Lead - Identity and Access Management

The Identity and Access Management (IAM) Engineer will be responsible for designing, implementing, and managing IAM solutions for a secure, efficient, and scalable identity environment. This position focuses managing system and user identities and privileged access for users across diverse platforms like on Windows, Linux, and Mac endpoints. The successful candidate will collaborate across teams to develop IAM best practices, protect sensitive data, and align IAM processes with security policies and business requirements.

Experience:

7+ years of experience in IAM or security engineering with hands-on experience in multi-OS environments (Windows, Linux, Mac). In-depth knowledge of IAM protocols and standards (e.g., LDAP, SAML, OAuth, SCIM)  Proficiency in managing privileged access tools (e.g., CyberArk, BeyondTrust) and directory services (Active Directory, Azure AD)  Strong scripting/automation skills (e.g., Python, PowerShell) for IAM process automation and efficiency.  Certifications (preferred): CISSP, CISM, GIAC (GSNA, GSEC), or equivalent security certifications.

Develop and lead the IAM roadmap, aligning identity and access initiatives with security policies, compliance requirements, and business needs.Manage the full lifecycle of system identities, focusing on provisioning, access modification, deprovisioning, and audits across multi-platform environments (Windows, Linux, Mac).  Implement, configure, and manage privileged access management (PAM) solutions, securing and monitoring privileged accounts to safeguard critical resources.  Establish identity and access security measures for endpoints, ensuring IAM standards are met on all devices, including desktops, laptops, and mobile devices.  Address unique identity challenges across Windows, Linux, and Mac, ensuring cohesive access controls and consistent IAM processes.  Design automated workflows for provisioning, deprovisioning, and access reviews to enhance IAM efficiency and minimize access-related risks.

Conduct regular risk assessments, ensuring compliance with regulatory frameworks (e.g., NIST, ISO 27001), and identifying potential IAM risks with mitigation recommendations.Lead incident response for IAM-related issues, performing root cause analysis, and implementing solutions to improve IAM processes.  Mentor junior team members, and work closely with IT, Security, Compliance, and other cross-functional teams to drive a cohesive approach to IAM and data protection.