Application Security and Identity Manager

Crown Equipment Corporation is looking for an application security and identity leader to strengthen identity governance, privileged access management, authentication modernization, and application security testing. This onsite role in New Bremen, OH brings together security strategy, hands-on program ownership, and cross-team partnership to ensure security requirements align with business needs.

• Lead application security and identity professionals covering access governance
  , authentication services
  , application security assessments
  , and identity administration
  .
• Build and execute roadmaps for identity governance
  , privileged access management
  , application security
  , and authentication modernization
  .
• Partner with business units, IT leaders, developers, and system owners to align security requirements with operational and business priorities.
• Establish standards, procedures, and operational metrics to improve security effectiveness and efficiency.
• Oversee enterprise user lifecycle activities, including provisioning, modifications, transfers, and terminations.
• Ensure periodic access certifications
  , segregation of duties reviews, and related access governance controls are carried out effectively.
• Lead privileged account implementations, including credential vaulting and least-privilege initiatives.
• Manage multifactor authentication
  , single sign-on
  , federation, and directory service capabilities to support both security and user experience.
• Integrate security requirements into the software development lifecycle through collaboration with development teams.
• Oversee application and software security assessments, including SAST
  , DAST
  , code reviews, penetration testing, and vulnerability remediation.
• Identify, prioritize, and drive remediation for application and identity-related risks with application owners.
• Evaluate new applications and technology solutions to ensure alignment with Crown cybersecurity standards.
• Define and execute long-term identity and application security strategies aligned to organizational risk management objectives.
• Create dashboards and executive reporting covering access governance, privileged access, application vulnerabilities, remediation progress, and program maturity.
• Present cybersecurity risks, progress against program goals, and investment priorities to leadership and audit stakeholders.

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related discipline, plus at least 5 years related experience.
• Non-degree candidates may be considered with 12 or more years of related experience and a high school diploma or GED
  .
• Occasional travel and overnight stays, approximately 0-5%.

• Experience managing identity governance and administration platforms such as Sail Point or Saviynt
  .
• Experience with Microsoft Entra ,
  Active Directory
  , multifactor authentication, single sign-on, privileged access management, and access governance solutions.
• Strong knowledge of secure software development lifecycle practices.
• Experience with application security testing tools, vulnerability management, and remediation programs.
• Relevant certifications such as CISSP
  , CISM
  , CRISC
  , identity management, or cloud security certifications.
• Leadership, communication, problem-solving, analytical, and stakeholder management skills.
  
  Knowledge of the company’s culture and values, with the ability to facilitate positive relationships between business groups.

• Sail Point
• Saviynt
• Microsoft Entra
• Active Directory

• Health/Dental/Vision/Prescription Drug Plan
• Flexible Benefits Plan
• 401K Retirement Savings Plan
• Life and Disability Benefits
• Paid Parental Leave
• Paid Holidays
• Paid Vacation
• Tuition Reimbursement

Crown will only employ individuals who are legally authorized to work in the United States. This is not a position for which sponsorship will be provided, and individuals with temporary visas or who need sponsorship for work authorization now or in the future are not eligible for hire.