Sr Manager, Identity & Access Management (IAM)

About the role

The Senior Manager of Identity & Access Management (IAM) is responsible for leading IAM engineering, operations, and modernization initiatives supporting Mattel’s enterprise identity security program. This leadership role helps drive the evolution of identity services and security capabilities across workforce identity, privileged access, cloud authentication, identity governance, and identity threat protection.

Responsibilities

• Support development and execution of IAM roadmaps, operational maturity initiatives, and modernization efforts aligned with cybersecurity strategy, business priorities, and regulatory requirements.
• Lead implementation of IAM modernization initiatives involving single sign-on (SSO), multifactor authentication (MFA), passwordless authentication, identity governance, adaptive authentication, privileged access management (PAM), and Zero Trust security principles.
• Support IAM governance processes, operational standards, KPIs, SLAs, and metrics to measure service effectiveness, operational health, and risk reduction.
• Develop operational dashboards, reporting, metrics, and documentation to support program visibility, operational maturity, and decision-making.
• Drive continuous improvement initiatives focused on automation, operational scalability, resiliency, and user experience optimization.
• Support vendor management, licensing activities, and evaluation of emerging IAM and identity security technologies.
• Oversee identity lifecycle automation initiatives, including Joiner-Mover-Leaver (JML) processes integrating Workday, Okta, Active Directory, Entra ID, and downstream enterprise applications.
• Ensure operational excellence across IAM platforms and services, including monitoring, resiliency, disaster recovery readiness, incident management, escalation handling, and business continuity planning.
• Oversee implementation and integration of identity technologies leveraging platforms such as Okta Identity Cloud, CyberArk, Okta Privileged Access, Microsoft Entra ID, and related IAM solutions.
• Partner with Cloud Engineering, DevOps, and Application teams to embed secure authentication, authorization, and identity governance capabilities into enterprise and cloud-native architectures.
• Promote engineering excellence through automation, scripting, infrastructure-as-code, workflow orchestration, and API-driven integrations.
• Drive privileged access management (PAM) operational governance initiatives supporting least privilege access, Just-in-Time (JIT) access, and Zero Trust security models.
• Support identity-related incident response, threat detection, and remediation activities leveraging identity threat detection and response (ITDR) platforms, analytics, and security monitoring capabilities.
• Collaborate with Security Operations, Infrastructure, and Engineering teams to improve identity visibility, telemetry, analytics, and threat detection capabilities across the enterprise.
• Evaluate and support adoption of emerging identity security capabilities including machine identity governance, cloud entitlement management, and intelligent identity analytics.
• Support enterprise-wide User Access Reviews (UAR), compliance reporting, audit readiness, evidence collection, and remediation activities supporting SOX, NIST CSF, GDPR, and related regulatory frameworks.
• Translate security requirements and operational risks into scalable IAM controls, governance processes, and operational procedures.
• Ensure IAM controls, processes, and documentation remain compliant, auditable, and aligned with enterprise security standards and policies.
• Partner with Internal Audit, Risk Management, Legal, and Compliance stakeholders to support governance initiatives and remediation efforts.
• Support team development, staffing planning, and technical capability growth to align with evolving identity security needs.
• Foster a culture of accountability, collaboration, innovation, operational discipline, and continuous improvement across IAM teams.
• Partner with cross-functional stakeholders to support alignment on identity security priorities, architecture decisions, and operational initiatives.
• Act as a senior escalation point for critical IAM operational issues, security incidents, and strategic initiatives.

Requirements

10+ years of experience in Identity & Access Management, cybersecurity, or enterprise security engineering within large, complex enterprise environments.

5+ years of leadership experience managing IAM architecture, engineering, operations, PAM, or cybersecurity teams in global organizations.

Deep expertise in enterprise IAM platforms and technologies, including identity federation, SSO, MFA, lifecycle management, privileged access management, and hybrid identity architectures.

Strong experience with Okta Identity Cloud capabilities including SSO, MFA, Workflows, Identity Governance, and enterprise identity integrations.

Strong experience designing and supporting enterprise identity lifecycle management solutions integrating HR systems, cloud identity providers, Active Directory/Entra ID, and downstream enterprise applications.

Strong understanding of authentication, federation, authorization, and identity protocols including SAML, OAuth, OIDC, SCIM, FIDO2, and passwordless authentication.

Strong expertise with Privileged Access Management (PAM) platforms such as CyberArk, Okta Privileged Access or equivalent technologies.

Hands-on knowledge of Active Directory, LDAP, Microsoft Entra ID (Azure AD), AWS, Azure, GCP, and hybrid cloud identity architectures.

Strong understanding of Zero Trust architecture, adaptive authentication, identity governance, Just-in-Time access, and least privilege principles.

Experience supporting identity threat detection, incident response, and remediation initiatives leveraging ITDR, SIEM, analytics, and monitoring platforms.

Strong experience with automation, scripting, and engineering practices using PowerShell, Python, REST APIs, Terraform, CI/CD pipelines, and cloud automation technologies.

Experience supporting IAM governance programs, operational dashboards, audit readiness frameworks, and compliance reporting processes.

Strong communication, stakeholder management, organizational leadership, and decision-making skills.

Demonstrated ability to build trusted cross-functional relationships, lead technical teams, manage competing priorities, and drive operational improvements within fast-paced enterprise environments.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Engineering, or related discipline, or equivalent practical experience.
• Industry certifications such as CISSP, CISM, CCSP, Okta Certified Consultant, or equivalent.
• Experience supporting global IAM programs within large enterprise or regulated environments.
• Experience with identity threat detection and response (ITDR) platforms such as CrowdStrike Identity Threat Protection, Semperis DSP, or similar technologies.
• Knowledge of endpoint privilege management and server privilege management across Windows, macOS, Linux, and cloud-native platforms.
• Experience supporting large-scale identity security modernization initiatives.
• Experience developing operational dashboards, reporting metrics, and cybersecurity maturity measurements.
• Familiarity with emerging identity security capabilities including machine identity governance, cloud entitlement management (CIEM), and intelligent identity analytics.

Skills

• Strong experience with enterprise IAM platforms and technologies.
• Hands-on knowledge of Active Directory, LDAP, Microsoft Entra ID (Azure AD), AWS, Azure, GCP, and hybrid cloud identity architectures.
• Strong understanding of Zero Trust architecture, adaptive authentication, identity governance, Just-in-Time access, and least privilege principles.
• Experience supporting identity threat detection, incident response, and remediation initiatives.
• Strong experience with automation, scripting, and engineering practices.
• Experience supporting IAM governance programs, operational dashboards, audit readiness frameworks, and compliance reporting processes.
• Strong communication, stakeholder management, organizational leadership, and decision-making skills.
• Experience with emerging identity security capabilities.

Benefits

Mattel offers competitive total pay programs, comprehensive benefits, and resources to help empower a culture where every employee can reach their full potential.

Pay

The pay range is indicative of projected hiring range, however base pay will be determined based on a candidate’s work location, skills and experience.

Schedule

Not specified.

Equal Opportunity Employer

Mattel is an equal opportunity employer and is committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.