Senior Director IT- IAM & Provisioning Operations

City/State:
Yonkers, New York
Grant Funded:
No
Department:
IT - Technology & Cloud Services
Work Shift:
Day
Work Days:
MON-FRI
Scheduled

Hours:


8:30 PM-5 AM
Scheduled Daily

Hours:


8.5 HOURS
Pay Range:
$-$

Montefiore is ranked among the top hospitals nationally and regionally by U.S. News & World Report. For more than 100 years we have been innovating new treatments, procedures, and approaches to patient care, producing stellar outcomes and raising the bar for academic medical centers in the region and around the world. Our work to improve health outcomes in underserved communities is unparalleled in the United States.

Our workforce is among the most diverse in the US:
Montefiore associates speak 60+ languages.

As Montefiore has built paths to deliver lifesaving health outcomes to underserved communities, we are looking to the future of being a data driven organization and tech-enabled care delivery to create better experiences for patients, providers, and operations teams.

The Senior Director of IAM & Provisioning Operations is responsible for leading and evolving the enterprise identity, access management, and provisioning strategy across a large and complex IT organization. This role oversees the teams, platforms, processes, and controls that govern workforce identity, application access, privileged access, certificate lifecycle management, access reviews, and automated user lifecycle operations. The position ensures that employees, contractors, partners, service accounts, and non-human identities receive the right access at the right time, with strong security, auditability, and operational discipline across the enterprise.

Education

A combination of education, experience, and training should qualify the candidate. A bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business Administration, or a related discipline is preferred; equivalent enterprise leadership experience may be considered in lieu of formal education.

Certification(s)

Preferred certifications include but are not limited to:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Identity and Access Manager (CIAM) or equivalent IAM certification
• SailPoint Identity
  
  IQ / Identity Now certification or equivalent experience
• Cyber Ark, Beyond Trust, Delinea, or equivalent Privileged Access Management certification
• Microsoft Certified:
  Identity and Access Administrator Associate
• Certified Cloud Security Professional (CCSP)
• ITIL Foundation Certification
• Equivalent Experience.

Role and Responsibilities

The Senior Director of IAM & Provisioning Operations provides strategic and operational leadership across all aspects of enterprise identity governance, provisioning, privileged access, and certificate management. The role ensures secure, compliant, reliable, and scalable access operations while enabling the business to move efficiently and reducing access-related risk across the organization.

Key responsibilities

• Lead the IAM & Provisioning Operations organization, overseeing teams responsible for identity governance, access provisioning, privileged access management, certificate lifecycle management, and access operations.
• Own and evolve the enterprise IAM strategy, roadmap, operating model, and governance framework in partnership with Cybersecurity, Enterprise Architecture, Infrastructure, Applications, HR, Cloud teams, Compliance, Internal Audit, and business leadership.
• Oversee SailPoint or equivalent Identity Governance and Administration platforms, including identity aggregation, access request workflows, Automations, code changes, role management, access certifications, policy enforcement, segregation of duties, and lifecycle event processing.
• Direct enterprise provisioning and deprovisioning operations for employees, contractors, vendors, partners, and other workforce populations across on-premises, cloud, SaaS, and legacy application environments.
• Govern joiner, mover, leaver, transfer, rehire, and termination processes to ensure timely, accurate, auditable, and automated access changes aligned to HR source-of-truth data.
• Own the enterprise Multi-Factor Authentication program, including platform governance, registration and adoption monitoring, end-user experience, exception and exclusion management, and phishing-resistant authentication initiatives such as FIDO2 and certificate-based authentication. Lead MFA migration and modernization programs across workforce populations, and ensure MFA controls are aligned with conditional access policy, regulatory requirements, and risk-based authentication standards.
• Lead the Privileged Access Management (PAM) program, including vaulting, credential rotation, privileged session management, just-in-time access, break-glass procedures, service account governance, and privileged access reviews.
• Oversee certificate management and PKI-related operations, including certificate inventory, discovery, issuance, renewal, expiration monitoring, key management,…