Cyber Security Manager Enterprise Identity

sentara; Virginia Beach (VA); On-site; USD 140,000 - 209,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

PTO & Sick Leave

Parental & Family Care

Job summary

Sentara seeks a Cyber Manager - Identity & Access Management to lead enterprise IAM across human and non-human identities, and to own the Digital Front Door login experience for patients and consumers.

You will oversee SSO, MFA, privileged access, and security operations integration, drive modern identity platforms (Saviynt, Ping, CyberArk), and mentor a cross-functional security team in a fast-paced healthcare environment.

Qualifications

• Bachelor's or master's in computer science, information security, or related field.
• CISSP or CISM certifications preferred.
• 15+ years in technology/security with 5+ years in a senior leadership role, healthcare experience preferred.
• Strong leadership, communication, and stakeholder management.

Responsibilities

• Oversee IAM capabilities including SSO, MFA, and privileged access to enforce Zero Trust.
• Lead modernization of identity tech stack (APIs, microservices, data platforms).
• Ensure identity services are reliable across internal apps and cloud environments.
• Collaborate with Cyber Threat Operations Center on identity threats.
• Govern non-human identities and machine credentials lifecycle.
• Extend IAM to IoMT devices and workload identities.

Skills

Leadership

Cross-functional collaboration

Strategic thinking

Communication

Identity security concepts

Regulatory awareness

Education

Bachelor's or master's in computer science, information security, or related field

CISSP or CISM (Preferred)

Tools

Saviynt

Ping

1Kosmos

Experian

CyberArk

BeyondTrust

Entra Workload ID

Job description

City/State: Virginia Beach, VA

Work Shift: First (Days)

Overview

The Cyber Manager - Identity & Access Management is a leader and architecture owner responsible for advancing Sentara Health's enterprise identity strategy across non-human identities, identity proofing, and privileged access management. This role partners with Identity Governance and Administration leaders to build a unified identity ecosystem that supports clinical, corporate, partner, and consumer populations. The role also owns the Digital Front Door identity experience, ensuring patients and consumers have a secure, consistent, and seamless login journey across the Sentara ecosystem.

Enterprise IAM: Workforce and Partners

• Oversee single sign-on, multifactor authentication, and privileged access management capabilities to enforce Zero Trust and least-privilege principles.
• Ensure identity services are integrated seamlessly across the internal application landscape.

Identity Platform and Engineering

• Direct the development and modernization of the core identity technology stack, including APIs, microservices, and identity data platforms.
• Ensure the reliability, performance, and scalability of identity products and platforms, including Saviynt, Ping, 1Kosmos, Experian ,CyberArk, BeyondTrust, and related tools.
• Standardize identity patterns across the organization to enable secure developer self-service and consistent implementation practices.
• Security Operations integration: Partner with the Cyber Threat Operations Center to monitor and respond to identity-based threats, credential stuffing, and account takeover activity.

Non-Human Identity and Machine Governance

• Machine identity inventory: Establish a comprehensive inventory and ownership model for non-human identities, including service accounts, API keys, RPA bots, secrets, and other machine identities.
• Secrets management: Direct the lifecycle for credential discovery, vaulting, and automated rotation across applications and automated workflows to reduce static or unmanaged credentials.
• IoMT security: Extend IAM principles to the Internet of Medical Things by ensuring medical devices, such as infusion pumps and monitors, authenticate with unique machine identities before accessing clinical networks.
• Workload identities: Oversee Entra Workload ID or similar capabilities to secure machine-to-machine communications across cloud-native and legacy hospital systems.

Education

Bachelor's or master's degree in computer science, information security, or a related field. (Preferred)

Certification/Licensure

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certifications (Preferred)

Experience

• Extensive experience in technology and cybersecurity, including at least 15 years of relevant experience and 5 or more years in a senior leadership role; healthcare integrated delivery network or health plan experience preferred.
• Proven leadership experience managing teams and driving cross-functional collaboration.
• Strong understanding of regulatory requirements, industry standards, and cybersecurity best practices.
• Deep understanding of identity protocols (SAML, OIDC, OAuth 2.0, FIDO2) and experience managing both cloud-native and hybrid identity environments.
• Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical audiences.
• Strategic thinker with the ability to translate business needs into effective security solutions.
• Demonstrated ability to thrive in a fast-paced, dynamic environment and adapt to evolving threats and challenges.
• Strong leadership and management skills, with the ability to build, lead, and develop high-performing security teams.
• Excellent interpersonal skills, with the ability to engage effectively with stakeholders at all levels of the organization.
• Proven track record of driving security initiatives and achieving measurable results.
• Ability to operate effectively in a fast-paced, dynamic environment with urgency, attention to detail, and adaptability.
• Experience with Agile, LEAN, or Six Sigma practices preferred.

We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $139,672.00 - $208,790.40 annually.

Additional compensation may be available for this role, such as shift differentials, standby/on-call pay, overtime, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually.

Benefits: Caring For Your Family and Your Career

• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Careg