IT Security Identity & Access Technical Lead

Job Title:

IT Security Identity & Access Technical Lead

Location:

Remote Position on East Coast Time Zone otherwise if Close to Shelton CT it will be Hybrid: 4 days onsite in Shelton(Fridays remote)

Type:
Full Time Direct Hire

Salary: $150K and up DOE plus Bonus and excellent benefits

Must Have:
Active directory, IAM, Entra  good communication skills

Need someone who can assess where the IAM program is today, define where it needs to go, build a multi-year strategy and roadmap, determine how to modernize identity, Zero Trust, PAM and lifecycle management, gain leadership buy-in, and then lead that transformation.

• IAM strategy / future-state roadmap — MUST HAVE
• Enterprise IAM architecture / transformation leadership — MUST HAVE
• Ability to present and influence senior leadership — MUST HAVE
• AD + Entra — still important, but not the entire job
• Zero Trust / PAM / IGA / SSO / cloud identity modernization —
• Hands-on technical depth —

The IT Security Identity & Access Technical Lead is responsible for designing, implementing, and governing the enterprise-wide Identity and Access Management (IAM) program. This role partners with Security, Infrastructure, HR, Engineering, and Business teams to develop a secure, scalable identity ecosystem while ensuring seamless access across the organization.

• Develop and maintain the Identity & Access Management (IAM) strategy, roadmap, and governance model.
• Design and oversee security solutions for authentication, authorization, privileged access, Single Sign-On (SSO), Multi-Factor Authentication (MFA), SaaS security, API access controls, conditional access policies, and identity lifecycle management.
• Lead modernization initiatives involving Zero Trust, passwordless authentication, identity automation, Attribute-Based Access Controls, AI-driven threat detection, and identity management for AI agents.
• Establish API security standards, including identity and access controls, API key and token management, least-privilege access, and monitoring.
• Implement secure API authentication and authorization using OAuth, OIDC, and token lifecycle management.
• Lead the design and operation of Privileged Access Management (PAM) solutions, including Cyber Ark.
• Manage project delivery within established scope, budget, and timelines.
• Lead technical teams responsible for user provisioning, deprovisioning, terminations, and password resets across SaaS and on-premises applications.
• Conduct regular security audits, identify risks, investigate access irregularities, and ensure compliance with privacy laws and regulatory requirements.
• Establish performance metrics, document procedures, test and implement configuration changes, and resolve technical issues.
• Drive continuous improvement, operational consistency, and reliable identity management services.

7–12+ years of professional experience in IT and/or Cybersecurity within an enterprise Identity Management team.

Deep expertise in IAM frameworks, Zero Trust, and modern identity protocols, including SAML, OAuth, OIDC, and SCIM.

Experience with enterprise-scale IAM platforms, on-premises systems, cloud platforms, SaaS applications, and APIs.

Strong understanding of cloud identity platforms, including Microsoft Entra , Azure AD, AWS IAM, and GCP IAM.

Significant knowledge of Active Directory and Entra , including synchronization, patching, hardening, configuration, and risk management.

Experience with identity management tools and enterprise applications, including Intune, Dell One Identity, Semperis, Cyber Ark, SAP, Salesforce, and Workday.

Knowledge of security architecture, threat modeling, identity attack vectors, and emerging IAM technologies.

Strong communication, collaboration, problem-solving, and…