Application Security and Identity Manager

Cybersecurity Jobs; New Bremen (OH); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health/Dental/Vision/Prescription Drug

Flexible Benefits Plan

401K Retirement Savings Plan

Life and Disability Benefits

Paid Parental Leave

Paid Holidays

Paid Vacation

Tuition Reimbursement

Job summary

Crown Equipment Corporation in New Bremen, OH is seeking an application security and identity leader to strengthen identity governance, privileged access management, authentication modernization, and application security testing. This onsite role combines strategy, hands-on program ownership, and cross‑team partnership to align security with business needs.

You will own roadmaps for identity governance, PAM, and authentication modernization; lead SAST/DAST, code reviews, and remediation; and

Qualifications

• Bachelor’s degree in IT, Cybersecurity, CS, or related; at least 5 years of related experience.
• Non-degree candidates may be considered with 12+ years of related experience and a high school diploma or GED.
• Occasional travel and overnight stays, approximately 0–5%.

Responsibilities

• Lead application security and identity professionals across access governance, authentication services, and application security assessments.
• Build and execute roadmaps for identity governance, privileged access management, and authentication modernization.
• Partner with business units and IT leaders to align security with operational and business priorities.
• Establish standards and operational metrics to improve security effectiveness and efficiency.
• Oversee enterprise user lifecycle activities including provisioning, modifications, transfers, and terminations.
• Ensure periodic access certifications and segregation of duties reviews are carried out effectively.
• Lead privileged account implementations including credential vaulting and least-privilege initiatives.
• Manage multifactor authentication, single sign-on, federation, and directory service capabilities.
• Integrate security requirements into the software development lifecycle with development teams.
• Oversee SAST, DAST, code reviews, penetration testing, and remediation activities.
• Identify, prioritize, and drive remediation for application and identity-related risks.
• Evaluate new applications and technology solutions for alignment with Crown cybersecurity standards.
• Define and execute long-term identity and application security strategies.
• Create dashboards and executive reporting on access governance, privileged access, vulnerabilities, remediation progress, and program maturity.
• Present cybersecurity risks, progress against goals, and investment priorities to leadership and audit stakeholders.

Skills

Access governance

Authentication services

Application security

Identity administration

Roadmap planning

Security metrics

Executive communication

Education

Bachelor’s degree in IT/Cybersecurity/CS

High school diploma or GED (alternative)

Tools

SailPoint

Saviynt

Microsoft Entra ID

Active Directory

Job description

Crown Equipment Corporation is looking for an application security and identity leader to strengthen identity governance, privileged access management, authentication modernization, and application security testing. This onsite role in New Bremen, OH brings together security strategy, hands-on program ownership, and cross-team partnership to ensure security requirements align with business needs.

What you’ll own

• Lead application security and identity professionals covering access governance, authentication services, application security assessments, and identity administration.
• Build and execute roadmaps for identity governance, privileged access management, application security, and authentication modernization.
• Partner with business units, IT leaders, developers, and system owners to align security requirements with operational and business priorities.
• Establish standards, procedures, and operational metrics to improve security effectiveness and efficiency.
• Oversee enterprise user lifecycle activities, including provisioning, modifications, transfers, and terminations.
• Ensure periodic access certifications, segregation of duties reviews, and related access governance controls are carried out effectively.
• Lead privileged account implementations, including credential vaulting and least-privilege initiatives.
• Manage multifactor authentication, single sign-on, federation, and directory service capabilities to support both security and user experience.
• Integrate security requirements into the software development lifecycle through collaboration with development teams.
• Oversee application and software security assessments, including SAST, DAST, code reviews, penetration testing, and vulnerability remediation.
• Identify, prioritize, and drive remediation for application and identity-related risks with application owners.
• Evaluate new applications and technology solutions to ensure alignment with Crown cybersecurity standards.
• Define and execute long-term identity and application security strategies aligned to organizational risk management objectives.
• Create dashboards and executive reporting covering access governance, privileged access, application vulnerabilities, remediation progress, and program maturity.
• Present cybersecurity risks, progress against program goals, and investment priorities to leadership and audit stakeholders.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related discipline, plus at least 5 years related experience.
• Non-degree candidates may be considered with 12 or more years of related experience and a high school diploma or GED.
• Occasional travel and overnight stays, approximately 0-5%.

Preferred background

• Experience managing identity governance and administration platforms such as SailPoint or Saviynt.
• Experience with Microsoft Entra ID, Active Directory, multifactor authentication, single sign-on, privileged access management, and access governance solutions.
• Strong knowledge of secure software development lifecycle practices.
• Experience with application security testing tools, vulnerability management, and remediation programs.
• Relevant certifications such as CISSP, CISM, CRISC, identity management, or cloud security certifications.
• Leadership, communication, problem-solving, analytical, and stakeholder management skills.Knowledge of the company’s culture and values, with the ability to facilitate positive relationships between business groups.

Tools and technologies

• SailPoint
• Saviynt
• Microsoft Entra ID
• Active Directory

Benefits

• Health/Dental/Vision/Prescription Drug Plan
• Flexible Benefits Plan
• 401K Retirement Savings Plan
• Life and Disability Benefits
• Paid Parental Leave
• Paid Holidays
• Paid Vacation
• Tuition Reimbursement

Work authorization

Crown will only employ individuals who are legally authorized to work in the United States. This is not a position for which sponsorship will be provided, and individuals with temporary visas or who need sponsorship for work authorization now or in the future are not eligible for hire.