Senior Manager, Identity and Access Management

About the company

The company is the identity security platform that continuously controls what AI agents, humans and machines can do and for how long. It extends privileged access management from the point of access to the moment of action, using just-in-time authorization to reduce standing privilege across on-premises, multi-cloud and short-lived infrastructure, without adding friction for legitimate users. The company provides visibility across every identity type, scores the risk each one carries, and preserves the context behind access decisions, making them auditable and defensible. It supports both static and ephemeral access, letting teams apply Zero Standing Privilege where risk demands it without replacing existing infrastructure.

Summary

The company’s Cybersecurity organization is seeking an experienced Senior Manager, Identity and Access Management to build, implement, and mature the company’s IAM program and architecture across the enterprise. The ideal candidate will be highly collaborative, working alongside Security Engineering and Operations, IT, and Product Engineering teams to define how identity is governed, provisioned, and secured at the company. The Senior Manager, IAM will embrace the opportunity to work across diverse platforms and a variety of tools, including Entra ID, Active Directory, AWS IAM, Okta, and StrongDM, and will play a key role as we continually improve our identity capabilities over time. They’ll lead a small team of talented and dedicated IAM engineers to achieve our security objectives.

This is a challenging and impactful role with the opportunity to work with both internal and external stakeholders. The candidate must be able to balance the right level of access with business objectives, communicate clearly with technical as well as non-technical audiences, and work to creatively solve complex problems.

This role reports to the Sr. Director of Enterprise Security, is based in the US, and is fully remote.

What You'll Do

• Lead the design and implementation of the company’s IAM program and reference architecture, spanning workforce identity, application access, privileged access, and cloud entitlements. Provide technical expertise and shape the procedural and programmatic structure of our identity capabilities.

• Build and lead a team of IAM engineers, setting expectations on performance, goals, and objectives, and providing mentorship and guidance to team members.

• Own the joiner-mover-leaver lifecycle, including automated provisioning and deprovisioning, role-based access design, and integration between HR, directory, and application systems.

• Own the company’s core identity platforms and directories, including Entra ID, Active Directory, and Okta, covering single sign-on, multi-factor authentication, conditional access, and federation and provisioning standards such as SAML, OIDC, and SCIM.

• Own privileged and infrastructure access, including AWS IAM roles, policies, and permission boundaries, cloud entitlement management, and StrongDM-brokered access to production servers, databases, and Kubernetes environments.

• Act as a subject matter expert on identity and access management best practices, standards, and emerging approaches such as Zero Trust, passwordless authentication, and identity threat detection and response.

• Build relationships across organizational boundaries to ensure that identified access risks are remediated and lessons learned are captured.

• Ensure that the IAM program meets the company’s compliance and customer commitments, such as SOC 2, ISO 27001, PCI DSS, and FedRAMP, including access control evidence and periodic access certifications, and act as the identity point of contact for auditors and assessors.

• Communicate effectively with stakeholders at all levels, translating technical findings into actionable insights and recommendations for both technical and non-technical audiences.

• Work with Cybersecurity Program Management to define the metrics that measure program effectiveness, including provisioning and deprovisioning timeliness, MFA and SSO coverage, privileged account inventory, orphaned and stale account counts, and access certification completion, and report on them to executive leadership on a regular cadence.

What You'll Bring

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field, or equivalent practical experience.

• 8+ years of demonstrated, hands-on identity and access management experience across directory services, authentication, and access governance, with 4+ years of that time building and leading IAM or security engineering teams and developing junior talent.

• Deep hands-on experience administering Entra ID and Active Directory, including hybrid identity and directory synchronization, conditional access, group policy, and domain services.

• Hands-on experience with Okta or a comparable IDaaS platform, including SSO and MFA policy design, lifecycle management, and application integrations.

• Experience with AWS IAM at scale, including roles, policies, permission boundaries, IAM Identity Center, and least-privilege review of cloud entitlements.

• Experience with modern privileged and infrastructure access tooling such as StrongDM, including brokered and audited access to servers, databases, and Kubernetes.

• Working knowledge of federation and provisioning standards, including SAML, OIDC, OAuth 2.0, and SCIM, and of identity governance and access certification processes.

• Proficiency in at least one scripting or programming language, such as Python, Go, or PowerShell, for identity automation, integration, and reporting.

• Strong verbal and written communication, analytical and people skills.

We'd Love to See

• One or more of the following certifications: CISSP, SC-300 (Microsoft Identity and Access Administrator), Okta Certified Professional or Administrator, AWS Certified Security – Specialty, IDPro CIDPRO, or equivalent.

• Experience working with high-security environments subject to regulations such as FedRAMP or ITAR.

• Experience deploying or operating privileged access management and secrets management solutions, including the company products or comparable platforms.

• Experience using AI and LLM-based agents and tooling in an identity context to enhance access review, entitlement analysis, and identity reporting.

Why work at the company?

• We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities.

• We invest in people who are smart, self-motivated, and collaborative.

• What we offer in return is meaningful work, a culture of innovation and great career progression.

At the company, our core values are STRONG and guide our behaviors and success:

• Spirited - We bring energy and passion to everything we do

• Trust - We act with integrity and deliver on our commitments

• Respect - We listen, value different perspectives, and work as one team

• Ownership - We take initiative and follow through

• Nimble - We adapt quickly in a fast-changing environment

• Global - We embrace diverse people and ideas to drive better outcomes

We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.

We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.

The company is an Equal Opportunity and Affirmative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.