Technical Architect - Privileged Access Mgmt. & Non-Human Identity

This job posting is anticipated to remain open for 30 days, from 20-Oct-2026. The posting may close early due to the volume of applicants.

Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500¹ company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns.

Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging.

People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career.

View our Purpose, Inclusion and Citizenship Report.

¹Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating.

Role Overview

The Technical Architect provides architectural leadership for Privileged Access Management (PAM) and Non-Human Identity (NHI) capabilities across the enterprise.

This role translates enterprise architecture direction, business requirements, and security objectives into actionable technical architectures, standards, and reusable design patterns that enable engineering teams to independently implement and operate solutions.

The Technical Architect establishes architectural consistency, guides technology adoption, and provides design assurance to ensure solutions are secure, scalable, resilient, and maintainable.

Working collaboratively with Enterprise Architecture, Business Solution Architecture, Cybersecurity, Infrastructure, and Engineering teams, this role supports the modernization of enterprise identity security capabilities while reducing technical complexity and organizational risk.

Key Responsibilities

Technical Architecture & Standards

• Define and maintain PAM and NHI technical reference architectures, standards, and reusable design patterns.
• Establish architectural requirements for privileged access, machine identities, workload identities, secrets management, and credential lifecycle management.
• Develop and maintain an architecture pattern catalog aligned with enterprise reference architectures and standards.
• Evaluate competing technologies and architectural approaches, documenting trade-offs involving security, scalability, resiliency, performance, and maintainability.
• Promote standardized, interoperable, and cloud-native identity security architectures.

Solution Design & Architectural Assurance

• Lead technical design reviews to ensure alignment with approved architectures, standards, and security requirements.
• Evaluate alternative technical approaches and document architectural decisions, trade-offs, and constraints.
• Establish clear architectural boundaries, integration patterns, and design requirements for engineering teams.
• Produce architecture deliverables that enable engineering teams to independently implement and maintain solutions.
• Evaluate architectural deviations and recommend appropriate remediation, compensating controls, or risk escalation.
• Provide architectural oversight throughout implementation without assuming engineering delivery ownership.

PAM & NHI Governance Architecture

• Establish technical architecture standards supporting enterprise PAM and NHI governance capabilities.
• Define architectural requirements for identity discovery, inventory, ownership, classification, and lifecycle management.
• Establish technical standards for credential issuance, rotation, expiration, revocation, and decommissioning.
• Define architecture patterns supporting service accounts, application identities, API identities, workload identities, and machine credentials.
• Support adoption of passwordless authentication, ephemeral credentials, workload identity federation, and least-privilege access.
• Ensure governance requirements can be consistently implemented across enterprise platforms.

Security, Compliance & Risk Alignment

• Apply secure-by-design principles to PAM and NHI architectures.
• Ensure technical architecture standards align with enterprise security policies, regulatory requirements, and industry frameworks.
• Define architectural controls supporting least privilege, separation of duties, credential protection, and identity lifecycle management.
• Identify architectural risks, control gaps, and technical dependencies.
• Support audit readiness through documented standards, architectural decisions, and traceable control requirements.
• Partner with Cybersecurity and Risk Management teams to evaluate architectural exceptions and remediation strategies.

Required Experience

• Demonstrated experience serving as a Technical Architect or Solution Architect for enterprise security or identity capabilities.
• Experience defining technical reference architectures, standards, and reusable patterns adopted by multiple engineering teams.
• Proven ability to evaluate competing technologies and architectural approaches, document trade-offs, and recommend solutions.
• Experience leading architecture reviews, resolving design conflicts, and establishing technical direction across teams.
• Demonstrated ability to translate architectural designs into actionable engineering requirements and successfully transition implementation ownership.
• Strong understanding of PAM, NHI, authentication, authorization, identity lifecycle management, and secrets management.
• Ability to influence technical decisions across teams without direct implementation authority.

Preferred Experience

• Enterprise PAM and secrets management platforms, such as CyberArk, Delinea, and HashiCorp Vault.
• Identity platforms and protocols, including Entra ID, Ping Identity, OAuth 2.0, and OpenID Connect.
• Machine and workload identity, including service principals, managed identities, and workload identity federation.
• Cloud and Kubernetes identity security architectures.
• Certificate lifecycle management, PKI, and ephemeral credentials.
• NHI governance, identity discovery, ownership, and lifecycle management.
• Zero Trust architecture and secure-by-design principles.

Additional Experience That Would Set You Apart

• SPIFFE/SPIRE and workload identity federation.
• AI agent identity, delegated authorization, and agentic security.
• Identity Security Posture Management (ISPM) and Identity Threat Detection and Response (ITDR).
• Policy-based authorization and policy decision/enforcement frameworks.
• DevSecOps and infrastructure-as-code security integration.

Role Expectations

• This is an architecture-focused role, not an engineering implementation position.

Successful candidates must demonstrate the ability to establish technical direction, develop reusable architecture artifacts, influence design decisions, and enable engineering teams to independently deliver solutions.

Hands-on technical expertise is valued, but the primary responsibility is architectural leadership, technical governance, and design assurance-not direct ownership of engineering implementation.

Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday.

At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received.

Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones

Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones

Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.

Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page.