IAM Director

Job Profile Title: IT Security - Identity and Access Management Director

Business Title: Identity and Access Management Director                                                                                 

Job Code:

FLSA classification:

Reports To:  Chief Information Security Officer.

Direct Reports: IAM Team consisting of three direct contractors. Multiple indirect contractors via third parties managing IDP and a PAM solution.

Position Summary:

The Director of Identity and Access Management (IAM) will lead, build, and govern our enterprise identity function. Reporting to the CISO. This critical leadership role is responsible for setting the vision and strategy for how our workforce, partners, and customers securely and efficiently access our hybrid digital ecosystem.

The ideal candidate is a forward thinking and strategic and agile leader and proven relationship builder with a passion for creating scalable, secure, and user-friendly identity solutions that support business agility. This individual must bring a minimum of 15+ years of experience building and leading enterprise-scale IAM functions, including deep, hands-on leadership expertise in managing complex, multi-vendor identity platforms and programs.

Job Responsibilities:

• Strategy & Vision: Develop, execute, and maintain a comprehensive, enterprise IAM strategy and roadmap aligned with enterprise security, zero trust principles, and overarching business goals.
• Leadership & Mentorship: Lead, mentor, and develop a high-performing team of IAM professionals and engineers responsible for identity lifecycle management, access provisioning, authentication, and directory services.
• Technology & Platform Management: Define and oversee the architecture, implementation, and operational management of all core IAM technologies. This initially includes:
  • Access Management: Leading the management and evolution of our core Identity Providers and federation services. This includes ensuring a seamless, secure, and resilient Single Sign-On experience, powered by adaptive Multi-Factor Authentication and risk-based access policies.
  • Identity Governance and Administration: Maturing our identity program to manage the full identity lifecycle (joiner, mover, leaver). This covers provisioning, deprovisioning, recurring access reviews and attestation, and the development of our Role-Based Access Control framework to ensure access is compliant with business policies and regulations.
  • Privileged Access Management: Driving the strategy and maturity of our PAM program and platform to secure, vault, and rotate all privileged credentials for both human and non-human users.
  • Core Directory Services: Owning the architecture, security, and hygiene of foundational identity stores, including Active Directory, Azure Active Directory, and enterprise LDAP services.
  • Machine Identity & Secrets Management: Developing and managing the program for non-human identities, including the governance of service accounts, API keys, certificates, and the enterprise secrets management platform.
  • Cloud IAM Governance: Establishing and enforcing the governance framework for managing roles, permissions, and entitlements within our multi-cloud environments to ensure least privilege.
  • Identity Threat Detection and Response: Partnering with the Security Operations Center to monitor, detect, and respond to identity-based threats, leveraging behavioral analytics and other security signals.
  • Application Integration: Overseeing the IAM application integration factory to provide scalable and secure federation services (SAML, OIDC, OAuth) for managing current and onboarding new cloud and internal applications.
• HR-Driven Identity: Drive the strategic integration of identity services with key business systems, particularly our HRIS, to automate and govern identity lifecycle events (joiners, movers, leavers).
• Governance & Compliance: Enforce enterprise-wide IAM governance frameworks, policies, standards, and controls. Ensure identity processes meet regulatory and compliance requirements.
• Stakeholder Collaboration: Serve as a trusted advisor and key relationship builder with Security, IT, HR, Legal, Compliance, and business unit leaders to ensure IAM solutions meet their needs while enforcing security policies.
• Modernization & Automation: Drive IAM modernization initiatives, including cloud IAM integration, and champion automation to improve operational efficiency and enhan