Sr. Manager - Identity & Access Management

Sr. Manager – Identity & Access Management (Remote)

At Edelman Financial Engines (EFE), our purpose is to guide people with the financial advice they need to thrive. 

We believe that every dollar saved represents a lifetime of hard work and aspirations, and every dollar invested has job to do for our clients. That’s why we are committed to managing our clients’ investments by truly understanding them as people first and then delivering advice, strategies and solutions to help them feel confident about the plans they are making, whether for today, tomorrow, or in the great unknown future. Our goal is to build long-term relationships based on respect, integrity, and a belief that our responsibility is to help people make smart investments decisions in every stage of their lives.

Our culture is grounded in our CORE values: Client First, One Team, Respectful Candor, and Endless Curiosity. These values guide everything we do, for our clients and each other. We are committed to moving forward together. If you are inspired by purpose-driven work and a collaborative, values-led culture, we invite you to explore a career with us.

As the Manager of the Identity & Access Management (IAM) team, you’ll play a pivotal role in leading the team while remaining hands-on with technical tasks. This role is ideal for a strong leader who can stay close to the technology and provide strategic direction, mentorship, and support to the team members. You will be responsible for overseeing the design, implementation, and operation of IAM services such as OKTA, CyberArk, SSO, MFA, PAM, Zero Trust, Active Directory, and Azure AD. Additionally, you will ensure regulatory compliance (including SOC2), drive automation and integration initiatives, and continuously improve identity governance and lifecycle management. The ideal candidate will demonstrate a commitment to operational excellence, effective cross-functional collaboration, and fostering a culture aligned with our CORE values. Your contributions will be essential in maintaining secure, scalable, and efficient identity and access solutions for Edelman Financial Engines.

Responsibilities: 

• Manage and mentor a team of identity engineers, ensuring effective collaboration and performance.
• Lead the design, implementation, and operations of IAM Services at EFE. IAM services include OKTA, CyberArk, SSO, MFA, PAM, Zero Trust, Active Directory, Azure AD, and user access provisioning services, automation, integrations, identity governance, and identity lifecycle management.
• Stay hands-on with provisioning, configuring, and supporting resilient cloud deployment architecture, keeping it compliant with regulations like SOC2 and making it more efficient. 
• Oversee scalability, capacity planning, redundancy, and resiliency.
• Design, maintain, and enhance service availability and performance SLAs based on business and product requirements.
• Manage SSO/ identity services vendor platforms specifically for multiple SOC2 controlled environments, work with other Identity Platform engineers in deploying and maintaining services and create and review operational runbooks.
• Participate and contribute to periodic SOC2 audit processes.
• Partner with IT and product teams for SSO and user RBAC registration integration

Requirements: 

• 10+ years of hands-on experience in managing, implementing, and supporting identity & access technologies.
• Experience or deep knowledge of common IAM protocols like SAML 2.0, FIDO, OIDC, SCIM.
• Experience with one or more of the following technologies: Okta, Okta Workflow, Zscaler, Azure AD, Active Directory, and CyberArk.
• Working knowledge of REST-based API integrations between IAM solutions and business applications.
• Experience with one or more of the following technologies: Okta, Okta Workflow, Zscaler, Azure AD, Active Directory and CyberArk. 
• Working knowledge of REST-based API integrations between IAM solutions and business applications 
• Ability to work cross-functionally with a focus on cloud-first across multiple business units, such as IT applications and infrastructure, security, and product development teams, primarily integrating