Cyber Operate Senior Manager- Identity

Deloitte France; United States; On-site; USD 163,000 - 322,000; Full time

Job summary

Deloitte seeks an AVP, IAM Managed Services to lead delivery and growth across the IAM stack, including IGA, PAM, and Directory Services. You will drive automation, governance, and expansions while managing onshore and offshore teams for a major client portfolio.

The role requires 10+ years in IAM, MSP leadership experience, and the ability to travel about 50% with a focus on delivery excellence and client outcomes.

Qualifications

• 10+ years in Identity and Access Management with leadership in a managed services or IT operations role.
• Experience implementing or operating identity platforms such as SailPoint, Saviynt, One Identity, CyberArk, BeyondTrust, Okta, Ping Identity, or Microsoft Entra ID.
• Bachelor's degree in a STEM or security-related field.
• Willingness to travel ~50% and potential immigration sponsorship.

Responsibilities

• Lead end-to-end IAM managed services delivery across IGA, PAM, Access Management, and Directory Services.
• Own outcomes for onshore/offshore delivery, SLAs, KPIs, service quality, staffing, and client satisfaction.
• Act as primary delivery relationship owner, guiding governance, reporting, incident response, risk mitigation, and financials.
• Drive automation and tooling modernization to improve identity-management practices across cloud, hybrid, and on‑prem environments.
• Lead account expansions, renewals, RFPs/RFIs, scoping, staffing, delivery approaches, and pricing.
• Mentor managers, leads, and engineers with career guidance and performance development.

Skills

IAM leadership

Managed services

SailPoint

Okta

CyberArk

One Identity

PAM

SSO/MFA

Directory Services

Delivery leadership

Education

Bachelor's degree (CS/IS/InfoSec or related)

Tools

ServiceNow

Remedy

Job description

Deloitte helps organizations protect and grow their business by delivering risk management solutions across critical domains, including cyber. Within that environment, this role leads the delivery, growth, and continuous improvement of large-scale Identity and Access Management (IAM) managed services engagements. The Associate Vice President (AVP), IAM Managed Services will own delivery outcomes across the full IAM stack, including Identity Governance and Administration (IGA), Privileged Access Management (PAM), Access Management (SSO/MFA), and Directory Services, while also driving innovation, automation, account growth, and renewals for a large, complex client portfolio.

Recruiting for this role ends on 12/31/2026.

Work you'll do

• Lead end-to-end delivery of Identity and Access Management managed services across Identity Governance and Administration, Privileged Access Management, Access Management, and Directory Services.
• Own service outcomes for blended onshore and offshore delivery teams, including service-level agreement and key performance indicator performance, service quality, staffing, and client satisfaction.
• Serve as the primary delivery relationship owner for assigned accounts; lead executive governance, status reporting, incident response, risk mitigation, and financial performance management.
• Drive service improvement through automation, tooling modernization, root-cause remediation, and adoption of identity-management practices across cloud, hybrid, and on-premises environments.
• Lead account expansion, contract renewals, and Requests for Proposal and Requests for Information activities, including solution scoping, staffing models, delivery approaches, and pricing.
• Mentor managers, leads, and engineers through career guidance, coaching, and performance management.

The team

Deloitte's Cyber Operate team manages clients' critical cyber assets as a fully managed service or in partnership with client teams, delivering skilled talent, market-tested technologies, and proven processes across the identity lifecycle. Our Digital Identity managed services combine Identity Governance and Administration, Access Management, and Privileged Access Management into a single, turnkey offering that helps clients reduce risk, accelerate maturity, and operate with confidence at scale. This work helps clients strengthen service performance while operating more efficiently at scale.

Qualifications

Required:

• 10+ years of experience in Identity and Access Management, including 5+ years in a managed services or information technology operations leadership role.
• Experience implementing or operating one or more identity platforms, including SailPoint, Saviynt, One Identity, CyberArk, BeyondTrust, Okta, Ping Identity, or Microsoft Entra ID.
• Bachelor's degree in computer science, information systems, information security, mathematics, decision sciences, risk management, mechanical engineering, electrical engineering, or industrial engineering
• Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

Preferred:

• One or more certifications, including Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), SailPoint, CyberArk, or Okta certifications.
• Experience deploying or managing Identity and Access Management solutions in Amazon Web Services, Microsoft Azure, or Google Cloud Platform environments.
• Experience defining or refining service-level agreements and operational-level agreements, and using information technology service management tools such as ServiceNow or Remedy.
• Experience using development and operations (DevOps) practices, automation or orchestration tools, identity analytics, or Privileged Access Management disaster-recovery processes.
• Experience delivering consulting or professional services to clients in life sciences, manufacturing, energy, or engineering and construction, including account expansion, renewals, or proposal-response activities.
• Experience leading Identity and Access Management managed services across at least two domains—Identity Governance and Administration, Privileged Access Management, Access Management/Single Sign-On/Multifactor Authentication, or Directory Services—and leading teams of 30+ team members.

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is 163,400 to 322,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.