Principal Identity Management

Duties & Responsibilities

• Define, maintain, and evolve the enterprise IAM architecture, technical standards, reference patterns, and strategic roadmap aligned with organizational goals and industry best practices.
• Lead the design, implementation, and modernization of secure identity solutions supporting workforce, customer, product, cloud, privileged, application, and non-human identity use cases.
• Advance Zero Trust security principles, including least privilege, separation of duties, continuous verification, risk-based access controls, and reduction of standing administrative privileges.
• Establish and optimize identity governance processes, including identity lifecycle management, access certifications, entitlement analysis, role management, and joiner-mover-leaver automation.
• Partner collaboratively with Cybersecurity, Cloud Engineering, Product Security, Infrastructure, Enterprise Architecture, and business stakeholders to deliver secure and scalable identity solutions.
• Define IAM monitoring, logging, reporting, and metrics programs to measure access risk, identity hygiene, control effectiveness, and identity-related threat activity.
• Provide technical leadership during identity-related incidents, investigations, access-control failures, and major security decisions.
• Drive continuous improvement through automation, policy-as-code, and AI-enabled capabilities that enhance security outcomes, governance, operational efficiency, and user experience.
• Mentor engineers and technical teams by fostering an authentic, accountable, and collaborative culture focused on operational excellence and innovation.
• Produce clear technical documentation, standards, architectural guidance, and implementation patterns supporting enterprise-wide adoption.

Required Skills & Experience

• Bachelor's degree in Computer Science, Cybersecurity, Management Information Systems, or a related field; equivalent experience will be considered.
• 7+ years of experience in cybersecurity, identity engineering, cloud security, or a related technical discipline.
• 5+ years of hands-on experience designing, implementing, and operating enterprise IAM solutions.
• Expert knowledge of authentication, authorization, Single Sign-On (SSO), federation, LDAP, identity lifecycle management, privileged access management, and Zero Trust security principles.
• Demonstrated experience designing IAM architectures across hybrid, multi-cloud, SaaS, Windows, Linux, and on-premises environments.
• Strong understanding of access governance, role-based access control, entitlement management, and least-privilege security models.
• Experience troubleshooting complex authentication, authorization, federation, token, and access-policy issues.
• Ability to communicate complex identity and security risks to technical and executive stakeholders in a clear and actionable manner.
• Experience supporting identity capabilities within customer-facing products, commercial technology platforms, or enterprise-scale business environments.
• Working knowledge of artificial intelligence and the ability to responsibly leverage AI-enabled tools to improve IAM automation, governance, threat detection, analytics, and security operations.
• Strong written communication, stakeholder management, documentation, and presentation skills.
• Demonstrated ability to work in an agile, customer-centric, and highly collaborative environment.

Preferred Skills & Experience

• Hands-on experience with Microsoft Entra ID, Active Directory, LDAP directories, Conditional Access, Privileged Identity Management (PIM), federation technologies, and enterprise SSO solutions.
• Experience with Identity Governance and Administration (IGA) platforms such as SailPoint, Saviynt, One Identity, or equivalent solutions.
• Experience with Privileged Access Management (PAM) technologies including CyberArk, PAM360, or similar credential vaulting and privileged governance platforms.
• Knowledge of infrastructure-as-code and automation technologies such as Terraform, AWS CloudFormation, Microsoft Graph, PowerShell, Azure Key Vault, and policy-as-code frameworks.
• Experience securing application identities, workload identities, managed identities, containers, CI/CD pipelines, serverless services, and other non-human identities.
• Familiarity with identity-focused threat detection and defense, including token theft, consent phishing, credential abuse, privilege escalation, and lateral movement techniques.
• Experience supporting regulated environments and compliance frameworks, including ISO 27001, SOC 2, NIST, CMMC, or similar standards.
• Industry certifications such as Microsoft Certified: Identity and Access Administrator Associate, CISSP, CCSP, CIMP, or related security and identity certifications.
• Experience supporting utilities, critical infrastructure, energy, IoT, or operational technology environments is highly desirable.
• Proven track record of driving innovative identity security solutions that improve customer outcomes, operational efficiency, and enterprise resilience.