Wizards of the Coast builds worlds that bring people together through play and imagination. From genre-defining games like Magic: The Gathering® and Dungeons & Dragons® to an expanding multiverse, we create new ways to foster friendship and connection. Millions of players, thousands of creators, and one significant attack surface make identity security essential. Who holds the keys? Our Director of Identity & Access Management does.
This leader runs the identity program end to end, authentication, authorization, governance, and privileged access for every employee, contractor, service, and studio, reporting to the VP of Infrastructure Engineering and Operations. The role commands the enterprise identity budget, roadmap, and headcount, and leads managers and principal engineers across identity platform engineering, Identity Governance (IGA), Privileged Access Management (PAM), and a brand-new Identity Security Operations function.
What You'll DoSet the multi-year IAM strategy and funding plan. Consolidate workforce identity onto one provider, retire legacy tooling, and deliver IAM as a single global service that meets regional requirements through configuration instead of one-off regional builds. Engineers, external studios, and creative partners reach their environments from anywhere through identity-based, not location-based, controls.
Automate access from hire through exit on authoritative HR data. Keep the role and entitlement model scalable through acquisitions, push access decisions to business leaders through self-service, hold contractors and partners to the same standard, and secure workload and AI-agent identity with short-lived credentials and real-time revocation.
Replace standing privilege with just-in-time elevation and session recording. Define identity-verification and recovery standards that survive the gaps phishing-resistant MFA leaves behind, make identity the enterprise access control plane, and stand up an Identity Security Operations function that detects and contains identity attacks automatically. IAM runs as a Tier 0 service here, with service levels, on-call coverage, and change rigor to match. Broad mandate? Absolutely!
What It Takes- 12+ years in IAM or security engineering, including 5+ years leading teams and managers.
- Experience leading enterprise IAM programs at scale, including identity-provider consolidation, IGA, PAM, and Active Directory modernization.
- Hands-on expertise with Okta or Entra ID, Saviynt or SailPoint, CyberArk, and cloud identity services such as AWS IAM Identity Center.
- Delivery of zero-trust capabilities, including phishing-resistant or passwordless MFA, conditional access, least privilege, identity-based network access, and just-in-time privileged access.
- Experience building or operating identity detection and response, including automated containment and measurable response times.
- A record of transforming reactive IAM operations into automation-led platform engineering, supported by measurable results.
- Experience managing IAM budgets and vendors, including licensing optimization and contract negotiations that delivered savings.
- Experience delivering global identity services and developing identity policy with HR, application, security, and infrastructure partners, including attribute-based access control.
Nice to Have- Relevant certifications, such as CISSP, Okta, SailPoint, Saviynt, or CyberArk.
- Experience with AI-driven identity governance, role mining, access recommendations, or continuous certification.
- Experience in a multi-studio, multi-business-unit entertainment or gaming environment.
The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package.
#Wizards
The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package.
Pay Range
$216,200-$324,300 USD
Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include:
- Health & Wellness
- Time Off to Recharge
- Financial Well-being
- Life & Family Support
- Volunteer and Community Initiatives
- Learning & Development
- Exclusive Perks
Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.
