Executive IAM Leader: Enterprise Identity & Access

Baker Tilly (US); Seattle (WA); On-site; USD 252,000 - 297,000; Full time

Job summary

Baker Tilly is hiring a Senior Director, Identity and Access Management (IAM) for our Enterprise IT team in Seattle. This leader will define and execute a modern identity strategy for a large enterprise and ensure identity services enable workforce, privileged, B2B, and B2C use cases across cloud and SaaS platforms.

The role leads people, platforms, partners, and operational outcomes across diverse IAM technologies, driving modernization, reliability, and secure-by-default implementations for

Qualifications

• Bachelor's degree in information technology, cybersecurity, computer science, engineering, business, or related field required; equivalent relevant experience may be considered.
• Master's degree preferred.
• Microsoft identity/security certification (e.g., Identity and Access Administrator, Cybersecurity Architect Expert).
• SailPoint certification or equivalent identity governance certification.
• Cloud architecture/security certification in Microsoft Azure and/or AWS.
• CISSP, CISM, or comparable security/technology leadership certification.

Responsibilities

• Define the enterprise IAM strategy, target-state architecture, reference patterns, standards, and multi-year capability roadmap aligned to business, security, cloud, data, and application strategies.
• Provide executive ownership for workforce identity, privileged access, identity governance, authentication, authorization, federation, external identity, machine/non-human identity, and directory services.
• Translate business and regulatory requirements into sequenced investments, measurable maturity outcomes, and product/capability roadmaps with clear dependencies and benefits.
• Lead IAM engineering across Microsoft Entra ID, Active Directory, SailPoint, Azure, AWS, Databricks, Salesforce, Workday, and supporting integration platforms.
• Establish and scale Infrastructure as Code (IaC), policy-as-code, automated testing, CI/CD, reusable modules, version control, and environment promotion practices for identity platforms.
• Drive modernization away from manual, one-off administration toward API-first, event-driven, automated, resilient, and observable identity services.
• Ensure architecture and engineering patterns support high availability, disaster recovery, zero trust, least privilege, and secure-by-default implementation.
• Own operational performance and service health for enterprise IAM services, including incident/problem management, monitoring, alerting, capacity, resilience, lifecycle management, and vendor support.
• Establish measurable service levels, operational KPIs/KRIs, runbooks, on-call/escalation models, and continuous-improvement mechanisms.
• Reduce operational toil and access-related risk through automation, self-service, proactive detection, root-cause elimination, and disciplined problem management.
• Oversee joiner/mover/leaver execution and access lifecycle controls spanning Workday, SailPoint, Entra ID/Active Directory, SaaS applications, and cloud platforms.
• Operate IAM as an enterprise product/capability with defined customers, outcomes, roadmap, backlog, architecture guardrails, adoption measures, and lifecycle plans.
• Assess current IAM maturity, establish target maturity levels, and lead sustained improvement across governance, technology, process, data quality, operating model, and user experience. Lead organizational and process change associated with MFA, passwordless authentication, access governance, privileged access, application onboarding, and modern identity standards.
• Partner with Security, Enterprise Architecture, HR, Legal, Risk, Audit, application teams, and business leaders to drive adoption and resolve cross-functional ownership decisions.
• Design and govern scalable identity patterns for an enterprise of more than 15,000 users, including employees, contingent workers, partners, clients, customers, service accounts, and non-human identities.
• Lead B2B and B2C identity capabilities, federation, single sign-on, lifecycle integration, conditional access, and delegated administration across internal and external ecosystems.
• Ensure identity is consistently integrated into Salesforce, Workday, Databricks, cloud platforms, enterprise applications, data platforms, and acquired or merged environments.
• Build, lead, coach, and develop architecture, engineering, and operations teams; establish clear accountabilities and succession/capability plans.
• Use AI and machine learning responsibly to improve IAM operations, access intelligence, anomaly detection, request fulfillment, support, access reviews, and decision quality while maintaining human oversight and control.
• Own vendor/partner strategy, technology evaluation, commercial outcomes, audit readiness, and remediation of identity-related risks and control gaps.
• Communicate IAM strategy, investment needs, risk posture, maturity progress, and operational health to executives and governance forums.

Education

Bachelor's degree in information technology, cybersecurity, computer science, engineering, business, or related field

Master's degree

Microsoft identity/security certification (e.g., Identity and Access Administrator, Cybersecurity Architect Expert)

SailPoint certification or equivalent identity governance certification

Cloud architecture/security certification in Microsoft Azure and/or AWS

CISSP, CISM, or comparable security/technology leadership certification

Job description

Baker Tilly is hiring a Senior Director, Identity and Access Management (IAM) for our Enterprise IT team in Seattle. This leader will define and execute a modern identity strategy for a large enterprise and ensure identity services enable workforce, privileged, B2B, and B2C use cases across cloud and SaaS platforms.

The role leads people, platforms, partners, and operational outcomes across diverse IAM technologies, driving modernization, reliability, and secure-by-default implementations for