IAM Security Architect

Tradeweb Markets is a world leader in the evolution of electronic trading. A fintech company serving approximately 2,500 clients ? including the world?s largest banks, asset managers, hedge funds, insurance companies, wealth managers and retail clients -- in more than 65 countries across the globe. Since our first trade in 1998, we have helped transform and electronify the fixed income markets. Tradeweb is a culture built on innovation, creativity and collaboration. Through a combination of very talented and driven people, innovative products and solutions, cutting-edge technology, market data, and a vast network of clients, we continue to work together to improve the way financial markets trade.

Mission: Move first and never stop. Collaborate with clients to create and build solutions that drive efficiency, connectivity, and transparency in electronic trading.

Tradeweb Markets LLC ("Tradeweb") is proud to be an EEO Minorities/Females/Protected Veterans/Disabled/Affirmative Action Employer.

Job Details:

In order to capitalize on our success and continued growth plans we are seeking a Director, Information Security, focused on Identity and Access Management (IAM).

As an IAM Architect, this role will play a critical role in defining and executing the organization's Identity and Access Management strategy. The role will be responsible for designing, implementing, and maintaining secure identity solutions that align with the company's security objectives. Your expertise will ensure that authentication, authorization, and identity lifecycle management processes are robust, scalable, and compliant with industry best practices. The role will also have an opportunity to work with subject matter experts not only within security, but across infrastructure, network, development, and business teams. The candidate must have previous managerial experience, particularly in the management of a highly technical team.

We look to hire people who are comfortable in working with minimal supervision as part of a team that has consistently delivered ground-breaking and innovative solutions in one of the most exciting and fast-moving areas of the of the financial markets. We need people who can prioritize and can effectively articulate complex issues to technical and non-technical team members.

Job Responsibilities:

• Define, design, and implement enterprise-wide IAM solutions, including Identity Governance & Administration (IGA), Privileged Access Management (PAM), and Single Sign-On (SSO).
• Act as an internal advisor on IAM security best practices and emerging technologies.
• Develop and enforce identity security policies, ensuring compliance with regulatory and industry standards such as NIST, CIS, CSA, and GDPR.
• Design and implement role-based access control (RBAC), least privilege principles, and multi-factor authentication (MFA) solutions for various internal and client-facing applications.
• Lead IAM product evaluations, define evaluation criteria, and manage implementation of selected technologies.
• Collaborate with DevOps and infrastructure teams to integrate IAM with CI/CD pipelines and automate identity lifecycle management.
• Support security incident investigations related to identity and access breaches and contribute to forensic analysis and response.
• Work closely with security operations, IT, and business stakeholders to ensure IAM solutions align with organizational needs.
• Develop long-term IAM roadmaps and security enhancements to future-proof identity security strategies.
• Implement identity analytics and monitoring solutions to detect anomalous access behavior and mitigate risks.
• Manage a highly skilled technical team

Required Qualifications:

• 10 years of experience in cybersecurity, with 5 years in IAM architecture and strategy.
• Strong knowledge of IAM frameworks, protocols, and standards (e.g., SAML, OAuth, OpenID Connect, SCIM, LDAP, Kerberos).
• Strong understanding of cloud security IAM solutions (AWS IAM, Azure AD, Google Cloud IAM).
• Hands-on expertise with IAM platforms such as Okta, CyberArk, SailPoint, Microsoft Entra ID (Azure AD), Ping Identity, or similar technologies.
• Experience in Privileged Access Management (PAM) and Identity Governance & Administration (IGA).
• Experience with Active Directory (AD), PKI, SSO, and Multi-Factor Authentication (MFA).
• Knowledge of DevSecOps & automation tools, including scripting in Python, PowerShell, or JavaScript for IAM automation.
• Familiarity with Zero Trust security models and modern IAM approaches.
• Strong analytical, problem-solving, and leadership skills.
• Ability to communicate complex security concepts to both technical and non-technical audiences, including C-suite executives.
• Certifications preferred: CISSP, CISM, CISA, CCSP, or vendor-specific IAM certifications (e.g., Okta Certified Professional, SailPoint IdentityNow).
• CISSP, CISM or equivalent qualifications preferred
• Bachelor?s or equivalent degree required

Additional Information

Tradeweb is committed to providing valuable and competitive benefits. In addition to working in our culture of innovation and collaboration, we offer:

• Health Insurance: Highly competitive medical, dental, and vision programs
• Hybrid Environment: Our employees have the flexibility of working in the office and from home.
• Health Care and Dependent Care Flexible Spending Accounts: You may elect to set aside pre-tax earnings to pay for eligible health care and dependent day care expenses for you and your eligible family members.
• Maven Family Building Benefit: Maven offers support for fertility and preconception; pregnancy and post-partum; adoption; surrogacy and pediatrics for children up to age 10. Tradeweb provide a $10,000 lifetime reimbursement towards fertility, egg freezing, adoption and surrogacy expenses.
• Building Wealth - 401(k) Savings Plan: Employees are immediately eligible for the 401(k) plan. Participants may contribute up to 75% of eligible compensation into a traditional 401(k) and/or Roth 401(k). Tradeweb will match 100% of the first 4% of compensation that you contribute.
• The current pay range for this role is currently $150,000 to $275,000 per year, based on a regular, full-time schedule. The amount of pay offered will be determined by a number of factors, including but not limited to qualifications, market data, and internal guidelines.
• This role will also be eligible to participate in Tradeweb?s discretionary bonus program.
• This role is expected to remain open until 3/18/25.

Other Benefit Programs

• Pre-Tax Commuter Benefits Program
• ARAG Legal Services
• Employee Assistance Program
• Tuition Reimbursement
• Financial Wellness Tools
• Travel Assistance Benefits
• Pet Insurance
• Corporate Gym Subsidies
• Wellness Perks
• Paid Time Off and Parental Leave

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.