IAM Manager

*Note this role is not with Trace3 but a trusted client*

Job Responsibilities

• Act as the primary advocate and specialist for the company's business and technical Identity Governance and Administration (IGA) programs.
• Lead the identity management tools and oversee a team of administrators, analysts, and engineers focused on identity systems and services.
• Collaborate with business and application teams to design and implement optimal authentication and authorization security practices.
• Gather and document IGA requirements from various departments, including business, legal, compliance, human resources, and IT.
• Contribute to the architecture of an enterprise IGA framework that incorporates both on-premise and cloud access control and management.
• Execute transition projects for existing systems and processes, balancing security and efficiency for privileged, current, and new users.
• Work with HR, other business units, and IT to implement automated and improved onboarding and termination procedures for role-based and privileged access control.
• Automate account permission reviews and reporting for compliance purposes.
• Identify privileged users and administrators, privileged service accounts, and groups, and develop and implement account control and onboarding within the privileged access management (PAM) system.
• Participate in audits, compliance, and regulatory reviews as required.
• Develop security processes and procedures, and maintain service-level agreements (SLAs) to ensure effective security controls.
• Research, evaluate, and recommend security-related hardware and software, including developing business cases for security investments.
• Provide support and analysis for IGA during and after security incidents.
• Lead and participate in various security projects and initiatives.

Job Specific Knowledge

• Comprehensive technical knowledge and experience with Microsoft Active Directory, Azure Active Directory, and related technologies, including design, administration, implementation, remediation, support, and improvement projects.
• Advanced understanding of enterprise identity and access management (IAM) systems, privilege access management (PAM), or privilege identity management (PIM) systems.
• Demonstrable experience in Agile IT Project Management, particularly with IAM and IGA enterprise projects.
• Strong expertise in enterprise account and privilege management systems, including IAM, IGA, and PAM technologies.
• Familiarity with single sign-on (SSO) and multi-factor authentication (MFA) tools like Ping or DUO, in both on-premise and cloud environments.
• Technical skills and experience with new Cloud Access Security Broker (CASB) systems and their integrations.
• Experience with common information security management frameworks, such as NIST CSF, Mitre ATT&CK, and ISO.
• Proficiency in developing and documenting security architecture and plans, including strategic, tactical, and project plans.
• Deep understanding of the modern and evolving cyber threat landscape.
• Expertise in indirectly managing diverse teams to achieve rapid results in complex projects.
• Ability to work flexible hours, including after hours, weekends, and holidays as needed.
• Excellent written and oral communication skills.
• Strong teamwork, team mentoring, and participation skills.

Education, Licensure, and Experience

• Bachelor's degree in information systems, information security, information assurance, computer science, or equivalent experience.
• Preferred certifications include CISSP, PMP, Security , CEH, ISACA, or SANS.
• Minimum of 5 years of experience leading complex projects, preferably related to system administration, Active Directory, or identity management.
• 10 years of advanced IT systems administration, security, business, or system analysis experience.