Manager of Identity & Access Management; Technical IAM

Title: Manager of Identity & Access Management (Technical IAM)

Location: Arlington TX

Duration: Full-time / Permanent

Compensation: 145K-150K

Work Requirements: US Citizen, GC Holders or Authorized to Work in the US

Job Description:

The Manager of Identity & Access Management (IAM) Engineering and Integration will lead the design, engineering, integration, and operational management of enterprise IAM platforms. This role ensures secure, scalable, and compliant identity services across Active Directory, SailPoint Identity IQ (IIQ), SailPoint Identity Security Cloud (ISC), Okta, Cyber Ark, and PKI Services in on-premises, cloud, and hybrid environments.

The manager will lead a team of IAM engineers and analysts, oversee managed service partner resources, and collaborate with cybersecurity, infrastructure, application teams, and audit partners. Key responsibilities include identity lifecycle automation, privileged access management, authentication services, and certificate management aligned with Zero Trust and least-privilege principles.

• Lead engineering, configuration, integration, and lifecycle management of IAM platforms, including Active Directory, SailPoint IIQ and ISC, Okta, Cyber Ark, and PKI Services.
• Oversee integrations with HR systems, Service Now, enterprise applications, cloud services, and third-party vendors.
• Ensure resilient, highly available, and scalable IAM architectures across on-premises and cloud environments.
• Establish reference architectures, integration patterns, and technical standards for IAM services.

• Provide technical and operational leadership for enterprise Active Directory services across on-premises and hybrid environments.
• Define AD architecture, design standards, and operational practices aligned with Zero Trust and least-privilege security.
• Oversee directory hygiene and lifecycle management for user objects, service accounts, groups, and delegated administration.
• Govern AD groups and service accounts in alignment with SailPoint-driven Joiner-Mover-Leaver (JML) processes and access certifications.
• Partner with Identity Governance teams to ensure AD entitlements are accurately modeled, managed, and auditable within SailPoint.
• Manage secure integration between Active Directory and Okta, including federation, authentication flows, and directory synchronization.
• Enhance privileged access controls for Active Directory in coordination with Cyber Ark, protecting domain-level and Tier 0 accounts.
• Lead remediation of legacy groups, orphaned accounts, excessive permissions, and insecure configurations.
• Establish monitoring, alerting, and operational metrics for directory availability, security posture, and access integrity.
• Serve as the escalation point for directory-related incidents, audits, and compliance inquiries.
• Collaborate with Infrastructure, Endpoint, Cloud, and Security Architecture teams to maintain Active Directory as a foundational enterprise identity control.

• Own Joiner-Mover-Leaver (JML) automation, role-based access control (RBAC), entitlement modeling, and access request workflows using SailPoint.
• Ensure consistent execution of access certifications.
• Partner with application owners and engineers to onboard applications into IAM governance and provisioning frameworks.
• Ensure entitlement metadata is complete, accurate, and properly maintained.
• Assist with testing in lower environments.

• Lead implementation and ongoing enhancement of Cyber Ark for privileged account management, credential vaulting, and session monitoring.
• Oversee Okta services, including single sign-on (SSO), multifactor authentication (MFA), and API authentication.
• Ensure authentication services meet enterprise security, user experience, and regulatory requirements.

• Manage enterprise Public Key Infrastructure (PKI), including certificate issuance, automation, renewal, and lifecycle management.
• Ensure certificates are properly governed and integrated across applications, infrastructure, and security platforms.
• Support enterprise certificate compliance requirements.

• Ensure IAM controls meet regulatory and audit requirements, including SOX and internal cybersecurity standards.
• Support internal and external audits by providing evidence, conducting walkthroughs, and developing remediation plans.
• Understand and support look-back…