Manager of Identity Access Management

What You’ll Do

• Own, evolve, and streamline the full identity platform stack — Okta, Microsoft Entra ID, AWS IAM Identity Center, Saviynt, and CyberArk — ensuring it is reliable, secure, and aligned to our zero-trust architecture
• Drive zero-trust and least-privilege access through RBAC enforcement, Separation of Duties controls, and continuous access certification campaigns across all studio environments
• Build and operate end-to-end Joiner-Mover-Leaver (JML) automation so that access follows people, not tickets — provisioning before Day 1, terminations propagated to all systems in under 15 minutes
• Partner with Information Security to implement AI-assisted anomaly detection through Okta Identity Threat Protection and Saviynt analytics, closing the loop from detection to remediation
• Lead the Non-Employee Identity Program — contractors, vendors, and studio partners managed through a governed onboarding portal with scoped access, defined expiry, and quarterly re-certification
• Lead, coach, and grow a team of identity engineers — setting high standards for documentation, runbook hygiene, and platform reliability

What You’ll Bring

• 7+ years of Identity & Access Management experience, with at least 2 years in a leadership or management role
• Deep hands-on expertise with Okta Identity Cloud — SSO federation, Workflows, Universal Directory, and adaptive MFA
• Proven experience with Microsoft Entra ID — user/group lifecycle, Entra ID Connect sync, and Conditional Access policies
• Strong working knowledge of AWS IAM and AWS IAM Identity Center — permission set design, account federation, and ephemeral credential patterns
• Experience implementing IGA solutions (Saviynt, SailPoint, or equivalent) — lifecycle automation, access certifications, and SoD enforcement
• Solid understanding of identity protocols: SAML 2.0, OIDC, OAuth 2.0, SCIM, and LDAP/AD
• Experience managing identity programs across multi-studio, multi-tenant, or multi-subsidiary environments
• Track record of building and developing high-performing technical teams
• Passionate about automation-first operations and security-by-design principles

Compensation

The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package.

Pay Range: $159,800 USD - $266,200 USD

Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility.

Benefits and programs may include:

• Health & Wellness
• Time Off to Recharge
• Financial Well-being
• Life & Family Support
• Volunteer and Community Initiatives
• Learning & Development
• Exclusive Perks