Manager Identity and Access Management - Cyber Security & TSOC

About the Role

This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. We’re seeking a strategic, technically skilled leader to shape the future of identity and access management (IAM) platforms at FirstEnergy. In this role, you’ll lead a talented team of system administrators, driving innovation in identity, authorization, and access management for both internal and external users.

The Manager of Identity & Access Management is responsible for ensuring Service Level Agreements are met, evaluating new technologies and processes for use within the five IAM pillars, and collaborating with teams across Cybersecurity, IT, HR, Transmission, Distribution, Supply Chain, and other key business stakeholders to deliver secure, scalable solutions in a hybrid environment.

Responsibilities

• Lead the Identity & Access Management (IAM) program, ensuring secure and efficient management of user identities, authentication, authorization, and access across enterprise systems.
• Develop and execute IAM strategy, roadmap, and operating model aligned with cybersecurity, business, and regulatory requirements.
• Manage a team responsible for identity lifecycle, including onboarding, transfers, role changes, and offboarding of employees and contractors in coordination with HR and IT.
• Maintain a high level of technical knowledge of supported platforms by attending webinars, conferences, and workshops; reviewing professional publications; and establishing personal networks.
• Oversee staff performance by setting objectives, goals, and priorities; tracking performance; and providing feedback. Support personal growth through development plans, mentoring, coaching, and stretch assignments.
• Manage the infrastructure, hardware, and software—including their SLAs—required to support all aspects of the IAM pillars: Identity Governance, Access Management, Privileged Access Management, Password Management, and Identity Analytics and Intelligence.
• Lead enterprise authentication services, including Multi-Factor Authentication (MFA), Single Sign-On (SSO), Conditional Access, federation services, and passwordless authentication technologies.
• Establish and enforce role-based access control (RBAC) and least privilege principles across information technology and operational technology environments. Ensure compliance with regulatory standards.
• Enforce cybersecurity, data governance, and data loss prevention policies. Monitor and enforce access controls and permissions.
• Contribute to long-term technology roadmaps, budget planning, forecasting (both labor and OTL), and resource allocation. Lead multiple projects simultaneously, ensuring timely delivery within scope and budget.
• Lead investigations and resolve IAM-related incidents. Implement corrective actions and continuous improvement measures, including updating procedures and processes. Provide off-hours support for major incidents and critical project activities as needed.
• Integrate IAM controls with cyber operations, threat detection, and insider threat monitoring capabilities.
• Support secure remote access, vendor access management, and privileged access controls for operational technology (OT) and critical infrastructure environments.
• Maintain strong segregation of duties between IAM operations, access governance, and compliance oversight functions.
• Serve as the senior IAM leader during regulatory audits, compliance assessments, and cybersecurity reviews.
• Provide input to contract negotiations for required software, hardware, and consulting to stay within budget.
• Partner with Cyber Operations, Infrastructure, HR, Compliance, Internal Audit, and business stakeholders to ensure identity controls support business objectives while reducing cyber risk.
• Champion FirstEnergy’s Core Values and Behaviors through coaching and personal example.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technology field.
• MBA is preferred.
• Minimum of 7 years of experience in cybersecurity, IT infrastructure, or application project roles, with demonstrated leadership experience.
• Deep knowledge of Identity & Access Management Technologies, including but not limited to: Microsoft Entra ID, Azure B2C, Okta, Ping Identity, SailPoint, OneIdentity, PAM Solutions, Token Management Platforms, IT Service Management Platforms, and various Certificate Lifecycle Management platforms.
• Experience with authentication protocols: SAML, OAuth, OpenID Connect.
• Experience with compliance activities such as SOX and CIP.
• Preferred certifications: CISSP, CISM, or IAM-specific certifications.

Skills

• Strong communication (both written and verbal) and interpersonal skills.
• Proven ability to collaborate across departments and influence stakeholders.
• Strategic mindset with a focus on innovation and continuous improvement.
• Ability to effectively manage a large, budgeted portfolio, forecast, and re-forecast dollars for both labor and OTL.
• Ability to work with all levels of management throughout the organization.
• Strong knowledge of core architectural design principles to achieve optimal availability and disaster recovery.
• Ability to communicate complex and technical issues to a diverse population, orally and in writing, in an easily understood, authoritative, and actionable manner.
• Demonstrated understanding of best practices in system and application management encompassing strategies, policies, principles, procedures, and standards.

Benefits

• Competitive pay plus incentive compensation.
• Company-sponsored pension plan.
• 401(k) savings plan with matching employer contribution.
• Choice of medical, prescription drug, dental, vision, and life insurance programs.
• Skills development training with tuition reimbursement.

For more details, visit www.firstenergycorp.com.

FirstEnergy supports workforce diversity. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability.