Identity & Access Management; IAM Technology Lead

Identity & Access Management (IAM) Technology Lead

At BBH, Partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We are seeking a highly experienced IAM Technology Lead to lead and implement the design, engineering, and delivery of enterprise IAM solutions.

• Leadership & Team Management:
  Lead, mentor, and manage a team of IAM/PAM developers, system analysts, and system administrators. Drive delivery practices and ensure alignment with enterprise technology standards. Foster a culture of accountability, innovation, and continuous improvement. Partner with business, security, and infrastructure teams to align IAM strategy with organizational goals.
• Architecture & Engineering:
  Design and implement scalable IAM and PAM solutions using platforms such as SailPoint Identity IQ. Architect identity lifecycle processes including Joiner, Mover, and Leaver workflows. Design automation for Privilege Access Management. Develop solutions to support RBAC and policy‑driven access governance. Lead integration of IAM solutions with enterprise systems (Active Directory, Service Now, HR systems).
• Program Delivery & Execution:
  Develop IAM technology roadmaps aligning with business goals. Lead large‑scale IAM transformation programs, including governance, provisioning, and certification initiatives. Oversee end‑to‑end delivery: technical requirements gathering, design, development, testing, and production deployment. Manage project scope, timelines, and technical deliverables across multiple concurrent initiatives.
• Governance, Risk & Compliance:
  Ensure compliance with regulatory, audit, and security requirements through IAM controls.
• Operations & Continuous Improvement:
  Oversee IAM platform operations, including monitoring, issue resolution, and performance optimization. Drive continuous improvement through process reengineering and automation.

• 10+ years of experience in Identity & Access Management, with at least 3–5 years in leadership roles.
• Hands‑on experience implementing IAM solutions such as SailPoint Identity IQ or equivalent.
• Background in application development using Java frameworks.
• Strong understanding of identity lifecycle management (Joiner/Mover/Leaver), access certification and governance, RBAC and policy‑based access control, authentication, and authorization.
• Experience integrating IAM platforms with enterprise systems and applications.
• Experience in program and project management.
• Proven experience delivering large‑scale, enterprise IAM transformation programs.
• Strong people management and cross‑functional leadership experience.

• Understanding of Dev Ops and application deployment pipelines.
• Experience with cloud and on‑prem IAM integrations (LDAP, JDBC, Azure AD, AWS IAM, etc.).
• Familiarity with ITSM tools (e.g., Service Now) and workflow automation.
• Background in financial services, regulated environments, or large enterprises.

• Strategic thinking and technical leadership.
• Strong communication and stakeholder management.
• Problem‑solving and decision‑making.
• Ability to balance hands‑on technical work with leadership responsibilities.

Boston: $130,000–$180,000 + Annual Target Bonus
Jersey City: $140,000–$190,000 + Annual Target Bonus

BBH encourages a total rewards package that includes base salary, discretionary bonuses, and profit‑sharing. The base salary range may vary based on location, skills, experience, and qualification for the role.

• Long‑term savings, healthcare, and income protection.
• Professional development opportunities.
• Generous paid time off.
• Comprehensive well‑being programs.

We are an equal‑opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, age, genetic information, creed, marital status, sexual orientation, gender identity, disability status, protected veteran status, or any other protected status under federal, state or local law.