<p><strong>About AvePoint: </strong></p> <p><span data-teams="true">Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with confidence. Over 25,000 customers worldwide rely on the AvePoint Confidence Platform to prepare, secure, and optimize their critical data across Microsoft, Google, Salesforce, and other collaboration environments. AvePoint’s global channel partner program includes approximately 5,000 managed service providers, value-added resellers, and systems integrators, with our solutions available in more than 100 cloud marketplaces. To learn more, visit <a id="menur238u" class="fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn" href="https://www.avepoint.com/" target="_blank"><strong>www.avepoint.com</strong></a>.</span></p> <p>At AvePoint, we are committed to investing in our people. Agility, passion and teamwork set us up to do our best work and foster a culture where you are empowered to craft your career, make an impact, and own (y)our future. Unleash the power of you!</p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 1">About the position:</span></span></strong><span data-ccp-props="{"134245418":true,"134245529":true,"201341983":0,"335559738":480,"335559739":0,"335559740":252}"> </span></p> <p><span data-contrast="auto">The Principal Architect for Identity Security will serve as the senior technical authority for the security architecture of AvePoint’s identity resilience initiatives. This role is focused on how enterprise identity providers, identity control planes, privileged access systems, application identities, and hybrid identity environments are secured, trusted, contained, recovered, and validated before, during, and after a disaster or identity compromise. Active Directory and Microsoft Entra ID are two of the most important identity platforms for this role, but the scope is broader than any single provider.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></p> <p><span data-contrast="auto">This role is intentionally separate from a platform-specific backup and recovery architect role. Backup and recovery architects may own the core backup, restore, rollback, topology, and source-of-authority architecture for specific platforms. This identity security architect owns the threat model, control-plane security, recovery trust model, incident-response integration points, secure restore guardrails, and post-recovery validation requirements that ensure identity resilience platforms can be trusted in adversarial conditions.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></p> <p><span data-contrast="auto">The ideal candidate has deep hands-on experience securing complex enterprise identity environments, including Active Directory, Microsoft Entra ID, hybrid identity, privileged access, application and workload identities, federation, identity governance integrations, and identity incident response. They can speak credibly with CISOs, identity architects, incident responders, platform engineers, and product leaders, while translating that expertise into product architecture, security requirements, and customer-facing recovery guidance.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></p> <p><span data-contrast="auto">This is not a generic IAM governance role and not a pure SOC analyst role. The right person understands identity as Tier-0 infrastructure, knows how attackers persist across identity systems, and can design product workflows that help customers prepare, recover, and validate a trusted known-good state after a serious incident.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 1">Specific responsibilities include, but are not limited to:</span></span></strong><span data-ccp-props="{"134245418":true,"134245529":true,"201341983":0,"335559738":480,"335559739":0,"335559740":252}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto"><span data-ccp-parastyle="List Bullet">Own the security architecture for AvePoint’s </span><span data-ccp-parastyle="List Bullet">identity</span><span data-ccp-parastyle="List Bullet"> resilience </span><span data-ccp-parastyle="List Bullet">platforms</span><span data-ccp-parastyle="List Bullet">, including threat modeling, recovery trust criteria, privileged-access safeguards, secure restore guardrails, and post-recovery validation workflows</span><span data-ccp-parastyle="List Bullet"> across major enterprise identity providers</span><span data-ccp-parastyle="List Bullet">.</span></span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":252}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" d