Job DescriptionThis is an onsite role; only local candidates will be considered.The
Identity and Access Management (IAM) Lead will support the Texas Department of Transportation (TxDOT). This role oversees identity lifecycle operations, access governance, application onboarding, authentication services, service performance, audit readiness, and continuous improvement across the enterprise. The IAM Lead will lead and mentor IAM/UAM staff while coordinating with security, infrastructure, application, business, audit, and vendor teams. Key areas of focus include defining the IAM/UAM operating model, ensuring access is granted according to least privilege and approved business need, and maintaining audit-ready controls. The role also includes reporting service performance, risks, and recommended actions to technical and executive leadership.
Responsibilities- Lead IAM/UAM operations, projects, service improvements, and modernization initiatives, and help define the operating model, service ownership, escalation paths, standards, procedures, and control requirements.
- Translate security, business, audit, and compliance requirements into practical identity and access-management processes, and develop remediation plans for identified service risks and control gaps.
- Oversee end-to-end identity lifecycle processes, including onboarding, transfers, role changes, temporary access, access recertification, separation, and offboarding.
- Establish standards for access provisioning, deprovisioning, exception handling, emergency access, privileged access, and periodic access reviews based on least privilege, role-based access, and separation-of-duties requirements.
- Provide service and operational oversight for identity capabilities such as Active Directory, Microsoft Entra ID, SSO, MFA, conditional access, passwordless authentication, identity governance, and privileged access.
- Coordinate application onboarding into enterprise identity platforms, including authentication design, user population, role mapping, approval requirements, provisioning procedures, testing, and support transition.
- Manage access-request queues, incidents, service requests, escalations, and backlogs while defining and monitoring service levels, fulfillment times, quality measures, and recurring issues.
- Develop and maintain operational procedures, runbooks, knowledge articles, escalation guidance, support documentation, and service continuity expectations.
- Ensure access activities are authorized, traceable, documented, and audit ready, and support internal and external audits, security assessments, control testing, evidence collection, and remediation of findings.
- Lead, coach, and mentor IAM/UAM staff, identify automation and self-service opportunities, and develop dashboards and executive reporting on service performance, risks, and improvement work.
RequirementsMinimum Qualifications - Candidates must meet all minimum qualifications- 8 years of progressively responsible experience in information technology, cybersecurity, enterprise infrastructure, technology service delivery, or security programs.
- 5 years of direct experience in IAM, UAM, identity governance, cybersecurity access administration, or enterprise access-management operations.
- 3 years of experience leading technical or operational teams, serving as a technical lead, supervising staff, or directing cross-functional IAM workstreams.
- 3 years of hands-on or service-owner experience with enterprise identity technologies such as Active Directory, Microsoft Entra ID, SSO, MFA, directory services, role-based access control, or privileged access.
- 2 years of experience with identity governance and administration processes such as provisioning, deprovisioning, access certification, role management, entitlement management, or application onboarding.
- 2 years of experience supporting audit, compliance, security-control testing, access reviews, risk remediation, or evidence collection for identity and access controls.
- Strong knowledge of identity lifecycle management, authentication, authorization, SSO, MFA, identity governance, directory services, privileged access, least privilege, role-based access control, and access-review practices.
- Ability to evaluate complex access issues, distinguish operational problems from control risks, and coordinate the appropriate technical and business response.
- Ability to write and maintain clear procedures, control documentation, operational standards, executive updates, and audit evidence.
- Strong service-management, leadership, analytical, communication, customer-service, collaboration, and problem-solving skills, including prioritization, escalation management, metrics, and root-cause analysis.
Preferred Qualifications- Bachelor's degree in information technology, cybersecurity, computer science, information systems, or a related field; equivalent relevant experience may be considered where permitted.
- 2 years of experience in a public-sector, regulated, transportation, financial, healthcare, utilities, or critical-infrastructure environment.
- 2 years of experience with SailPoint, Ping Identity, Microsoft Entra ID, ServiceNow, or comparable identity-governance, federation, directory, or workflow platforms.
- Experience with identity automation, workflow orchestration, APIs, scripting, reporting, or data-quality improvement.
- Professional certification in IAM, cybersecurity, audit, project management, or IT service management, such as CISSP, CISM, Security+, Microsoft identity certifications, SailPoint certifications, ITIL, PMP, or comparable credentials.
Additional Requirements- Candidates must reside within 50 miles of the Austin, Texas work location.
- Candidates must be authorized to work in the U.S.
- Candidates must agree to TxDOT's in-office work policy.
Work Location and ScheduleLocation: TxDOT Offices, 6230 E Stassney Ln, Austin, TX 78744.
Schedule: Monday-Friday, 8:00 AM-5:00 PM.
Work Arrangement: Onsite, 4-5 days per week.
