IAM Systems Manager

Responsibilities

• Lead the implementation, administration, and continuous optimization of Identity and Access Management (IAM) and Privileged Access Management (PAM) services.
• Direct cloud IAM strategies across public cloud environments (AWS, Azure, GCP), encompassing Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Service Control Policies (SCPs), and permissions boundaries.
• Manage access, permissions, and identity stores, implementing automated solutions to streamline just-in-time access and session management.
• Ensure systems maintain audit and privacy compliance with regulatory requirements (e.g., NERC CIP, SOX) by providing robust access reporting, entitlement mapping, and certification.
• Manage and lead a team overseeing vendor relationships, technical interfaces, and system functionality between IAM platforms and business applications.
• Partner closely with IAM engineering, AI technical leads, and enterprise architecture teams to align enterprise identity controls with emerging AI security initiatives.
• Track investigation progress and access metrics, presenting complex analyses in clear, understandable terms to audiences at all levels via dashboards (e.g., Power BI).

Qualifications

• Required Education/Experience: Bachelor's Degree and 8 years of relevant experience or Master's Degree and 6 years of relevant experience.
• PREFERRED Education/Experience: Master's Degree in Computer Science, Information Systems, Cybersecurity, or a related field and 6 years of relevant experience.
• Relevant Work Experience: 6+ years of experience in enterprise Identity and Access Management (IAM/IGA), Privileged Access Management (PAM), and identity governance, required.
• Deep understanding of cloud-native identity controls, particularly AWS IAM, Azure AD, federated identities (SAML, OAuth, OIDC), and Secrets Manager, required.
• Proven hands-on experience securing non-human identities (NHIs), service accounts, and workload identities. Exposure to AI security, agentic identity concepts, and privilege escalation risks, required.
• Proficiency with infrastructure-as-code and scripting (Terraform, GitHub, Python, PowerShell) to automate cloud infrastructure and identity configurations, required.
• Ability to clearly articulate technical issues and concepts to business users, stakeholders, and vendors, working as a proactive member of a cross-functional team, required.