Principal, Identity Management

Itron is innovating new ways for utilities and cities to manage energy and water. We create a more resourceful world to protect essential resources for today and tomorrow. Join us. Itron, Inc. (NASDAQ: ITRI) is a world-leading technology and services company dedicated to the resourceful use of energy and water. With more than 300 million deployed endpoints, Itron is one of the largest IoT companies in the world.

Through innovative technology and services, we are helping create more insightful utilities, smarter cities, and a more resourceful world.

• Define, maintain, and evolve the enterprise IAM architecture, technical standards, reference patterns, and strategic roadmap aligned with organizational goals and industry best practices.
• Lead the design, implementation, and modernization of secure identity solutions supporting workforce, customer, product, cloud, privileged, application, and non-human identity use cases.
• Advance Zero Trust security principles, including least privilege, separation of duties, continuous verification, risk-based access controls, and reduction of standing administrative privileges.
• Establish and optimize identity governance processes, including identity lifecycle management, access certifications, entitlement analysis, role management, and joiner-mover-leaver automation.
• Partner collaboratively with Cybersecurity, Cloud Engineering, Product Security, Infrastructure, Enterprise Architecture, and business stakeholders to deliver secure and scalable identity solutions.
• Define IAM monitoring, logging, reporting, and metrics programs to measure access risk, identity hygiene, control effectiveness, and identity-related threat activity.
• Provide technical leadership during identity-related incidents, investigations, access-control failures, and major security decisions.
• Drive continuous improvement through automation, policy-as-code, and AI-enabled capabilities that enhance security outcomes, governance, operational efficiency, and user experience.
• Mentor engineers and technical teams by fostering an authentic, accountable, and collaborative culture focused on operational excellence and innovation.
• Produce clear technical documentation, standards, architectural guidance, and implementation patterns supporting enterprise-wide adoption.

• Bachelor's degree in Computer Science, Cybersecurity, Management Information Systems, or a related field; equivalent experience will be considered.
• 7+ years of experience in cybersecurity, identity engineering, cloud security, or a related technical discipline.
• 5+ years of hands-on experience designing, implementing, and operating enterprise IAM solutions.
• Expert knowledge of authentication, authorization, Single Sign-On (SSO), federation, LDAP, identity lifecycle management, privileged access management, and Zero Trust security principles.
• Demonstrated experience designing IAM architectures across hybrid, multi-cloud, SaaS, Windows, Linux, and on-premises environments.
• Strong understanding of access governance, role-based access control, entitlement management, and least-privilege security models.
• Experience troubleshooting complex authentication, authorization, federation, token, and access-policy issues.
• Ability to communicate complex identity and security risks to technical and executive stakeholders in a clear and actionable manner.
• Experience supporting identity capabilities within customer-facing products, commercial technology platforms, or enterprise-scale business environments.
• Working knowledge of artificial intelligence and the ability to responsibly leverage AI-enabled tools to improve IAM automation, governance, threat detection, analytics, and security operations.
• Strong written communication, stakeholder management, documentation, and presentation skills.
• Demonstrated ability to work in an agile, customer-centric, and highly collaborative environment.

• Hands-on experience with Microsoft Entra , Active Directory, LDAP directories, Conditional Access, Privileged Identity Management (PIM), federation technologies, and enterprise SSO solutions.
• Experience with Identity Governance and Administration (IGA) platforms such as SailPoint, Saviynt, One Identity, or equivalent solutions.
• Experience with Privileged Access Management (PAM) technologies including Cyber Ark, PAM
  360, or similar credential vaulting and privileged governance platforms.
• Knowledge of infrastructure-as-code and automation technologies such as Terraform, AWS Cloud Formation, Microsoft Graph, Power Shell, Azure Key Vault, and policy-as-code frameworks.
• Experience securing application identities, workload identities, managed identities, containers, CI/CD pipelines, serverless services, and other non-human identities.
• Familiarity with identity-focused threat detection and defense, including token theft, consent phishing, credential abuse, privilege escalation, and lateral movement techniques.
• Experience supporting regulated…