Position listed on behalf of a partner company that manages all applications and next steps.
Responsibilities
Assess the existing IAM environment and develop a comprehensive strategy spanning products, platforms, cloud and on-premises infrastructure, and corporate applications.
Lead IAM initiatives as a core component of a broader zero-trust security strategy.
Architect and design cloud-based identity governance, access management, authentication, authorization, and directory solutions.
Implement and evolve RBAC and ABAC-based workflows supporting onboarding, access provisioning, changes, reviews, and identity lifecycle management.
Partner with engineering and IT teams to ensure appropriately scoped privileges and risk-based access controls.
Serve as a senior technical and strategic advisor to security, IT, engineering, and cross-functional stakeholders.
Establish KPIs, KCIs, and KRIs providing visibility into IAM control effectiveness, operational health, and security risk.
Design and implement IAM solutions supporting regulatory and compliance requirements, including SOX, GxP, and other standards.
Lead large-scale IAM programs from strategy and architecture through implementation, deployment, optimization, and continuous improvement.
Evaluate emerging identity technologies and continuously improve IAM capabilities, processes, and security controls.
Translate business requirements into technology-agnostic IAM solutions.
Requirements
Bachelor's or Master's degree in Computer Science, Information Security, or related technical field.
7+ years of experience in Identity & Access Management and related information security disciplines.
Proven success leading enterprise-scale IAM programs in cloud-first and hybrid environments.
Deep expertise with enterprise identity administration and governance platforms.
Expert knowledge of adaptive authentication and modern identity protocols: OAuth, OpenID Connect, SAML.
Extensive experience with Active Directory, Okta, Microsoft Entra ID/Azure AD, Duo, or equivalent.
Strong experience with privileged access management platforms such as CyberArk, Delinea, or comparable.
Understanding of identity governance for human and non-human identities, including service accounts, workload identities, CI/CD credentials, and machine identities.
Proficiency in at least one programming language such as Java, C++, or Python.
Working knowledge of UNIX/Linux, macOS, and Windows operating systems, and database management systems.
Strong understanding of security principles, risk management, zero-trust architecture, and regulatory requirements.
Excellent communication, stakeholder management, and leadership skills.
Relevant security certifications such as CISSP, OSCP, or GWAPT are highly desirable.
Conditions
Estimated annual base salary of $180,600–$212,900 USD, depending on skills, experience, and qualifications.
Eligibility for an annual performance bonus.
Equity compensation.
Comprehensive employee benefits package.
Remote work opportunity across the United States, with Salt Lake City, Utah considered an ideal home base.