Travelers

Insures homes, cars and businesses through agents

Director, Identity and Access Management

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeHybrid

About the Job

Requirements

A bachelor's degree in Computer Science, a similar degree, or equivalent work experience is required.
At least 5 years of experience in Information Technology Security Engineering or Software Engineering is required.
At least 10 years of experience in Identity and Access Management, at least 5 years of hands-on SailPoint experience with IdentityNow and/or IdentityIQ, and at least 3 years in a leadership role.
A SailPoint Certified IdentityNow Engineer or IdentityIQ Architect certification is desired for the ideal candidate.
Deep expertise in identity and access management concepts, including Identity Governance and Administration, Single Sign-On and federation, multi-factor authentication, role-based access control, attribute-based access control, and Zero Trust.
Experience integrating SailPoint with enterprise directories such as Active Directory, Lightweight Directory Access Protocol, Azure Active Directory/Entra ID, and Salesforce.
Strong knowledge of identity protocols, including Security Assertion Markup Language, OAuth 2.0, OpenID Connect, Lightweight Directory Access Protocol, and System for Cross-domain Identity Management.
A proven track record of managing cross-functional teams and enterprise-scale programs.
Broad knowledge of cloud computing and automation concepts.
Expert knowledge of cybersecurity privacy principles, cyber threats and vulnerabilities, cyber defense, and information security policies, procedures, and regulations.
Ability to apply cybersecurity and privacy principles, including confidentiality, integrity, availability, and zero-trust architecture, to organizational needs, with expertise in identity and access management, authentication, authorization, and least privilege.
Experience leading and managing complex projects and managing multiple priorities simultaneously.

Responsibilities

Architect, implement, and maintain SailPoint IdentityNow solutions at enterprise scale.
Oversee connector development and integration with SaaS applications and other sources and applications.
Maintain and support lifecycle management automation, including joiner, mover, and leaver workflows.
Lead role engineering, role mining, and role-based access control design initiatives.
Lead access certification and recertification campaigns to support audit readiness.
Collaborate with Internal Audit and Risk teams to address access control findings.
Own the identity and access management support model, including incident response, escalation paths, and service-level agreement management for identity-related issues.
Establish and maintain a tiered support structure (L1/L2/L3) for SailPoint platform issues.
Lead root cause analysis for critical identity and access management incidents and drive permanent remediation.
Manage the on-call rotation and ensure 24/7 availability for critical identity services.
Oversee patch management, upgrades, and platform health monitoring for SailPoint environments.
Develop and maintain runbooks, knowledge base articles, and operational documentation.
Monitor and report on identity and access management key performance indicators, key risk indicators, and access anomalies.
Oversee project delivery using Agile/Scrum methodologies for identity and access management initiatives.
Manage team capacity, budget planning, and resource allocation.
Direct the strategic development of platforms, including assessing efficiency, overall operations, and potential enhancements.
Perform other duties as assigned.

Desired Qualifications

Strategic thinking with strong operational execution.
Excellent written and verbal communication skills and the ability to interact with all levels of the organization.

Who Are We?

Taking care of our customers, our communities and each other. That’s the Travelers Promise. By honoring this commitment, we have maintained our reputation as one of the best property casualty insurers in the industry for over 170 years. Join us to discover a culture that is rooted in innovation and thrives on collaboration. Imagine loving what you do and where you do it.

Job Category

Technology

Compensation Overview

The annual base salary range provided for this position is a nationwide market range and represents a broad range of salaries for this role across the country. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. As part of our comprehensive compensation and benefits program, employees are also eligible for performance-based cash incentive awards.

Salary Range

$142,900.00 - $235,800.00

Target Openings

What Is the Opportunity?

At Travelers, our Cybersecurity Engineering teams are responsible for the overall implementation and management of strategic platforms that provide oversight, process management, protection and enablement of security control processes and allow for an effective Cybersecurity practice. As a Director, Cybersecurity Engineering, you will manage cybersecurity professionals who are responsible for the successful configuration, enhancement, automation, and implementation across multiple cybersecurity platforms. You are the point of contact for Cybersecurity and business leaders. You will ensure alignment with goals and objectives and provide technical guidance and leadership to your teams.

Applicants must be authorized to work for ANY employer in the US. The company does not sponsor/support H-1B petitions, TN, or Forms I-983/STEM OPT, this this role.

What Will You Do?

Architect, implement, and maintain SailPoint IdentityNow solutions at enterprise scale
Oversee connector development, integration with SaaS applications and other sources/applications.
Maintain and support lifecycle management automation including joiner, mover, and leaver (JML) workflows
Lead role engineering, role mining, and role-based access control (RBAC) design initiatives
Lead access certification and recertification campaigns to support audit readiness
Collaborate with Internal Audit and Risk teams to address access control findings
Own the IAM support model including incident response, escalation paths, and SLA management for identity-related issues
Establish and maintain a tiered support structure (L1/L2/L3) for SailPoint platform issues
Lead root cause analysis (RCA) for critical IAM incidents and drive permanent remediation
Manage on-call rotation and ensure 24/7 platform availability for critical identity services
Oversee patch management, upgrades, and platform health monitoring for SailPoint environments
Develop and maintain runbooks, knowledge base articles, and operational documentation
Monitor and report on IAM KPIs, KRIs, and access anomalies
Oversee project delivery using Agile/Scrum methodologies for IAM initiatives
Manage team capacity, budget planning, and resource allocation
Responsible for the strategic development of platforms which includes assessing efficiency, overall operations, and potential enhancements.
Perform other duties as assigned.

What Will Our Ideal Candidate Have?

Degree in computer science, Information Technology, Cybersecurity, or a related field.
SailPoint Certified IdentityNow Engineer or IdentityIQ Architect certification

10+ years of experience in Identity and Access Management, 5+ years of hands-on SailPoint experience (IdentityNow and/or IdentityIQ), 3+ years in a leadership role.
Deep expertise in IAM concepts: IGA, SSO/Federation, MFA, RBAC, ABAC, Zero Trust
Experience integrating SailPoint with enterprise directories (Active Directory, LDAP, Azure AD/Entra ID, Salesforce etc)
Strong knowledge of identity protocols: SAML, OAuth 2.0, OpenID Connect, LDAP, SCIM
Proven track record managing cross-functional teams and enterprise-scale programs
Broad knowledge of Cloud computing and automation concepts.
Expert knowledge of cybersecurity privacy principles, cyber threats and vulnerabilities, and cyber defense and information security policies, procedures, and regulations.
Ability to apply cybersecurity and privacy principles (confidentiality, integrity, availability and zero trust architecture) to organizational needs, with expertise in Identity & Access Management, including authentication, authorization, and the principle of least privilege.
Strategic thinking with strong operational execution
Experience leading and managing complex projects with the ability to manage multiple priorities simultaneously.
Excellent written and verbal communication skills with the ability to interact with all levels of the organization.

What is a Must Have?

Bachelor’s degree in Computer Science, similar degree, or its equivalent in work experience.
5 years of experience in Information Technology Security Engineering or Software engineering.

What Is in It for You?

Health Insurance: Employees and their eligible family members – including spouses, domestic partners, and children – are eligible for coverage from the first day of employment.
Retirement: Travelers matches your 401(k) contributions dollar-for-dollar up to your first 5% of eligible pay, subject to an annual maximum. If you have student loan debt, you can enroll in the Paying it Forward Savings Program. When you make a payment toward your student loan, Travelers will make an annual contribution into your 401(k) account. You are also eligible for a Pension Plan that is 100% funded by Travelers.
Paid Time Off: Start your career at Travelers with a minimum of 20 days Paid Time Off annually, plus nine paid company Holidays.
Wellness Program: The Travelers wellness program is comprised of tools, discounts and resources that empower you to achieve your wellness goals and caregiving needs. In addition, our mental health program provides access to free professional counseling services, health coaching and other resources to support your daily life needs.
Volunteer Encouragement: We have a deep commitment to the communities we serve and encourage our employees to get involved. Travelers has a Matching Gift and Volunteer Rewards program that enables you to give back to the charity of your choice.

Employment Practices

Travelers is an equal opportunity employer. We value the unique abilities and talents each individual brings to our organization and recognize that we benefit in numerous ways from our differences.

In accordance with local law, candidates seeking employment in Colorado are not required to disclose dates of attendance at or graduation from educational institutions.

If you are a candidate and have specific questions regarding the physical requirements of this role, please send us an email so we may assist you.

Travelers reserves the right to fill this position at a level above or below the level included in this posting.

To learn more about our comprehensive benefit programs please visit http://careers.travelers.com/life-at-travelers/benefits/.

About the Company

Travelers

Insures homes, cars and businesses through agents

Travelers insures businesses, homeowners and drivers, mostly in the United States, with smaller operations in the United Kingdom and Ireland. Its Business Insurance unit covers companies of every size with policies such as workers' compensation, commercial property and commercial auto, while Bond & Specialty Insurance covers executive liability, cyber and fidelity risks. Personal Insurance protects individuals' homes, cars and valuables. Travelers sells mostly through independent agents and brokers, and it earns money from premiums and from investing the reserves it holds to pay future claims. The company traces its roots to 1853 and is headquartered in New York City.

Company size: 10,001+
Company stage: IPO
Headquarters: New York City, New York
Founded: 1853

Recently Posted Jobs

Explore more opportunities at Travelers

See more jobs