Cyber Security Manager Enterprise Identity

Overview

The Cyber Manager – Identity & Access Management is a leader and architecture owner responsible for advancing Sentara Health’s enterprise identity strategy across non-human identities, identity proofing, and privileged access management. This role partners with Identity Governance and Administration leaders to build a unified identity ecosystem that supports clinical, corporate, partner, and consumer populations.

Virginia Beach, VA

First (Days)

The Cyber Manager – Identity & Access Management is a leader and architecture owner responsible for advancing Sentara Health’s enterprise identity strategy across non-human identities, identity proofing, and privileged access management. This role partners with Identity Governance and Administration leaders to build a unified identity ecosystem that supports clinical, corporate, partner, and consumer populations.

The role also owns the Digital Front Door identity experience, ensuring patients and consumers have a secure, consistent, and seamless login journey across the Sentara ecosystem.

• Oversee single sign-on, multifactor authentication, and privileged access management capabilities to enforce Zero Trust and least-privilege principles.
• Ensure identity services are integrated seamlessly across the internal application landscape.

• Direct the development and modernization of the core identity technology stack, including APIs, microservices, and identity data platforms.
• Ensure the reliability, performance, and scalability of identity products and platforms, including Saviynt, Ping, 1
  
  Kosmos, Experian ,Cyber Ark, Beyond Trust, and related tools.
• Standardize identity patterns across the organization to enable secure developer self-service and consistent implementation practices.
• Security Operations integration:
  Partner with the Cyber Threat Operations Center to monitor and respond to identity-based threats, credential stuffing, and account takeover activity.

• Machine identity inventory:
  Establish a comprehensive inventory and ownership model for non-human identities, including service accounts, API keys, RPA bots, secrets, and other machine identities.
• Secrets management:
  Direct the lifecycle for credential discovery, vaulting, and automated rotation across applications and automated workflows to reduce static or unmanaged credentials.
• IoMT security:
  Extend IAM principles to the Internet of Medical Things by ensuring medical devices, such as infusion pumps and monitors, authenticate with unique machine identities before accessing clinical networks.
• Workload identities:
  Oversee Entra Workload  similar capabilities to secure machine-to-machine communications across cloud-native and legacy hospital systems.

• Bachelor’s or master’s degree in computer science, information security, or a related field. (Preferred)

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certifications (Preferred)

• Extensive experience in technology and cybersecurity, including at least 15 years of relevant experience and 5 or more years in a senior leadership role; healthcare integrated delivery network or health plan experience preferred.
• Proven leadership experience managing teams and driving cross-functional collaboration.
• Strong understanding of regulatory requirements, industry standards, and cybersecurity best practices.
• Deep understanding of identity protocols (SAML, OIDC, OAuth 2.0, FIDO2) and experience managing both cloud-native and hybrid identity environments.
• Excellent communication skills, with the ability…