Lead Identity & Access Management

Join our team - and take the next step in achieving a fulfilling career!

What We DoAt Card Works, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most.

Who We Are Card Works , Inc. is a diversified consumer finance service provider and parent company of Card Works Servicing, LLC, Merrick Bank and Carson Smithfield, LLC.Card Works Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.

Merrick Bank is an FDIC-insured Utah Industrial Loan Bank. Merrick operates three main business lines: credit cards, recreational lending, and merchant services.

Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.

Position Summary:

The Identity and Access Management (IAM) Lead Engineer will work in the Merrick Bank and Card Works security team. They will responsible for day-to-day activities regarding identity and access creation, risk-based access control, attribute-based access control, role-based access control, privileged access management, access modifications, and access terminations. They will be the primary contact for support of tools within the information security team from an IAM perspective.

The IAM Lead Engineer will design solutions, engineer integrations, set up processes, provide reporting, instruct other teams on said processes and integrations, and manage tools and data.

They implement, operate, monitor, and improve information security processes and systems that protect the companies’ data, customers, and computer systems from business disruption, data/identity compromise, cyber fraud, and regulatory criticism.

Essential Functions:

Privileged Access Management (PAM) Tool Ownership & Administration Expectation:
Serves as the primary engineer responsible for the PAM platform’s daily function, configuration, and reliability.

Administer access to the PAM platforms, including onboarding users, roles, and entitlements within the tools

Configure privileged access workflows, credential vaulting, rotation, session controls, and integrations

Monitor PAM system performance, availability, errors, and audit logs Troubleshoot and remediate PAM‑related issues affecting access, automation, or integrations

Partner with business and infrastructure teams to onboard new privileged use cases into PAMIAM Platform Support & Engineering Enablement Expectation:
Serves as the primary engineer responsible for the PAM platform’s daily function, configuration, and  the day to day technology owner of identity governance, lifecycle, and authentication platforms by leading:

Troubleshooting Integration validation

Operational execution

Execute IAM tasks according to established processes and approvals

Lead application and service integrations with IAM tooling

Utilize scripting, APIs, and automation to improve IAM operational efficiency

Assist with configuration changes and platform enhancements under established governance

Detective IAM Controls & Security Operations Support Expectation:
Actively supports monitoring, investigation, and response activities related to IAM security signals.

Support detective IAM controls, including logging, alerting, and access review evidence collection

Configure and monitor IAM and PAM log activity for anomalous or unauthorized behavior

Lead identity‑related investigations, incidents, and penetration testing efforts

Gather and analyze IAM and PAM data for audits, incident response, and forensic activities

Collaborate with security teams during access‑related security events to assess impact and remediate issues

Collaboration, Documentation & Continuous Improvement Expectation:
Operates as a dependable engineering partner who improves IAM services through execution and feedback.

Collaborate with application,…