DescriptionThe Identity Security Engineering Manager is responsible for leading the organization's Identity Governance & Administration (IGA), Authentication Security, and Privileged Access Management (PAM) programs. As part of the Cybersecurity team, this leadership role is responsible for protecting the organization's information assets by governing the processes, policies, and technologies that manage digital identities, authentication methods, privileged accounts, and access to critical systems and information.
This position oversees a team of cybersecurity professionals responsible for identity lifecycle management, access governance, authentication services, privileged account security, compliance initiatives, and the implementation of security controls to reduce organizational risk. The Manager will work closely with business leaders, application owners, infrastructure teams, audit, compliance, and cybersecurity leadership to ensure identity security strategies align with business objectives and regulatory requirements. Other responsibilities include, but are not limited to:
- Provide leadership and strategic direction for the Identity Governance, Authentication Security, and Privileged Access Management teams.
- Develop and execute the organization's identity security roadmap, ensuring alignment with cybersecurity, compliance, and business objectives.
- Oversee the design, implementation, and operation of identity lifecycle management, access certification, role management, segregation of duties (SOD), privileged access controls, and authentication technologies.
- Lead the administration and enhancement of SailPoint IdentityIQ and related identity security platforms.
- Drive continuous improvement of identity governance controls, processes, and risk mitigation strategies.
- Manage authentication technologies including Active Directory, LDAP directories, single sign-on (SSO), multifactor authentication (MFA), and federated identity services.
- Oversee privileged access security solutions and processes, including privileged account governance, credential management, secrets management, and privileged session controls.
- Partner with internal audit, compliance, and risk management teams to ensure adherence to regulatory and cybersecurity requirements.
- Establish standards, policies, procedures, and governance frameworks for identity and access management.
- Manage project delivery, resource planning, budgets, vendor relationships, and strategic initiatives related to identity security.
- Coordinate development, testing, deployment, and operational support activities utilizing established SDLC methodologies.
- Provide executive-level reporting on identity security program effectiveness, risks, metrics, and strategic initiatives.
- Lead remediation efforts related to identity, authentication, and privileged access security events.
- Recruit, mentor, develop, and retain high-performing security professionals.
QualificationsThe successful candidate will meet the following qualifications:
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline, or equivalent work experience.
- CISSP, CISM, Security+, or other cybersecurity certifications.
- 7+ years of experience with IAM experience.
- 5+ additional years of progressive IT experience.
- 3+ years of leadership, supervisory, or management experience leading security, identity, or infrastructure teams.
- Strong experience managing identity governance, authentication, and access management programs within a large enterprise environment.
- Thorough understanding of: Identity Governance & Administration (IGA), Role-Based Access Control (RBAC).
- Privileged Access Management (PAM).
- Authentication and Federation Technologies.
- Experience identifying and implementing improvements to access governance controls and risk mitigation measures.
- Knowledge of Active Directory, LDAP, Oracle Internet Directory (OID), and related directory services technologies.
- Experience with architecture and design across application, database, server, desktop, and network platforms.
- Ability to coordinate and manage development and deployment activities utilizing SDLC frameworks.
- Experience designing and implementing custom workflows, approval processes, forms, and provisioning integrations.
- Development experience with Java, Python, PowerShell, JSON, REST APIs, SCIM, and SOAP-based web services.
- Strong analytical and troubleshooting skills with experience supporting complex identity and access environments.
- Experience developing technical standards, security documentation, architecture diagrams, and operational procedures.
- Excellent verbal and written communication skills, with the ability to communicate technical concepts to executive leadership and business stakeholders.
- Proven ability to lead, mentor, and develop technical teams.
- Experience with SailPoint File Access Manager (FAM).
- Experience with SailPoint Identity IQ.
- Experience with CyberArk, Delinea, BeyondTrust, or similar PAM platforms.
- Experience implementing enterprise authentication technologies including MFA, SSO, federation, and passwordless authentication.
- Experience managing cybersecurity programs in regulated industries.
