Information Security M19

ob Description: Endpoint Technology & Identity Manager

Title: Manager – Endpoint & IAM Services

The Endpoint Technology & Identity Manager is a strategic leadership role responsible for defining, delivering, and governing the organization’s integrated approach to endpoint management, identity services.

This role expands beyond the traditional IAM Manager scope to also include endpoint engineering, device governance, and security integration, while also ensuring effective delivery through managed service partners. The role is critical in enabling a Zero Trust security model, strengthening cybersecurity posture, and advancing the organization’s modern workplace strategy.

Key Responsibilities

Strategic Leadership & Governance

• Define and execute the enterprise strategy for Endpoint Technology, Identity, and Security services
• Drive adoption of Zero Trust architecture, Conditional Access, and identity-driven security controls
• Establish governance models for endpoint, identity, and access lifecycle management
• Align technology capabilities with evolving cybersecurity and business priorities

Endpoint Technology Service & Engineering

• Lead endpoint engineering, deployment, and management across platforms including:
  • Microsoft SCCM / Endpoint Configuration Manager
  • Microsoft Intune / Endpoint Manager
  • Jamf (Apple ecosystem)
• Oversee device configuration standards, patching, and compliance enforcement
• Manage lifecycle of corporate endpoints: provisioning, maintenance, and decommissioning
• Enable modern workplace capabilities including cloud-managed and hybrid endpoints

Identity & Access Management (IAM)

• Run enterprise identity governance and administration (IGA) operations
• Oversee access provisioning, role-based access controls, and identity lifecycle management
• Manage authentication services including SSO, MFA, federation technologies and Entra ID
• Ensure alignment with compliance, audit, and regulatory requirements
• Oversee operational delivery of endpoint and identity services through EPAM-managed services
• Define/maintain SLAs, KPIs, and service delivery metrics for IAM & EPAM support functions
• Govern day-to-day operations, incident management, and service requests
• Ensure adherence to security, compliance, and operational standards across vendor-managed environments
• Drive continuous service improvement, automation, and optimization

Device & Access Governance

• Establish policies for device trust, compliance posture, and conditional access enforcement
• Govern device identity integration with enterprise identity systems
• Ensure seamless user access across devices while maintaining strong security controls

Modern Workplace & Cloud Governance

• Lead initiatives supporting cloud-based endpoint management and hybrid workforce models
• Enable secure access to enterprise resources from any device, location, or network
• Support digital transformation and mobility strategies

Cross-Functional Collaboration

• Partner with Infrastructure, Security and Application teams to ensure integrated service delivery
• Act as a key liaison between endpoint, IAM, and cybersecurity functions
• Lead and mentor cross-functional technical teams

Operational Excellence & Delivery

• Ensure high availability and performance of endpoint and identity services
• Drive continuous improvement across operational processes and tools
• Manage vendors, technologies, and project delivery related to endpoint and identity ecosystems

Qualifications & Experience Required

• 10+ years of experience in IT, cybersecurity, endpoint management, IAM, with at least 5+ years in leadership roles
• Strong experience across:
  • Endpoint technologies (SCCM, Intune, Jamf)
  • IAM solutions (Azure AD / Entra ID, identity governance tools)
  • Security frameworks (Zero Trust, Conditional Access, MFA)
• Excellent PowerShell scripting knowledge (must)
• Solid understanding of endpoint security, device compliance, and identity-driven access models
• Experience managing enterprise-scale environments and complex cross-functional initiatives

Preferred Certifications:

• CISSP, CISM, or equivalent security certifications
• Microsoft certifications (e.g., SC-300, MD-102)
• AWS Certified Security – specialty