Senior Manager, Identity and Access Management

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, implement, and enhance Delinea’s IAM program and architecture throughout the organization.

• Spearhead the design and execution of the IAM program and reference architecture, focusing on workforce identity, application access, privileged access, and cloud entitlements.

• Build and manage a team of IAM engineers, establishing performance objectives and providing mentorship and support.

• Oversee the joiner-mover-leaver lifecycle, which includes automated provisioning and deprovisioning, role-based access design, and integrations with HR, directories, and applications.

• Manage Entra ID, Active Directory, and Okta identity platforms and directories, covering SSO, MFA, conditional access, federation, and provisioning.

• Take responsibility for privileged and infrastructure access, including AWS IAM, cloud entitlement management, and StrongDM-brokered access to production servers, databases, and Kubernetes environments.

• Act as a subject matter expert in IAM best practices, Zero Trust, passwordless authentication, and identity threat detection and response.

• Foster cross-organizational relationships to address access risks and capture lessons learned.

• Ensure IAM compliance with SOC 2, ISO 27001, PCI DSS, and FedRAMP standards.

• Provide evidence of access control and periodic access certifications while serving as the identity point of contact for auditors and assessors.

• Establish metrics for IAM program effectiveness and report regularly to executive leadership.

• Report directly to the Sr. Director of Enterprise Security.

⛳️ Requirements

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field, or equivalent practical experience.

• 8+ years of practical experience in identity and access management across directory services, authentication, and access governance.

• 4+ years of experience in building and leading IAM or security engineering teams, as well as nurturing junior talent.

• Extensive hands-on experience with administering Entra ID and Active Directory, including hybrid identity and directory synchronization, conditional access, group policy, and domain services.

• Practical experience with Okta or a similar IDaaS platform, covering SSO and MFA policy design, lifecycle management, and application integrations.

• Experience managing AWS IAM at scale, including roles, policies, permission boundaries, IAM Identity Center, and least-privilege reviews of cloud entitlements.

• Familiarity with StrongDM or modern privileged and infrastructure access tools, including brokered and audited access to servers, databases, and Kubernetes.

• Working knowledge of SAML, OIDC, OAuth 2.0, SCIM, identity governance, and access certification processes.

• Proficient in Python, Go, PowerShell, or another scripting/programming language.

• Excellent verbal and written communication skills, along with strong analytical and interpersonal abilities.

• One or more certifications such as CISSP, SC-300, Okta Certified Professional or Administrator, AWS Certified Security – Specialty, or IDPro CIDPRO preferred.

• Experience in high-security environments subject to FedRAMP or ITAR is preferred.

• Familiarity with privileged access management and secrets management solutions is preferred.

• Experience working with AI and LLM-based agents and tools in an identity context is preferred.

• Must reside in the US.

• Candidates must complete a thorough criminal background check, verification of education, and employment verification upon receiving a conditional offer.

🏝️ Benefits

• Competitive salaries.

• Meaningful bonus program.

• Healthcare insurance.

• Pension/retirement matching.

• Comprehensive life insurance.

• Employee assistance program.

• Time off plans.

• Paid company holidays.

• Equity.

• Performance-based bonus plans or role-based incentive programs.

• Opportunities for career progression.