1-YEAR BASE TERM, WITH POTENTIAL 1-YEAR EXTENSION. WORK WILL BE PERFORMED REMOTELY.
Mandatory Requirements
- At least fifteen (15) years of professional experience within the last twenty (20) years with role modeling and role-based access control (RBAC).
- At least three (3) years of hands-on experience within the last five (5) years with Large Language Models (LLM) / generative AI.
- At least twenty (20) years of experience delivering enterprise identity, security, and software solutions, obtained within the last twenty-five (25) years.
- Within the last three (3) years, demonstrated recent expertise as an Artificial Intelligence (AI) expert, including the design and delivery of Generative AI (GenAI) and Machine Learning (ML) solutions for enterprise environments.
- At least five (5) years within the last ten (10) years of professional experience building knowledge-graph-based enterprise solutions that deliver visibility, recommendations, and insight from complex data (e.g., GenAI-powered, knowledge-graph-based platforms).
- At least five (5) years within the last ten (10) years of professional experience applying AI/ML, GenAI, and analytics to Identity Governance, and Administration (IGA), Identity and Access Management (IAM) and identity security.
- At least five (5) years within the last ten (10) years of professional experience leading production innovation and aligning AI/ML capabilities to business goals, including data visualization and presentation of AI/ML-derived insights to technical and executive stakeholders.
- At least five (5) years within the last ten (10) years of professional experience as a security architect and/or chief security architect delivering enterprise IAM and security solutions, including for government and public-sector clients (e.g., state agencies).
- At least five (5) years within the last ten (10) years of professional experience with identity and access technologies and concepts such as RBAC, automated provisioning workflows, Single Sign-On (SSO), LDAP, identity federation, and enterprise/solution architecture.
Desirable Requirements
- Any professional experience conducting risk assessments for an IT environment with business units to support a diverse set of infrastructure and services.
- Working knowledge of the National Institute of Standards and Technology (NIST) Standards, the NIST Cybersecurity Framework, and NIST Special Publication (SP) 800-53 and other regulatory security standards and frameworks.
- Possession of one or more of the following information technology industry certifications:
- Security Operations & Engineering (Microsoft): Microsoft Security Operations Analyst (SC-200), Azure Security Engineer Associate (AZ-500), Cybersecurity Architect Expert (SC-100), Identity and Access Administrator Associate (SC-300), Azure Administrator Associate (AZ-104), or Security, Compliance, and Identity Fundamentals (SC-900);
- Governance, Risk & Audit: CISM, CISSP, CISA, CRISC, or CGRC (Certified in Governance, Risk, and Compliance / formerly CAP);
- Cloud Security: CCSP (Certified Cloud Security Professional), AWS Certified Solutions Architect, or AWS Certified Security – Specialty;
- SOC / Blue-Team / Incident Response: Any GIAC certification (e.g., GSEC, GCIH, GCDA, GMON, or GCFA), CompTIA Security+, or CompTIA CySA+.
- SIEM / SOAR Platforms: Splunk certifications (e.g., Core Certified Power user or Enterprise Security Certified Admin), or Palo Alto Networks Certified XSIAM Engineer;
- Project & Agile Delivery: PMP, PMI-ACP, or SAFe Scrum Master (SSM).
- Ten (10) years within the last fifteen (15) years of experience supporting statewide cybersecurity operations and modernization initiatives within a California State agency.
- Ten (10) years within the last fifteen (15) years of experience with Agile/Scrum delivery and tools such as Azure DevOps (ADO).
- Demonstrated leadership experience establishing and leading technical teams and overseeing the delivery of multiple (two or more) enterprise identity and access management (IAM) and cybersecurity initiatives from concept through implementation and ongoing operations, including at least one initiative incorporating AI/automation or other emerging technologies. Experience should include cross-functional stakeholder coordination and full-lifecycle delivery at an enterprise or public-sector scale.
- Depth operating a Microsoft-native SOC at scale – Sentinel + Defender XDR in a multi-tenant / MSSIP or enterprise environment.
- AI/GenAI applied to security operations SOC automation, detection engineering, or LLM triage.
- Zero Trust and identity governance (IGA) delivery Entra ID Governance, SailPoint, or Saviynt implementations.
- Security automation / SOAR playbook development (Azure Logic Apps, XSIAM, Splunk, SOAR).
- Public-sector compliance depth StateRAMP/FedRAMP, CJIS, or California SAM/SIMM 5300 experience.
- Knowledge transfer / mentoring of State staff.
Applications that do not complete the Prescreen Survey will not be considered.
Anvaya Solutions, Inc. is an equal opportunity employer. All employment decisions, including hiring, promotions, and compensation, are made without regard to race, color, religion, sex, national origin, or any other protected characteristic. We are committed to a merit-based workplace where every individual is treated with respect and has equal access to opportunities based solely on their qualifications and performance.