Position Responsibilities:　

• Lead the global delivery and evolution of enterprise identity services, set IAM strategic direction, execute projects, optimize services, and collaborate with IT and business units to align with objectives and ensure compliance
• Provide accountability for user security and entitlement reviews, interface with internal clients and external vendors, and structure a governance model for people, processes, and technology, aligned with the principle of least privilege access to optimize IAM operational efficiency
• Administer the onboarding and offboarding of users and systems with automated processes, enforce strong authentication and authorization workflows with OKTA for employees and customers, and monitor controls to correct situations that could lead to compliance deficiencies in user provisioning
• Formulate and define the system’s scope based on user needs and an understanding of operational and industry requirements by participating in solution architecture design and leading security efforts with the integration of identity and access management solutions
• Manage an on-call rotation to provide operational support as needed, stay informed about current security threats using CIS Benchmarks, and design IAM architecture to mitigate threats where possible
• Provide performance reports from supported systems, including RBAC and CISA, to report on operational performance metrics, identify issues and trends, and ensure delivery is effective based on contract terms
• Other duties as assigned

Required Education and Experience:

• Bachelor’s Degree and 2 to 4 years of related experience or High School Diploma/General Education Degree (GED) and 5 to 7 plus years of specific experience
• 3 plus years of experience in Identity & Access governance and compliance, with proficiency in designing, supporting, and administering technologies such as IDaaS, single sign-on, directory services (Active Directory, LDAP), user authentication (MFA, passwordless), identity management, privileged identity management, and a basic understanding of PKI and certificates/key management

Preferred Education and Experience:

• Bachelor’s Degree
• Information systems certifications such CISSP or CISA (or willingness to achieve)
• Experience in driving RBAC design, working with OKTA and CyberArk, and handling IAM protocols (SAML, OAuth/OIDC, RADIUS, Kerberos) across MacOS, Linux, and Windows platforms