Identity & Access Management Platform

Job Overview

This role will build and lead a new enterprise Identity & Access Management (IAM) Platform team. It is a unique opportunity to shape a critical capability from the ground up assessing today’s environment, defining the future state, and leading a multi-year transformation while keeping existing identity services secure and reliable.

You will partner with leaders across technology, cybersecurity, risk, compliance, audit, and the business to understand pain points, align priorities, and develop a practical strategy for modernizing IAM. You will establish the team, operating model, architecture, governance, and roadmap for identity governance, access management, privileged access, and human and non-human identities.

Responsibilities

• Build and lead the new IAM Platform team, including its mission, structure, capabilities, and ways of working.

• Assess the current identity environment, processes, controls, integrations, and stakeholder pain points.

• Define the IAM strategy, target-state architecture, operating model, and multi-year transformation roadmap. This includes driving detailed architecture and design based on experience of building these systems at enterprise scale.

• Create an executable program plan covering investment, resources, priorities, dependencies, risks, and measurable outcomes.

• Partner with senior business and technology leaders to build alignment, make trade-offs, and drive adoption.

• Guide the evaluation and selection of IAM and IGA platforms, vendors, and implementation partners.

• Oversee the modernization of identity governance, authentication, authorization, privileged access, and human and non-human identity management.

• Lead the phased migration from legacy capabilities while maintaining service continuity, security, and regulatory compliance.

• Strengthen IAM controls, including joiner/mover/leaver processes, access reviews, least privilege, audit evidence, and SOC 1 requirements.

• Establish platform performance, risk, control, adoption, and service-reliability measures.

Qualifications

• Experience developing an enterprise strategy, target operating model, architecture, or transformation roadmap.

• Demonstrated experience architecting, building, integrating, or operating enterprise-scale IAM platforms—not solely managing IAM programs or vendors.

• Ability to move comfortably between enterprise strategy and detailed technical discussions, including reviewing solution designs, challenging architectural assumptions, and guiding engineering teams through implementation.

• Strong understanding of identity architecture and integration patterns across cloud, SaaS, internally developed applications, APIs, and legacy environments.

• Strong knowledge of core IAM and IGA concepts, including identity lifecycle management, access governance, authentication, authorization, federation, and privileged access.

• Strong understanding of OpenID Connect, OAuth 2.0, SAML, delegated authorization, On-Behalf-Of flows, and service-to-service authentication.

• Practical experience with one or more leading identity ecosystems, such as Microsoft Entra ID, Active Directory, AWS IAM, SailPoint, Saviynt, Omada, One Identity, or comparable solutions. Candidates are not expected to be experts in every product, but should have the technical depth to evaluate platforms, guide integrations, and make sound architecture decisions.

• Experience leading complex technology transformation or modernization initiatives while supporting existing services.

• Ability to engage senior leaders, uncover organizational pain points, build consensus, and translate needs into practical priorities.

• Strong communication and program leadership skills, with the ability to explain technical and risk topics to diverse audiences.

• Experience establishing or significantly transforming an IAM platform or team is preferred

• Knowledge of non-human identities, workload identities, service accounts, secrets management, or AI agent identities is highly desired.

• Experience in a regulated or highly controlled environment, including familiarity with SOC 1 or similar controls is an asset.

The base salary range for this position is $128,000 - $293,000 per year.

Arrowstreet Capital operates a robust talent acquisition program, and we also seek to compensate and reward our employees competitively within our industry and in line with our merit-based culture. Our approach to total compensation includes base salaries and annual discretionary bonuses, as well as a robust benefits package. The determination of a successful candidate’s base salary placement within the listed range will vary based on the candidate’s relevant experience and qualifications (which may also include relevant certifications, credentials and other education), the job responsibilities and scope, the commensurate resulting level of the position and other relevant factors. The listed range is also an estimate, and additional information regarding base salary and other elements of total compensation offered by Arrowstreet Capital to successful applicants will be communicated during the recruitment process.