Principal Security Architect, Identity Resilience

📋 Description

• Own the security architecture for AvePoint’s identity resilience platforms, including threat
• Partner with platform backup and recovery architects to ensure identity restore, relationship
• Define the product’s Tier-0 security model, including least privilege, just-in-time elevation
• Design security requirements for protecting the backup control plane: administrator roles, service
• Define how the product should support pre-breach recovery readiness, including known-good state
• Architect secure workflows for identity breach recovery phases: trusted control, detection and

🎯 Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a
• 12+ years of hands-on technical experience in identity infrastructure, cybersecurity architecture
• Direct experience securing or recovering complex identity environments, including Active Directory
• Deep understanding of AD security internals: Kerberos, NTLM, LDAP, ACLs/delegation, privileged
• Deep understanding of Entra ID security architecture: Conditional Access, PIM, privileged roles
• Strong understanding of hybrid identity security: Entra Connect, Cloud Sync, password hash sync

🎁 Benefits

• Competitive salary range of $180,000 - $270,000 based on location, experience, skills, and
• Comprehensive benefits including medical, dental, and vision coverage
• 401(k) with employer match
• Unlimited PTO
• Eligibility for bonuses, commissions, or equity (RSUs) depending on role