Authentication Services Leader - Cybersecurity Identity & Access Management

Authentication Services Leader  – Cybersecurity Identity & Access Management

As the Authentication Services Leader within our Cybersecurity Identity & Access Management (IAM) team, you will shape and execute the strategic vision for authentication services across the enterprise. You will lead a team of IAM professionals, drive innovation in authentication technologies, and ensure secure, scalable, and compliant access to systems and applications.

• Lead and develop a high‑performing IAM team, fostering a culture of innovation, accountability, and continuous improvement.
• Define and execute the strategic roadmap for authentication services, including Single Sign‑On (SSO), Multi‑Factor Authentication (MFA), and Active Directory architecture.
• Serve as a technical authority on authentication technologies, with deep expertise in Microsoft’s Identity stack:
  Microsoft EntraID (formerly AzureAD), Active Directory, EntraID Governance, and Entra
  
  External ID.
• Provide expert‑level guidance on directory services—Active Directory, LDAP, and ADFS—ensuring secure and efficient identity resolution and authentication.
• Drive adoption of modern federation and authentication protocols, including SAML, OAuth, and OIDC, across internal and external platforms.
• Collaborate with senior leadership and cross‑functional teams to integrate IAM strategies with enterprise architecture, cloud transformation, and Zero Trust initiatives.
• Ensure compliance with regulatory frameworks (SOX, HIPAA, PCI‑DSS, ISO
  27001) through effective access controls and audit practices.
• Evaluate emerging technologies and trends, recommending enhancements to the authentication infrastructure and user experience.
• Mentor and coach team members, promoting technical excellence and career growth.
• Manage vendor relationships and contracts related to IAM platforms and services.

• Minimum: 8years of experience in Information Technology, Computer Science, IAM Engineering, or Information Security in a private, public, government, or military environment, plus a verified high‑school diploma.
• OR: 6years of experience plus a verified bachelor’s degree, AND at least 3years in a leadership or managerial role.
• Expert‑level experience in Active Directory design, architecture, and optimization.
• Deep expertise in Microsoft Identity technologies, including EntraID, Active Directory, LDAP, and ADFS.
• Strong understanding of federation protocols such as SAML, OAuth, and OIDC.
• Relevant certifications (e.g., CISSP, CISM, Microsoft Certified: Identity and Access Administrator Associate).
• Strong understanding of cloud identity management (AWS, Azure, GCP) and experience implementing Zero Trust architectures.
• Proficiency in scripting and automation (Power Shell, Python, SQL).
• Familiarity with CIAM, PKI, and certificate management.
• Strong communication, stakeholder engagement, and project management skills.
• Ability to translate complex technical concepts into strategic business outcomes.

On‑site in Maplewood, MN, or Austin, TX, with at least 4 days per week required. Travel may include up to 15% domestic or international travel. Relocation assistance is not authorized.

Must be legally authorized to work in the country of employment without sponsorship for an employment visa status (e.g., H1B).