Director, Identity and Technology Operations

4rahlp1 American Homes 4 Rent, L.P.; Las Vegas (NV); On-site; USD 135,000 - 174,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

401(k) with company matching

Employee stock purchase plan

Tuition reimbursement

Paid holidays and PTO accrual

Job summary

American Homes 4 Rent, LP is seeking a Director of Identity and Technology Operations to lead the IAM program, architecture, and day-to-day provisioning. You will partner with IT, HR, and Audit to ensure least privilege and audit-ready controls across the organization.

The role requires deep IAM expertise, leadership experience, and hands-on engineering with cloud and SaaS identity platforms, including automated lifecycle workflows and SSO governance.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field, or equivalent experience.

Responsibilities

• Owns IAM strategy, architecture, and multi-year roadmap.
• Designs enterprise identity model including directory and tenant architecture.
• Evaluates identity platforms and establishes technical standards across IT.
• Designs and governs enterprise access model (RBAC/ABAC, entitlements).
• Maps job functions to birthright entitlements and maintains/recertifies role model.
• Leads identity automation and engineering.
• Builds joiner/mover/leaver provisioning and deprovisioning workflows.
• Establishes monitoring, testing, and change control for identity automation.
• Provides leadership for identity operations and sets SLAs and runbooks.
• Reviews metrics with leadership, resolves escalations, plans staffing.
• Owns control and compliance operations for identity audits and risk reporting.
• Serves as primary technical contact for auditors on identity controls.

Skills

IAM strategy

Azure AD/Microsoft Entra

SailPoint or similar

Identity governance

RBAC and ABAC design

PowerShell / APIs / automation

leadership of technical teams

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

SailPoint

Azure AD / Entra

SCIM / APIs / connectors

Job description

Since 2012, we've grown to become one of the leading single-family rental companies and homebuilders in the country, recently recognized as a top employer by Fortune and Great Place To Work®. At AMH, our goal is to simplify the experience of leasing a home through professional management and maintenance support, so our residents can focus on what really matters to them, wherever they are in life.

The Director, Identity and Technology Operations is responsible for the strategy, design, engineering, and day‑to‑day operations of the enterprise identity and access management (IAM) program, including identity governance and administration, birthright and role‑based access design, joiner‑mover‑leaver lifecycle automation, authentication and multi‑factor authentication, privileged access, and access certification. Provides leadership oversight of the identity operations function and is accountable for the accuracy, timeliness, and auditability of new hire provisioning, transfers, terminations, and access request fulfillment. Serves as the senior technical leader and owner of the identity roadmap, partnering with internal stakeholders (e.g., Information Security, Human Resources, Internal Audit, application teams, etc.) to ensure least privilege is enforced and identity controls satisfy audit and regulatory requirements. Provides technical and delivery leadership for select technology operations initiatives outside of identity.

Responsibilities

• Owns the identity and access management strategy, architecture, and multi‑year roadmap.
• Designs the enterprise identity model, including directory and tenant architecture, standards for service, application, and other non‑human identities.
• Evaluates and selects identity platforms and integration approaches, and establishes the technical standards, patterns, and reference architectures adopted across Information Technology (IT).
• Designs and governs the enterprise access model to include birthright role definitions, role‑based and attribute‑based access control, entitlement catalogs, segregation of duties rules, and access request and approval workflows.
• Partners with internal stakeholders (e.g., Human Resources, business owners, etc.) to map job functions, departments, and organizational attributes to birthright entitlements, and maintains the role model over time through recertification, and remediation of orphaned, excessive, and stale access.
• Leads technical identity automation and engineering.
• Directs the build and maintenance of automated joiner‑mover‑leaver provisioning and deprovisioning, HR‑driven identity lifecycle workflows, application onboarding via SCIM, APIs, and connectors, scripting and workflow development, and integration of applications into single sign‑on and governance.
• Establishes monitoring, error handling, testing, and change control for identity automation, and partners with identity operations to automate repetitive access tasks so the team can focus on higher‑value and exception work.
• Provides leadership and accountability for the identity operations function.
• Sets operational direction, service level targets, quality and accuracy standards, escalation paths, and coverage expectations for new hire and contractor provisioning, transfers and role changes, terminations and emergency deprovisioning, and access request fulfillment.
• Reviews volume, aging, and performance metrics with the manager, resolves cross‑functional escalations with Human Resources and business leaders, approves staffing and capacity plans, and ensures procedures and runbooks remain current and audit‑ready.
• Owns identity‑related control and compliance operations to include access controls in scope for audit, periodic user and privileged access reviews and certification campaigns, termination and transfer evidence, and remediation of control deficiencies.
• Serves as the primary technical point of contact for internal and external auditors on identity controls, and reports identity risk, control coverage, and program metrics to IT and Information Security leadership.
• Provides technical and delivery leadership for general technology initiatives outside of identity, including leading cross‑functional software implementations, upgrades, and integrations, evaluating vendors and solutions, and supporting broader IT operations programs as assigned.

Requirements

Bachelor’s degree in computer science, information technology, cybersecurity, relative field or an equivalent combination of education and experience required. Minimum eight (8) years of experience in identity and access management, including hands‑on engineering, administration, or architecture of enterprise identity platforms. Minimum three (3) years of experience leading technical teams, programs, or projects, including direct supervision of staff. Experience leading an operational support or service delivery function accountable to service level agreements. Experience designing and operating identity governance and administration capabilities, including birthright roles, role‑based access control, access request workflows, and access certification campaigns. Experience implementing automated identity lifecycle. Experience with enterprise directory, single sign‑on, governance, and privileged access technologies such as Microsoft Entra ID (Azure AD), SailPoint or comparable platforms. Experience supporting identity and access controls in an audited or regulated environment preferred. Experience in supporting Public Cloud and SAAS technologies. Strong knowledge of identity and access management concepts including authentication, authorization, federation, single sign‑on, multi‑factor authentication, least privilege, and Zero Trust principles. Must have working knowledge of identity automation and scripting technologies such as PowerShell, Microsoft Graph API, REST APIs, and workflow or integration platforms. Strong ability to design role and entitlement models and translate business job functions into technical access definitions. Must have working knowledge of segregation of duties concepts and access control requirements associated with financial, security, and privacy audits. Must have working knowledge of SaaS products and integration applications. Must have working knowledge of IT service management practices and ticketing platforms, including service level agreement management, queue triage, and operational reporting. Strong verbal and written communication, documentation planning, analysis and organizing skills, including the ability to explain identity concepts to non‑technical stakeholders, executives, and auditors. Advanced and resourceful in troubleshooting, problem‑solving, and solution development to identify areas for improvement and create an action plan.

Compensation

The anticipated pay range/scale for this position is $134,922.00 to $174,093.00 Annually. Actual starting base pay within this range will depend on factors including geographic location, education, training, skills, and relevant experience.

Additional Compensation

This position is eligible to receive a discretionary annual bonus.

Perks and Benefits

• Employees have the opportunity to participate in medical, dental and vision insurance; flexible spending accounts and/or health savings accounts; dependent savings accounts; 401(k) with company matching contributions; employee stock purchase plan; and a tuition reimbursement program.
• The Company provides 9 paid holidays per year, and, upon hire, new employees will accrue paid time off (PTO) at a rate of 0.0577 hours of PTO per hour worked, up to a maximum of 120 hours per year.
• This position is eligible to receive a discretionary annual bonus.

Equal Employment Opportunity

American Homes 4 Rent, LP (“AMH”) provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, gender identity, sexual orientation, marital status, pregnancy, status as a parent, national origin, age, disability (physical or mental), family medical history or genetic information, political affiliation, military service, or other non‑merit based factors. AMH provides reasonable accommodations to qualified individuals with disabilities. To request an accommodation, email [e-mail]. Know your rights. In addition to federal law requirements, AMH complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

E‑Verify and Background Check

AMH participates in the E‑Verify program. Learn more about E‑Verify. Background check required. AMH will consider for employment qualified applicants with arrest or conviction records in accordance with all applicable federal, state, and local laws, which may include the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Privacy Notices

IL E‑Verify Notice. Information regarding our collection and use of your personal information can be found here. CA Privacy Notice: To learn more about what information we collect when you apply for a job, and how we use that information, please see our CA Job Applicant Privacy Notice found here. CA Privacy Notice: To learn more about what information we collect when you apply for a job, and how we use that information, please see our CA Job Applicant Privacy Notice found at https://www.amh.com/ca-privacy-notice.