Director of Identity and Access Management

Commonwealth of Massachusetts; Boston (MA); Hybrid; USD 130,000 - 203,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

Mass Digital, part of the Commonwealth of Massachusetts, seeks a Director of Identity and Access Management to lead the technical strategy for MyMassGov IAM. You will manage engineers, set roadmaps, and drive secure, scalable identity services for public-sector users.

The role requires collaboration with security, architecture, and agency teams to align technology with policy and deliver reliable digital experiences. Boston-based with hybrid in-office requirements.

Qualifications

• Minimum 4 years IAM experience designing and supporting enterprise identity solutions.
• Minimum 2 years in management leading technical teams.
• Experience developing consumer-facing digital products with accessibility in mind.
• Strong knowledge of authentication, authorization, and identity standards.

Responsibilities

• Establish and lead the technical strategy for MyMassGov IAM.
• Lead engineers to design solutions and maintain high technical quality.
• Translate priorities into executable roadmaps and plans.
• Evaluate major platform decisions including identity providers and modernization.
• Provide guidance on IAM architecture and security standards.
• Ensure secure, reliable, scalable operation of MyMassGov.
• Supervise and develop Commonwealth engineers and leads.
• Develop capabilities to support long-term operation of identity services.
• Collaborate with agencies to adopt MyMassGov across applications.
• Advise leaders on IAM technology choices and risks.
• Represent Mass Digital in technical discussions with partners.

Skills

IAM

Leadership

Cloud architecture

OpenID Connect

OAuth 2.0

SAML

Security standards

Education

Bachelor's degree

Tools

CIAM platforms

Job description

An Official website of the Commonwealth of Massachusetts

Job Description - Director of Identity and Access Management (260007HU)

Job Description

Director of Identity and Access Management - ( 260007HU )

Description

About EOTSS and Mass Digital:

The Executive Office of Technology Services and Security (EOTSS) is the lead enterprise technology organization for the Commonwealth of Massachusetts. Charged with driving the ongoing alignment of business and technology across the Commonwealth’s Executive Branch, EOTSS oversees and manages the enterprise technology, digital infrastructure and services, as well as the Commonwealth Security Operations Center and an enterprise Standard Operating Environment that includes an information security and risk management framework for over 125 state agencies and over 43,000 state employees. We directly serve our constituents by providing digital services and tools that enable taxpayers, drivers, businesses, visitors, families and other citizens to do business with the Commonwealth in a way that makes every interaction with government easier, faster, and more secure.

Our Mission: We provide technology leadership across the Commonwealth to enhance the quality of public service and foster positive community outcomes.

The Massachusetts Digital Service (Mass Digital), within EOTSS, partners with organizations across state government to transform how residents, visitors, businesses and government agencies interact with the Commonwealth. Mass Digital help our partners use the best technology, design, and data to make every interaction with Massachusetts government simpler, faster, and more meaningful.

About the role:

Mass Digital is seeking a Director of Identity and Access Management (IAM) to provide technical and organizational leadership for MyMassGov and related constituent identity capabilities.

The Director is responsible for the technical strategy, architecture, engineering, operational performance, security, and continued evolution of MyMassGov. This position combines deep technical expertise with direct management responsibility for the engineers and technical leads who build, operate, and improve the Commonwealth's identity services.

The Director is expected to be a highly engaged technical leader, capable of working directly with engineers on complex architectural decisions, evaluating implementation approaches, diagnosing difficult technical problems, and establishing engineering standards. The Director is accountable for building and developing an effective engineering organization, establishing clear priorities and expectations, and ensuring the reliability, security, and long‑term sustainability of the platform.

A major focus of this role is strengthening the Commonwealth's internal engineering and operational capabilities. The Director will lead a blended team of Commonwealth employees and external technical partners, ensuring effective delivery while building the internal expertise needed to maintain and evolve MyMassGov over time.

Working closely with Mass Digital product leadership, EOTSS security & architecture teams, and agency partners, the Director will translate constituent and business needs into technical priorities and implementation plans. The Director will also contribute technical expertise and strategic recommendations to the Commonwealth's broader approach to identity and access management, including emerging identity technologies, digital credentials, and enterprise standards.

This is a senior technical leadership position that operates with substantial independence and is accountable for the technical quality, operational performance, and development of the engineering organization supporting a critical Commonwealth digital service.

What you’ll do:

• Establish and lead the technical strategy, architecture, and engineering direction for MyMassGov and related constituent identity capabilities.
• Lead engineers and technical staff to design solutions, evaluate technical approaches, resolve complex engineering challenges, and maintain a high standard of technical quality.
• Translate product and organizational priorities into executable technical roadmaps and engineering plans.
• Lead technical evaluations of major platform decisions, including identity provider technologies, platform modernization, migration approaches, and emerging identity capabilities.
• Provide technical guidance and recommendations on broader Commonwealth IAM strategy, standards, and architecture, collaborating with enterprise technology and security leadership.
• Be accountable for the secure, reliable, scalable, and sustainable operation of MyMassGov and associated identity services.
• Collaborate with cybersecurity, infrastructure, and enterprise architecture teams to ensure that identity services meet applicable Commonwealth security policies and technical standards.
• Directly supervise, mentor, and develop Commonwealth engineers and technical leads responsible for MyMassGov and related identity services.
• Develop the technical capabilities and organizational practices necessary to support the long‑term operation and evolution of the Commonwealth's identity services.
• Collaborate with Commonwealth agencies and their technical teams to support the adoption and integration of MyMassGov across government applications and services.
• Advise senior technical and executive leaders on IAM architecture, technology choices, security considerations, operational risks, and opportunities for improvement.
• Represent Mass Digital and the Commonwealth in technical discussions with agency leadership, other states, public‑sector organizations, standards communities, and industry partners.

Work Location, Schedule, and Arrangement

The primary work location for this position is One Ashburton Place, Boston, Massachusetts 02108. The standard work schedule is Monday through Friday, 9:00 AM to 5:00 PM Eastern Time. This position follows a hybrid work model, requiring a minimum of two in-office days per week, with additional on‑site presence as needed to support business operations. Flexibility and adaptability are expected to meet operational needs and evolving business priorities.

Required Experience, Knowledge and Skills:

• We're looking for a proven technical leader who combines deep expertise in identity and access management with strong software engineering judgment, experience leading technical teams, and a commitment to building reliable digital services for the public.
• The ideal candidate is comfortable operating at multiple levels: helping shape long‑term technical strategy, making difficult architectural decisions, working directly with engineers to solve complex problems, and developing the people and practices needed to sustain a high‑performing engineering organization.
• Successful candidates will bring the following knowledge, skills, and experience:
• A minimum of four (4) years of professional experience in identity and access management (IAM), including designing, implementing, or supporting enterprise identity solutions.
• A minimum of two (2) years of management experience leading technical teams, including overseeing daily operations, managing technical delivery, guiding system design, and supporting staff development.
• Experience designing, developing, or managing consumer‑facing digital products or services, with a strong understanding of user needs, usability, accessibility, and the delivery of intuitive, reliable digital experiences.
• Demonstrated experience in IT service delivery, including designing, implementing, and maintaining secure, scalable, and user‑friendly digital solutions that meet organizational objectives and end‑user needs.
• Strong understanding of authentication, authorization, identity federation, single sign‑on, identity lifecycle management, and industry standards, including OpenID Connect, OAuth 2.0, and SAML.
• Experience designing, implementing, or operating enterprise identity platforms that support large user populations and multiple applications, with consideration for security, privacy, interoperability, and operational sustainability.
• Strong knowledge of modern cloud architecture, software engineering, APIs, distributed systems, platform engineering, and production operations.
• Experience with modern engineering practices and technologies, including CI/CD, infrastructure as code, automated testing, observability, performance optimization, and secure software development.
• Demonstrated ability to establish technical standards, evaluate architectural tradeoffs, and guide engineering teams through complex design and implementation challenges.
• Experience leading software engineering or platform engineering teams, including establishing technical direction, setting priorities, promoting engineering best practices, and ensuring high‑quality delivery.
• Ability to supervise, coach, and develop technical professionals, provide constructive performance feedback, and foster a collaborative, high‑performing engineering environment.
• Experience driving technical improvements, strengthening engineering practices, and leading organizational or technology‑related change.
• Ability to coordinate work across internal teams and external vendors while maintaining accountability for technical quality, service delivery, and outcomes.
• Progressively responsible professional experience in software engineering, cloud or platform engineering, cybersecurity, or identity and access management, including experience with the design, development, or operation of large‑scale production systems.
• Knowledge of digital credentials, identity verification, and emerging digital identity technologies or standards.
• A bachelor's degree in computer science, information technology, engineering, cybersecurity, or a related field, or an equivalent combination of relevant education and professional experience.

Preferred Experience, Knowledge and Skills:

• We’d also like, but don’t require, experience with the following:
• Experience directly supervising engineers or other technical professionals, including hiring, performance management, coaching, and professional development.
• Experience with customer identity and access management (CIAM) platforms, large‑scale public‑facing identity systems, or high‑volume authentication services.
• Experience leading identity provider migrations, platform modernization initiatives, or the evaluation and implementation of emerging identity technologies.
• Experience managing highly available digital services with complex security, privacy, accessibility, or regulatory requirements.
• Experience working in government, public‑sector technology, or other large, complex organizations.
• Relevant professional certifications in identity and access management, cloud architecture, cybersecurity, or software engineering.

Qualifications

MINIMUM ENTRANCE REQUIREMENTS:

Applicants must have at least (A) seven (7) years of full‑time or, equivalent part‑time, professional, administrative, supervisory, or managerial experience in IT administration or IT management, of which (B) at least three (3) years must have been in a managerial capacity.

When you embark on a career with the Commonwealth, you are offered an outstanding suite of employee benefits that add to the overall value of your compensation package. We take pride in providing a work experience that supports you, your loved ones, and your future.

An Equal Opportunity / Aff

The Commonwealth is an Equal Opportunity Employer and does not discriminate on the basis of race, religion, color, sex, gender identity or expression, sexual orientation, age, disability, national origin, veteran status, or any other basis covered by appropriate law. Research suggests that qualified women, Black, Indigenous, and Persons of Color (BIPOC)may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage individuals who believe they have the skills necessary to thrive to apply for this role.

Official Title : IT Manager IX

Salary

130,398.00 - 202,834.72 Yearly

If you have Diversity, Aff… or Equal Employment Opportunity questions or need a Reasonable Accommodation, please contact Diversity Officer / ADA Coordinator : Emily Hartmann - 6176608300

Bargaining Unit : M99-Managers (EXE)

Potentially Eligible for a Hybrid Work Schedule : Yes