Service Now Platform Architect

Description

The company is a global wealth manager, asset servicer, asset manager and bank that works for individuals, families, corporations and institutions around the world.

Founded in 1889, it has more than 135 years of financial experience and over 24,000 employees, called partners, who serve some of the world's most demanding clients with modern technology.

This is a principal-level architect role on the Arch Solutions track, with a primary focus on security. You will set the security architecture, standards and governance for the company's enterprise ServiceNow platform, while still designing solutions for complex business needs that stay compliant with industry regulations.

You will set secure, scalable patterns across identity and access management, authentication, authorization, ACLs, privileged access, service accounts, API and integration security, application scopes, cross-scope access, secure development, platform hardening, audit controls and regulatory compliance.

You will work closely with Identity Management, Cybersecurity, Risk, Enterprise Architecture, Platform Engineering, Product and POD teams, and other stakeholders to keep the platform secure, compliant, supportable and in line with enterprise security policy.

The company offers a flexible, collaborative culture with a long record of financial strength and stability. Internal moves are encouraged, senior leaders are easy to reach, and the company is committed to an inclusive workplace and to the communities it serves. Employees worldwide give their time and skills to charitable causes, which is a core part of the culture.

Responsibilities

• Define and maintain the ServiceNow platform security architecture, standards, security patterns, guardrails and roadmap.
• Set governance and control procedures for platform access, security configurations, applications, integrations and customizations.
• Assess the security architecture of new capabilities, plugins, releases and major solution designs.
• Set standards for users, groups, roles, personas, SSO, MFA, RBAC and privileged access.
• Apply least privilege and Segregation of Duties (SoD), rationalize roles, and run periodic access reviews.
• Oversee the architecture of SAML, OAuth, SCIM, LDAP and related enterprise identity patterns.
• Set standards for table, record and field-level access controls.
• Review complex ACL and role models for security, maintainability, performance and unintended access.
• Reduce excess administrative privileges and legacy access structures.
• Define security controls for administrator, generic, service and integration accounts.
• Set privileged credential management patterns using CyberArk or equivalent PAM and secrets management tools.
• Define requirements for account ownership, credential rotation, monitoring, recertification and auditability.
• Define secure patterns for REST and SOAP APIs, IntegrationHub, MID Servers, OAuth, certificates and integration identities.
• Set governance for scoped applications, cross-scope access and application isolation.
• Make sure integration designs include authentication, authorization, encryption, credential protection, logging and traceability.
• Set secure development standards for JavaScript, Glide APIs, Script Includes, Business Rules, Flow Designer, Scripted REST APIs, IntegrationHub and custom or scoped applications.
• Lead architecture, security design and code reviews.
• Find insecure customizations and drive fixes for security-related technical debt.
• Continuously assess platform security settings and recommend fixes for gaps.
• Define monitoring for privileged activity, authentication, integration identities, service accounts and security-sensitive changes.
• Support vulnerability assessments, security reviews, penetration test remediation and platform hardening work.
• Assess the security impact of ServiceNow upgrades, patches, hotfixes, plugins and new features.
• Define regression checks for ACLs, authentication, authorization, integrations and critical security controls.
• Build security validation into ATF and release management processes.
• Set documented security controls, evidence requirements, exception processes and audit procedures.
• Run periodic reviews of platform access and security configurations.
• Support internal and external audits and regulatory assessments.
• Apply relevant enterprise security and privacy frameworks, including NIST and applicable ISO standards.
• Act as the ServiceNow platform security subject matter expert and final architecture authority.
• Guide platform architects, engineering leads, developers, administrators, and the Identity Management, Cybersecurity, Risk and Product teams.

Requirements

• Bachelor's degree in Computer Science, Engineering, Information Technology, Business or a related field.
• 15+ years of IT experience, including substantial ServiceNow architecture, engineering or solution design work.
• 5+ years as a ServiceNow Architect in a large enterprise, focused on platform security, access control and administration.
• Solid understanding of ServiceNow ACLs, roles, groups and security best practices.
• Familiarity with identity management systems.
• Experience connecting ServiceNow to identity providers using SAML, OAuth, SCIM or LDAP.
• Experience in cybersecurity, such as risk assessments, audit response or vulnerability management.
• Deep knowledge of ServiceNow architecture, configuration, application development, integrations, data and security.
• Experience setting architecture standards, design patterns, governance and engineering guardrails.
• Working knowledge of ITSM/ITIL, security, privacy, risk and enterprise technology practices.
• Strong communication and influencing skills with both technical and business stakeholders.
• Preferred: experience in financial services or another highly regulated industry.
• Preferred: experience across ServiceNow products such as ITSM, ITOM, ITAM, IRM, SecOps, HRSD and DevOps.
• Preferred: experience with large-scale ServiceNow modernization or transformation.
• Preferred: ServiceNow CSA certification. CIS, CAD or CTA certifications are also preferred.

Conditions

Base pay range is $137,400 - 233,600 USD, a good faith estimate.

You must be authorized to work in the U.S. without employment-based visa sponsorship, now or in the future.

The company will not sponsor U.S. work visas for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa.

Benefits

• Retirement benefits, including a 401k and a pension.
• Health and welfare benefits: medical, dental, vision, spending accounts and disability cover.
• Paid time off, parental and caregiver leave, life and accident insurance, and other voluntary and well-being benefits.
• A discretionary bonus program that may include an equity component.