IAM / Automation Lead

We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. The posting includes: About The Role (the paragraph after "About The Role"). Responsibilities: list under "Key Responsibilities". Requirements: maybe "Education and Experience". Qualifications: maybe not separate; but we have "Education and Experience" which could be Requirements. Skills: "Competencies (Skills And Abilities)" includes subcategories; we can treat as Skills. Benefits: there is a benefits list after "We offer the following benefits...". Pay: there is salary range "$86,300-$123,300". Schedule: not mentioned; no schedule info. So we should not include Schedule section. We must not repeat job title as heading. No Job ID etc. Remove boilerplate like EEO etc. Also remove "Physical Demands/Work Environment" maybe not needed; but it's not a required section; we can drop it. Also remove "Travel as required..." etc. Also remove "Covetrus is an equal opportunity..." etc. We need to preserve all substantive information. So we need to include the About The Role paragraph, the responsibilities list, the education/experience, the competencies (skills), benefits list, pay range. We need to format:

About the role

then

...

. For responsibilities:

Responsibilities

then

• ... each bullet. We need to ensure we capture all responsibilities bullet points. They are a long paragraph with many sentences separated by em dash? Actually they are a list of responsibilities each starting with a verb and separated by em dash? Let's parse: "Serve as the North American Center of Excellence (COE) lead for IAM, partnering with global COE counterparts to align standards, tooling, and best practices — ensuring IAM responsibilities and services are delivered consistently on a global basisServe as the technical lead for IAM integration on current and future mergers, acquisitions, and divestitures (M&A)Lead the design, implementation, and operations of IAM programs including SSO, MFA, PAM, IGA, and directory servicesDeliver measurable cost savings and operational efficiencies by leading product evaluations, tools consolidations, and IAM initiatives back by data-driven financial business casesEnforce compliance with IAM policies and standards; Create procedures aligned to NIST, CIS, ISO 27001, SOX, and other applicable frameworksOwn user lifecycle management: joiner/mover/leaver (JML) execution, access provisioning, role engineering, and automated de-provisioningDrive automation and self-service capabilities across the IAM function — including automated access requests, approvals, and provisioning — to reduce manual operations and improve the end-user service experiencePartner with End User Services and the Service Desk to identify and automate away manual, ticket-based access requests, replacing them with self-service and automated workflowsDeliver automated entitlement and permission reviews across SaaS, cloud, and on-prem applicationsMature Privileged Access Management (PAM) adoption, including vault adoption, session monitoring, and just-in-time (JIT) accessPartner with Cyber and Network Operations on global user controls, including Zero Trust and SSO group management — leading identity-centric network access controls and conditional access policy developmentBuild and maintain integrations between IAM platforms, HR systems (HCM), ticketing systems, and downstream applications via SCIM, LDAP, and API connectorsDefine KPIs and metrics for access hygiene, orphaned accounts, and privilege sprawl; report SLA performance and program health to leadership quarterlyPartner across teams to advance the IAM roadmap, and support IAM vendor relationships, licensing, and contract renewals in collaboration with Cyber and ProcurementServe as a technical mentor to IAM engineers and analysts, sharing best practices in design, implementation, and troubleshootingSupport audits (SOX, SOC 2, ISO 27001) with evidence of quarterly access reviews, control narratives, and remediation tracking Drive IAM roadmap planning with a 12–18 month horizon, balancing security uplift with employee experience" It seems missing punctuation; we need to split into separate bullet points. Likely each sentence separated by a capital letter after a period? But there are missing periods. We'll need to infer bullet points. Could treat each clause separated by em dash? Might be easier: we can keep the responsibilities as a single paragraph? But rule says use
  • for any list of duties/requirements/benefits. So we need to split into items. We can approximate by splitting at each capitalized verb at start of a new responsibility after a period or after a dash? Let's manually list responsibilities based on typical IAM lead role: 1. Serve as the North American Center of Excellence (COE) lead for IAM, partnering with global COE counterparts to align standards, tooling, and best practices — ensuring IAM responsibilities and services are delivered consistently on a global basis. 2. Serve as the technical lead for IAM integration on current and future mergers, acquisitions, and divestitures (M&A). 3. Lead the design, implementation, and operations of IAM programs including SSO, MFA, PAM, IGA, and directory services. 4. Deliver measurable cost savings and operational efficiencies by leading product evaluations, tools consolidations, and IAM initiatives backed by data-driven financial business cases. 5. Enforce compliance with IAM policies and standards; create procedures aligned to NIST, CIS, ISO 27001, SOX, and other applicable frameworks. 6. Own user lifecycle management: joiner/mover/leaver (JML) execution, access provisioning, role engineering, and automated de-provisioning. 7. Drive automation and self-service capabilities across the IAM function — including automated access requests, approvals, and provisioning — to reduce manual operations and improve the end-user service experience. 8. Partner with End User Services and the Service Desk to identify and automate away manual, ticket-based access requests, replacing them with self-service and automated workflows. 9. Deliver automated entitlement and permission reviews across SaaS, cloud, and on-prem applications. 10. Mature Privileged Access Management (PAM) adoption, including vault adoption, session monitoring, and just-in-time (JIT) access. 11. Partner with Cyber and Network Operations on global user controls, including Zero Trust and SSO group management — leading identity-centric network access controls and conditional access policy development. 12. Build and maintain integrations between IAM platforms, HR systems (HCM), ticketing systems, and downstream applications via SCIM, LDAP, and API connectors. 13. Define KPIs and metrics for access hygiene, orphaned accounts, and privilege sprawl; report SLA performance and program health to leadership quarterly. 14. Partner across teams to advance the IAM roadmap, and support IAM vendor relationships, licensing, and contract renewals in collaboration with Cyber and Procurement. 15. Serve as a technical mentor to IAM engineers and analysts, sharing best practices in design, implementation, and troubleshooting. 16. Support audits (SOX, SOC 2, ISO 27001) with evidence of quarterly access reviews, control narratives, and remediation tracking. 17. Drive IAM roadmap planning with a 12–18 month horizon, balancing security uplift with employee experience. That seems comprehensive. Now Education and Experience: we need to capture as Requirements maybe. The text: "Education and Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent professional experience will be considered in lieu of a degree. 8+ years of progressive experience in information security or information technology, including 4+ years focused specifically on Identity and Access Management (IAM), with a demonstrated track record of applying automation and engineering discipline to reduce risk and manual effort3+ years serving as a senior or lead technical contributor on an IAM function or program within a mid-to-large enterprise environment (5,000+ employees), with direct accountability for security outcomes and operational metricsHands-on engineering experience designing, building, and operating enterprise IAM automation — including workflow engines, API/SCIM-based provisioning pipelines, and self-service access solutions that eliminate manual, ticket-based processesExperience integrating joiner/mover/leaver (JML) automation with an HRIS platform (e.g., Workday, SAP SuccessFactors, or similar) to drive straight-through processing and eliminate manual provisioning touchpointsExperience automating access certification/recertification campaigns at enterprise scale, reducing audit preparation time and manual reviewer effortExperience supporting compliance and security audits (SOX, SOC 2, ISO 27001, HIPAA, or equivalent), with a focus on building repeatable, automated evidence-collection and control-monitoring processesExperience managing PAM programs and vault platforms (e.g., CyberArk, BeyondTrust, Delinea) in production, including automating credential rotation, session monitoring, and just-in-time access to shrink the enterprise attack surfaceDemonstrated success building data-driven business cases that translate automation and tooling consolidation into measurable cost savings and licensing efficienciesRelevant industry certifications preferred (e.g., CISSP, CIAM, SC-300, Okta Certified Professional, or equivalent)" We need to split into list items for Requirements. Could treat each sentence as bullet. Let's parse: - Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent professional experience will be considered in lieu of a degree. - 8+ years of progressive experience in information security or information technology, including 4+ years focused specifically on Identity and Access Management (IAM), with a demonstrated track record of applying automation and engineering discipline to reduce risk and manual effort. - 3+ years serving as a senior or lead technical contributor on an IAM function or program within a mid-to-large enterprise environment (5,000+ employees), with direct accountability for security outcomes and operational metrics. - Hands-on engineering experience designing, building, and operating enterprise IAM automation — including workflow engines, API/SCIM-based provisioning pipelines, and self-service access solutions that eliminate manual, ticket-based processes. - Experience integrating joiner/mover/leaver (JML) automation with an HRIS platform (e.g., Workday, SAP SuccessFactors, or similar) to drive straight-through processing and eliminate manual provisioning touchpoints. - Experience automating access certification/recertification campaigns at enterprise scale, reducing audit preparation time and manual reviewer effort. - Experience supporting compliance and security audits (SOX, SOC 2, ISO 27001, HIPAA, or equivalent), with a focus on building repeatable, automated evidence-collection and control-monitoring processes. - Experience managing PAM programs and vault platforms (e.g., CyberArk, BeyondTrust, Delinea) in production, including automating credential rotation, session monitoring, and just-in-time access to shrink the enterprise attack surface. - Demonstrated success building data-driven business cases that translate automation and tooling consolidation into measurable cost savings and licensing efficiencies. - Relevant industry certifications preferred (e.g., CISSP, CIAM, SC-300, Okta Certified Professional, or equivalent). Now Skills: "Competencies (Skills And Abilities)" includes subcategories: Automation & Engineering, Cybersecurity Expertise, Operational Efficiency, Cost Optimization & Business Value, Leadership & Collaboration. Each has bullet-like sentences. We need to extract them as list items under Skills. Let's extract each bullet: Automation & Engineering: - Strong engineering mindset: able to design, script, and deploy automated identity workflows (SCIM, LDAP, REST/API connectors) rather than relying on manual or ticket-driven processes - Proven ability to identify high-friction, manual IAM operations and re-architect them into scalable, self-service, automated solutions - Skilled in building automated provisioning, de-provisioning, and entitlement review pipelines across SaaS, cloud, and on-prem systems - Comfortable working across scripting/automation