Password hash sync jobs

Lead the security architecture for AvePoint’s identity resilience platforms, defining threat models, recovery trust criteria, and secure workflows for identity breach recovery.

Compensation

The Salary Range for this role is $180,000k - $270,000. At AvePoint, we strive to offer competitive, fair, and equitable total rewards. The listed salary range represents a good faith estimate, with final offers based on location, experience, skills, and qualifications. The listed range reflects base salary only; our total rewards include base salary, comprehensive benefits (medical, dental, vision, 401(k) with match, unlimited PTO), and depending on the role, bonuses, commissions, or equity (RSUs). We welcome compensation discussions—apply even if your expectations fall outside the range.

Responsibilities

Own the security architecture for AvePoint’s identity resilience platforms, including threat modeling, recovery trust criteria, privileged-access safeguards, secure restore guardrails, and post-recovery validation workflows across major enterprise identity providers.
Partner with platform backup and recovery architects to ensure identity restore, relationship recovery, policy recovery, and source-of-authority workflows operate safely under breach conditions, not just during normal administrative recovery.
Define the product’s Tier-0 security model, including least privilege, just-in-time elevation, credential isolation, gMSA usage, privileged access workstation expectations, break-glass handling, secure service accounts, immutable audit trails, and separation of monitoring vs. restore permissions.
Design security requirements for protecting the backup control plane: administrator roles, service app permissions, consented permissions, BYOS storage controls, network restrictions, key management, deletion approvals, retention tamper resistance, and recovery-data integrity validation.
Define how the product should support pre-breach recovery readiness, including known-good state documentation, critical identity object inventory, break-glass validation guidance, restore permission validation, and out-of-band communications readiness.

Requirements

Bachelor’s degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a related technical field; equivalent practical experience strongly considered.
Nice to have: Experience working at or with vendors that build AD/Entra backup, recovery, ITDR, identity protection, or hybrid identity resilience products
Nice to have: Experience with Microsoft Defender for Identity, Microsoft Defender XDR, Microsoft Sentinel, Splunk, CrowdStrike, Semperis DSP, Quest, Cayosoft Guardian
Nice to have: Relevant certifications or recognition such as Microsoft Certified: Cybersecurity Architect Expert, Identity and Access Administrator, CISSP, GIAC, Microsoft MVP

Skills

Active Directory Microsoft Entra ID Hybrid identity Privileged access Application identities Workload identities Federation Identity governance Identity incident response Threat modeling Recovery trust criteria Secure restore guardrails Post-recovery validation Conditional Access PIM

Benefits

Medical
Dental
Vision
401(k) with match
Unlimited PTO

See full job description

Principal Security Architect, Identity Resilience

Principal Security Architect, Identity Resilience

Compensation

Responsibilities

Requirements

Skills

Benefits

Senior Windows/M365 Systems Engineer

Responsibilities

Skills

Lead Active Directory Engineer

Compensation

Responsibilities

Requirements

Skills