Manager - Identity & Access Management; IAM) Engineering

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

We are seeking a Manager, IAM Engineering to lead the implementation, automation, and operational engineering of enterprise identity platforms. This role will modernize identity services across Identity Governance & Administration (IGA), Privileged Access Management (PAM), cloud identity, machine identities, and AI-agent identities while advancing Zero Trust and identity security capabilities.

• Implement and support IAM capabilities including IGA, PAM, SSO, MFA, directory services, federation, and identity lifecycle management.

• Design and integrate IAM and PAM platforms with cloud, SaaS, and enterprise applications.

• Automate identity provisioning, credential management, access governance, certification, and secrets-vaulting processes.

• Engineer role-based, attribute-based, and policy-based authorization solutions across enterprise and cloud environments.

• Implement controls for machine identities, service accounts, APIs, workloads, and other non-human identities.

• Engineer AI-agent identity controls, including authentication, authorization, delegated permissions, credential management, least privilege, and lifecycle governance.

• Develop automation using APIs, scripting, Infrastructure-as-Code, and CI/CD pipelines.

• Support Identity Threat Detection & Response (ITDR), Cloud Infrastructure Entitlement Management (CIEM), and Zero Trust initiatives.

• Lead project work streams, coordinate technical delivery, troubleshoot complex issues, and mentor junior engineers and developers.

• 5-8+ years of experience in IAM engineering, security engineering, Dev Sec Ops , or cybersecurity.

• Experience implementing, integrating, and supporting enterprise IAM platforms.

• Strong understanding of authentication, authorization, federation, access governance, PAM, secrets management, and identity lifecycle management.

• Experience integrating enterprise applications, APIs, and cloud services with identity platforms.

• Strong automation, scripting, troubleshooting, delivery leadership, and stakeholder management skills.

• IAM Platforms:
  SailPoint, Saviynt, Microsoft Entra , Okta, Ping Identity, and Forge Rock.

• PAM & Secrets:
  Cyber Ark, Delinea, Beyond Trust, and Hashi Corp Vault.

• Cloud & Infrastructure:
  Microsoft Azure, AWS, Google Cloud, Active Directory, LDAP, PKI, SCIM, OAuth 2.0, OpenID Connect, and SAML.

• Modern Identity:
  Non-Human Identity management, machine identity security, service account governance, ITDR, CIEM, and workload identity.

• AI & Emerging Identity: AI-agent identity management, agent-to-agent authentication, delegated authority, and autonomous-agent security controls.

• Automation & Dev Sec Ops :
  Power Shell, Python, Terraform, Git Hub, Azure Dev Ops, REST APIs, Infrastructure-as-Code, and CI/CD pipelines.

CISSP, CISM, and relevant Microsoft, SailPoint, Cyber Ark, Okta, AWS, or Azure security certifications.

A builder’s mindset and passion for engineering secure, automated, and scalable identity solutions. You will help modernize identity platforms, strengthen security controls, and enable secure access for employees, applications, machines, APIs, and AI agents.

Experience with PAM automation, secrets vaulting, machine identity management, AI-agent identity controls, RBAC/ABAC engineering, ITDR, CIEM, and cloud-native IAM platforms is highly desirable.

At EY, we harness our collective strength to empower you to shape your future with…