption | RSA, ECC crypto | X.509 Cert-Life-Cycle-Management, Code-signing etc.
• data security – encryption/decryption (at-rest and in-transit), run-time system integrity check, message signing, data obfuscation / pseudonymization, tokenization, dynamic access control and data loss prevention (DLP)
• Bachelor’s degree in Engineering or related field.

OTHER SKILLS REQUIRED

• Strong understanding of security products and vendors, relevant technologies and trends, and industry standards.
• Demonstrated experience in gathering and transforming business requirements into a comprehensive technology solution definition.
• Strong team player – work with internal and external stakeholder to solve problems and actively incorporate input from various sources.
• Excellent communication skills and collaborative working style. Strong critical thinking and analytical skills and ability to think “out of the box” required.
• Willing to travel
• Closing Date: April 4th

Please send your application to

• Louise May, [email protected]
• This position is also posted through external channels.
• Thank you,
• Mirion HR Team