Information Security Manager - Identity and Access Management (IAM)
In This Role, You Will...
- IAM Strategy: Lead the definition, rollout, and execution of the enterprise IAM roadmap, aligning identity practices with Zero Trust principles and corporate security standards.
- Governance & Policies: Develop, maintain, and enforce identity policies, including Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Least Privilege, and Separation of Duties (SoD).
- Team Management: Lead, mentor, and build a high-performing team of IAM engineers, system integrators, and security analysts.
- Lifecycle Management: Oversee the Joiner, Mover, and Leaver (JML) processes to automate provisioning and de-provisioning workflows across on-premises and cloud platforms.
- Authentication & SSO: Architect and oversee modern authentication standards, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), SAML 2.0, OpenID Connect (OIDC), and passwordless technology.
- Privileged Access Management (PAM): Manage enterprise PAM solution implementation, securing administrative credentials, session monitoring, and just-in-time access controls.
- Identity Governance & Administration (IGA): Direct user access reviews, entitlement certification campaigns, and automated access request/approval workflows.
- Audit & Compliance: Function as the primary IAM lead for internal and external audits, ensuring timely remediation of access-related findings.
- Incident Response: Act as an escalation point for identity-focused security incidents, credentials compromise, and unauthorized access investigations.
- Vendor Management: Evaluate, select, and manage third-party IAM software vendors, tools, and professional services partners.
Qualifications
- 8+ years of total experience in IT and Cybersecurity, with at least 3+ years in a leadership/management capacity focused specifically on Identity & Access Management.
- Hands-on experience with industry-standard IAM tools:
○ Directory & Identity Providers: Microsoft Entra ID (Azure AD), Okta, Ping Identity, Active Directory.
○ IGA Platforms: SailPoint, Saviynt, or Microsoft Entra ID Governance.
○ PAM Solutions: CyberArk, BeyondTrust, Delinea, or HashiCorp Vault. - Deep understanding of OAuth 2.0, SAML, OIDC, SCIM, Kerberos, and LDAP protocols.
- Strong familiarity with regulatory compliance frameworks.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
Bonus Qualifications
- CISSP, CISM, CISA, or vendor-specific certifications (e.g., Okta Certified Professional, Microsoft Certified: Identity and Access Administrator Associate, SailPoint Certified).
- Hands-on experience managing identity across AWS, Azure, or GCP cloud environments.
- Proficiency in scripting/automation (PowerShell, Python, REST APIs) for workflow optimization.
Skills
As published by lever · 5 questions · 2 written answers
Basics
Resume/CV, Full name, Pronouns, Email, Phone, Current location, Current company, LinkedIn URL, Other website
Short answers (1)
- If you attended an on-campus or virtual event, which did you attend? optional
Pick from a list (2)
- Sponsorship: Do you require sponsorship, or will you require sponsorship in the future for employment authorization in the United States? optional
- How did you hear about us? optional
Written answers (2)
- What is your preferred first name and last name? If your legal first and last name is your preferred name, you do not need to respond. optional
- Export Control and Compliance: For the sole purpose of determining export licensing requirements, please list any countries of which you are a citizen or legal permanent resident, and when you obtained such status.