Senior Security Architect Consultant - Identity
Kalles Group · Seattle, WA
$210,000–$260,000from the description
Jul 25, 2026
Seattle, WA
Jul 26, 2026
What this job asks for AI summary
A senior consulting role focused on enterprise identity security architecture, based on-site in Seattle. The position involves defining target-state architectures and roadmaps across identity governance, privileged access management, directory services, and Zero Trust models within hybrid and multi-cloud environments. It suits a seasoned identity security professional with 15+ years of experience who can lead large-scale transformation programs while mentoring engineering teams and advising executive stakeholders.
Senior level · 15+ years · Seattle-Tacoma-Bellevue, WA · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 3 people in the Seattle-Tacoma-Bellevue, WA area plausibly meet what this posting asks for (information security analysts). range 1–5
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $165,338 (middle half $132,613–$190,632). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (7)
The role is a consulting position at Kalles Group placed on-site with a client in Seattle; the posting explicitly states only candidates already living in the Greater Seattle area will be considered.
SOC classification is Medium confidence: the role is primarily security architecture and identity security strategy (15-1212), but the depth of hands-on platform engineering and architecture design work could also support 15-1299 (Computer Occupations, All Other) as a runner-up.
The degree requirement lists a Bachelor's in CS, Cybersecurity, IT, or a related field but explicitly accepts 'equivalent professional experience' as a substitute, so no hard degree gate is set.
Microsoft Entra ID, Active Directory, SailPoint, BeyondTrust, and Okta are listed together as examples of acceptable enterprise identity platforms ('such as … or comparable enterprise solutions'). They are treated as a required capability (identity platform expertise) with the named tools as interchangeable alternatives; BeyondTrust is grouped with SailPoint under PAM/IGA.
CISSP, SABSA, TOGAF, SC-300, and SailPoint Certified Engineer certifications appear under Preferred Qualifications and are not captured as skills since they are credentials rather than concrete technologies.
Identity Threat Detection and Response (ITDR) appears under Preferred Qualifications — no specific product is named, so it is omitted per the rule against generic concepts.
The 15+ year experience requirement is at the role level (cybersecurity/identity engineering/security architecture broadly) and is captured in the overall years minimum.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.