IAM Strategy & Leadership

• Own the IAM platform strategy, roadmap, and execution across the enterprise.

• Translate business, security, and compliance requirements into IAM capabilities and solutions.

• Lead IAM initiatives, including:

  • Identity lifecycle automation (Joiner, Mover, Leaver processes)

  • Access governance and certification programs

  • Privileged Access Management (PAM)

  • Zero-trust security alignment

• Establish and continuously enhance IAM standards, policies, and reference architectures.

Team Leadership & Management

• Lead, mentor, and develop a team of IAM engineers.

• Establish priorities, assign work, and align team efforts with organizational objectives.

• Provide technical leadership and remove obstacles impacting complex IAM initiatives.

• Drive accountability for:

  • Engineering delivery

  • Operational stability

  • Continuous improvement

• Foster a high-performance culture centered on ownership, accountability, and execution.

Engineering & Platform Ownership

• Oversee the design and implementation of IAM solutions, integrations, and workflows.

• Ensure IAM platforms are secure, scalable, reliable, and maintainable.

• Guide engineering efforts across:

  • Identity platforms, including Microsoft Entra ID

  • Authentication services, including Single Sign-On (SSO) and Multi-Factor Authentication (MFA)

  • Directory services, including Active Directory and Microsoft Entra ID

• Ensure consistent onboarding of applications into the IAM ecosystem.

Identity Lifecycle & Governance

• Own enterprise identity lifecycle processes, including:

  • Joiner, Mover, Leaver (JML) automation

  • Role-Based Access Control (RBAC) design and governance

  • Access reviews and certification programs

• Ensure effective governance of access provisioning, monitoring, and deprovisioning.

• Maintain audit readiness and compliance with internal and external standards.

Security & Risk Management

• Partner with Security teams to implement and enforce identity-related controls and policies.

• Mature and support security initiatives, including:

  • Least privilege access models

  • Just-in-time access

  • Conditional access and risk-based authentication

• Ensure IAM controls support regulatory and compliance requirements, including SOC and ISO frameworks.

• Identify, assess, and mitigate identity-related security risks.

Operations & Continuous Improvement

• Oversee IAM operational processes, including:

  • Provisioning workflows

  • Incident and issue management

  • Platform and performance monitoring

• Drive automation initiatives to reduce manual effort and improve service reliability.

• Define and monitor key performance indicators such as:

  • Provisioning latency

  • Certification completion rates

  • Application onboarding timelines

• Ensure documentation, standard operating procedures, and operational runbooks remain current and effective.

Cross-Functional Collaboration

• Partner closely with:

  • Security Engineering teams

  • Cloud and Infrastructure teams

  • Application owners

  • Business stakeholders

• Serve as the escalation point for complex IAM issues.

• Provide leadership with updates on IAM roadmaps, risks, initiatives, and operational performance.

• Strong leadership, coaching, and team development skills with the ability to build and lead high-performing engineering teams.

• Expertise in Identity and Access Management (IAM), including identity lifecycle management, Joiner/Mover/Leaver (JML) processes, Role-Based Access Control (RBAC), access governance, and certification programs.

• Strong knowledge of IAM platforms, enterprise identity integrations, and identity governance solutions.

• Experience developing and executing IAM strategies, roadmaps, modernization initiatives, and enterprise security programs.

• Ability to design, implement, and support secure, scalable, and reliable IAM architectures and services.

• Strong understanding of authentication technologies, identity protocols, and directory services, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Active Directory, and Microsoft Entra ID.

• Experience implementing and supporting privileged access management (PAM/CPAM), least-privilege access models, just-in-time access, and risk-based authentication controls.

• Knowledge of zero-trust security principles and identity-centric security frameworks.

• Experience with IAM technologies such as SailPoint, Saviynt, CyberArk, and Microsoft Entra ID.

• Familiarity with cloud platforms, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP).

• Experience with API integrations, automation technologies, and modern identity protocols.

• Strong understanding of authentication workflows, identity traffic patterns, and enterprise security controls.

• Excellent analytical, problem-solving, decision-making, and risk management skills.

• Strong communication, collaboration, and stakeholder management skills with the ability to influence across security, infrastructure, engineering, and business teams.

• Ability to establish operational discipline, drive continuous improvement, and balance innovation with stability, compliance, and security.

• Demonstrated strategic thinking and execution skills, with the ability to align IAM capabilities to organizational business and security objectives and deliver measurable results.

Other Requirements

• Bachelors Degree or equivalent work experience required

• 7-10+ years of experience in Identity & Access Management or a related field.

• 2-4+ years of experience leading, mentoring, or managing engineering teams.

• Proven experience leading IAM programs within large enterprise environments.

• Ability to travel 20%

• Experience implementing IAM solutions within a zero-trust security model.

• Knowledge of DevOps methodologies and automation practices.

• Experience with scripting and automation tools, including PowerShell and Python.

• Industry certifications such as Microsoft Identity Administrator, CISSP, or other IAM-related certifications.