IT Security Lead – Identity & Access

Responsibilities

• Develop and maintain the organization’s Identity & Access Management strategy, roadmap, and governance model
• Architect and oversee solutions for authentication, authorization, privileged access, SSO, MFA, SaaS security posture, API access controls, conditional access policies, and lifecycle management
• Technically lead modernization efforts including Zero Trust, passwordless authentication, identity automation, Attribute-Based Access Controls, AI-driven threat detection and response, identity models for AI agents, and continuous AI behavioral authentication
• Define standards and secure patterns for API identity, access controls, API key and token management, OAuth, OIDC, least-privilege machine identities, lifecycle management, monitoring, and anomaly detection
• Lead the design and operation of Privileged Access Management solutions using Cyber Ark
• Ensure projects are delivered within scope, budget, and schedule
• Lead a technical team supporting provisioning, deprovisioning, terminations, and password resets across SaaS and on-premise applications including Dell One Identity, Salesforce, SAP, and Workday
• Perform regular audits and proactively address security risks
• Ensure technical solutions comply with privacy laws and regulatory requirements
• Investigate and respond to irregularities in system access
• Establish metrics to measure IAM security and business objectives
• Plan, test, and implement configuration changes
• Document IAM processes and procedures
• Escalate and resolve issues in a timely manner

• 7-12 plus years professional experience in IT and/or Cybersecurity with an Enterprise Identity Management Team
• Deep expertise in IAM frameworks, Zero Trust, and modern identity protocols (SAML, OAuth, OIDC, SCIM)
• Experience with enterprise-scale IAM platforms, on-premise and cloud platforms
• Strong understanding of cloud identity (Azure AD/Entra, AWS IAM, GCP IAM, SaaS and API)
• Knowledge of security architecture, threat modeling, and identity attack vectors
• Significant demonstrated knowledge of Active Directory and Entra processes and tools, including patching, hardening, configuration, and risk management
• Demonstrated communication skills to communicate, persuade, influence without authority, and handle challenging conversations
• Significant demonstrated knowledge of identity management processes and tools, including Active Directory, Entra , Intune, Dell One Identity, Semperis, Cyber Ark, SAP, Salesforce, and Workday
• Demonstrated knowledge of recent advances in IAM technology
• Bachelor's Degree in Information Security, Computer Science or equivalent (preferred)
• Information Security Certifications such as CISSP, CRISC, CIMP and/or CISM (preferred)
• Knowledge and experience with Active Directory, Entra , Intune, OKTA, Semperis, Cyber Ark, Zscaler App Total, Task Scheduler, Power Shell, Info Blox Blox One, Microsoft PKI, NPS, SCCM Patching, Illumio, Microsoft Defender, Dell One Identity, Microsoft NPS, JIRA Service Desk, and AI
• Must be legally authorized to work in the US
• Employer will not sponsor employment visa status now or in the future

Demonstrates extensive expertise in Identity and Access Management (IAM) frameworks, Zero Trust principles, and modern identity protocols, with a strong focus on cloud identity solutions and security architecture. Proven ability to lead technical teams, manage IAM projects, and ensure compliance with regulatory requirements while addressing security risks.

• Identity And Access Management (IAM)
• Zero Trust Architecture
• Cloud Identity Solutions
• Privileged Access Management (PAM)
• Information Security Certifications

• IAM Frameworks
• SAML
• OAuth
• OIDC
• SCIM
• Active Directory
• Identity Automation
• API Access Controls
• Threat Modeling
• Lifecycle Management

• Communication Skills
• Persuasion
• Influencing Without Authority
• Problem-Solving
• Team Leadership

• CISSP
• CRISC
• CIMP

• Identity Management
• Security Architecture
• API Security
• Compliance

• Cyber Ark
• Dell One Identity
• SAP
• Workday
• Azure AD/Entra
• AWS IAM
• GCP IAM
• Intune
• OKTA