Role:

As an Identity Engineering Lead, you will be responsible for evolving a complicated global hybrid environment to a cloud first environment by advancing the design and implementing modern comprehensive Identity and Access Management (IAM) and Privileged Access Management (PAM) strategies adhering to company standards and requirements.

Responsibilities:

• Your overall strategy will include modernization, zero-trust, and simplification where possible. Your role will include oversight and support for ongoing migration activity of existing AD Infrastructure to Cloud with focus to streamline and evolve current environments and processes.

• Evolve and maintain the IAM and PAM frameworks, ensuring they align with industry best practices and regulatory requirements.

• Lead the design and implementation of identity solutions that support both on-premises and cloud environments.

• Collaborate with IT and security teams to integrate identity management solutions with existing systems and applications.

• Manage the full lifecycle of digital identities, including provisioning, de-provisioning, and access reviews.

• Define and enforce access policies and procedures, including least privilege and separation of duties principles.

• Oversee the deployment of PAM tools and technologies, ensuring secure management of privileged accounts.

• Conduct regular audits and compliance checks related to identity and access controls.

• Provide leadership and guidance to the identity engineering team, setting clear goals and performance metrics.

• Stay abreast of emerging security threats and technologies, adjusting strategies as necessary.

Requirements:

Qualifications:

• Bachelor’s degree in computer science, Information Security, or a related field.

• Minimum of 10 years’ experience in identity management and security, with at least 2 years in a leadership role.

• Strong understanding of IAM and PAM concepts, methodologies, and technologies.

• Experience with identity management platforms such as Okta, SailPoint, or Microsoft Azure Active Directory.

• Knowledge of scripting and automation tools for efficient identity management.

• Excellent problem-solving skills and the ability to work under pressure.

• Strong communication and interpersonal skills, with the ability to lead cross-functional teams.

Preferred Qualifications:

• Relevant certifications such as CISSP, CISM, or IAM-specific credentials.

• Experience with regulatory compliance frameworks like GDPR, HIPAA, SOC or SOX.

• Background in supporting an Entra environment with knowledge of Entra roles, Entitlements Management, Access Reviews, Privileged Identity Management (PIM), LAPS, and any background with Defender for Cloud/Endpoint is beneficial.

• Ability to support development of architecture reference model and technical design.