Lead Cybersecurity - IAM Access Operations

Job Description

"This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered"

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future—you’ll create it.

The IAM Access Operations Lead position will be a key part of our Identity and Access Management Operations strategy and delivery. This role supports the Identity and Access Management (IAM) team within the Chief Security Office (CSO). This career step requires senior level experience. Responsible for IAM Access operations support across products, services, infrastructure, networks, and/or applications while providing protection for AT&T, our customers, and our vendors/partners.

Works with senior team members on various projects relating to the protection of devices, customers, assets, data, information technology, and networks.

• Access management policies and processes:
  • Strong understanding of risk management specialized in IAM governance frameworks, policies, and controls.
  • Execute, monitor, and report on enterprise-wide IT assets including applications, servers, compliance with IAM security policies and execute remediation plan for managing risk.
• Authentication and MFA compliance:
  • Strong functional understanding of authentication, Single Sign-on, MFA management products including Azure, IBM Access Manager, RSA, Yubikey.
  • Engage with customers including application owners, infrastructure owners to enable application onboarding to IAM products for authentication and MFA services.
• Identity Access Governance (IGA) and Privilege Access Management (PAM):
  • Demonstrate functional understanding of SailPoint IIQ, Cyber Ark PAM, Delinea Active Directory bridging products.
  • Lead and manage discovery, reporting and remediation efforts for non-compliant privilege accounts including human privilege accounts, service accounts.
  • Engage with customers including application owners, infrastructure owners to enable application onboarding to IAM products for IGA and PAM services.
• IAM Access Operations L1 and L2 support:
  • Monitor and respond to user access management incidents such as provisioning, de-provisioning, access certification, privileged rights assignment, password reset, orphan accounts cleanup etc.
  • Collaborate with Executive Leadership team delegates to support them with access management compliance activities closure and remediation efforts.
  • Partner with Engineering Tier 2 / Tier 3 support as needed to resolve complex customer issues and ensure seamless operation of IAM solutions.
  • Collaborate with internal operations teams to ensure compliance with agreed-upon service level agreements (SLAs).
  • Partner and collaborate with international and diverse teams to ensure seamless day-to-day business operations, effective handovers, and foster a unified team culture.
  • Demonstrate experience and compliance with Agile processes and methodologies in operational tasks, adhering to AT&T's Agile standards.
• Continuous improvement, automation & leadership reporting:
  • Identify gaps in existing IAM solutions, gather requirements, and collaborate with product architecture and client teams to advocate for necessary enhancements.
  • Establish/refine operational and management processes to mitigate control weakness/gaps.
  • Prepare and publish leadership metrics covering KPIs and KRIs to measure operational efficiency and follow established escalation procedures for timely resolution.

• Requires at least 8 years’ experience related to identity and access management (IAM) business operations, governance, and risk management.
• Strong technical and functional understanding of at least one or more products experience SailPoint IIQ, Azure Entra , IBM…