Manager Identity and Access Management - Cyber Security & TSOC

FirstEnergy at a Glance

We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers’ lives brighter, the environment better and our communities stronger.

FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.

About the Opportunity

This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp.  [SC00]

Position Overview

We’re looking for a strategic, technically skilled leader to shape the future of identity and access management platforms at FirstEnergy. In this role, you’ll lead a talented team of system administrators, driving innovation in identity, authorization and access mgmt for both internal and external users. The Mgr IAM is responsible for ensuring that Service Level Agreements are being met, as well as evaluating new technologies and processes for use within the five IAM pillars.

You’ll work closely with teams across Cybersecurity, IT, HR, Tx, Dx, Supply Chain and other key business stakeholders to deliver secure, scalable solutions in a hybrid environment. 

Key Responsibilities

• Lead the Identity & Access Management (IAM) program, ensuring secure and efficient management of user identities, authentication, authorization, and access across enterprise systems.

• Develop and execute IAM strategy, roadmap, and operating model aligned with cybersecurity, business, and regulatory requirements.

• Manage a talented team responsible for identity lifecycle, including onboarding, transfers, role changes, and offboarding of employees, contractors; in coordination with HR and IT.

• Maintain a high level of technical knowledge of platforms supported by attending webinars, conferences and workshops; reviewing professional publications and research and establishing personal networks

• Responsible for managing staff performance by setting objectives, goals, priorities, tracking performance and providing feedback. Assists in personal growth of staff through individual development plans, mentoring, coaching and stretch assignments.

• Oversee the management of the infrastructure, hardware and software including their SLAs required to support all aspects of the IAM pillars: Identity Governance, Access Mgmt, Privileged Access Mgmt, Password Mgmt and Identity Analytics and Intelligence.

• Lead enterprise authentication services including Multi-Factor Authentication (MFA), Single Sign-On (SSO), Conditional Access, federation services, and passwordless authentication technologies.

• Establish and enforce role-based access control (RBAC) and least privilege principles across information technology and operational technology environments. 

• Ensure compliance with regulatory standards.

• Ensure adherence to cybersecurity, data governance and data loss prevention policies. Enforce role-based access control (RBAC) and multi-factor authentication (MFA). Monitor and enforce access controls and permissions.

• Contribute to long-term technology roadmaps, budget planning, forecasting (both Labor and OTL), and resource allocation. Lead multiple projects simultaneously, ensuring timely delivery within scope and budget.

• Lead investigations and resolve IAM related incidents.  Implement corrective actions and continuous improvement measures, including updating procedures and processes.  Provide off-hours support for major incidents and critical project activities as needed.

• Integrate IAM controls with cyber operations, threat detection, and insider threat monitoring capabilities.

• Support secure remote access, vendor access management, and privileged access controls for operational technology (OT) and critical infrastructure environments.

• Maintain strong segregation of duties between IAM operations, access governance, and compliance oversight functions.

• Serve as the senior IAM leader during regulatory audits, compliance assessments, and cybersecurity reviews.

• Provide input to contract negotiations for required software, hardware and consulting, to stay within budget.

• Partner with Cyber Operations, Infrastructure, HR, Compliance, Internal Audit, and business stakeholders to ensure identity controls support business objectives while reducing cyber risk.

• Champion FE’s Core Values and Behaviors through coaching and by personal example.

Qualifications

• Bachelor’s deg