IAM Engineering Director: Lead Security & Identity

Cls Group; Iselin (PA); Hybrid; USD 180,000 - 230,000; Full time

Benefits offered by this job

Hybrid working

Private medical insurance

Pension provision/401K match

Generous paid time off

Job summary

CLS is seeking an IAM Engineering Lead in Iselin, NJ, reporting to the Head of Security Architecture. This hybrid executive and technical role focuses on designing, implementing, and governing a comprehensive identity and access management program across workforce, customers, and machines.

You will scale onboarding to IAG, expand PAM, embed AI-assisted automation, and drive data-driven governance while balancing risk, security, and business enablement in a highly regulated financial services

Qualifications

• Senior leadership experience in security engineering in regulated environments.
• Proven delivery of large-scale security platforms end-to-end.
• Deep expertise in identity & privileged access engineering.
• Strong track record with regulatory audits and assurance.
• Engineering mindset with architecture, automation, telemetry focus.
• Strategic thinker who can translate vision into execution.
• Strong communicator able to influence executives.
• Data-driven with a focus on measurable security improvements.
• Experience in fast-paced, evolving environments.

Responsibilities

• Scale IAM onboarding and RBAC across systems using phased deployment.
• Automate provisioning, access reviews, and AI-driven workflows.
• Implement self-service identity capabilities and governance.
• Ensure data quality with HR system integration and auditability.
• Leverage AI/ML for role recommendations and anomaly detection.
• Govern machine identities and PAM across networks and devices.
• Deploy AI-assisted anomaly detection for IAM activities.
• Onboard devices and infrastructure accounts to PAM with JIT access.
• Expand PAM scope to cloud, databases, and non-traditional endpoints.
• Establish zero standing privileges and reduced blast radius.

Job description

CLS is seeking an IAM Engineering Lead in Iselin, NJ, reporting to the Head of Security Architecture. This hybrid executive and technical role focuses on designing, implementing, and governing a comprehensive identity and access management program across workforce, customers, and machines.

You will scale onboarding to IAG, expand PAM, embed AI-assisted automation, and drive data-driven governance while balancing risk, security, and business enablement in a highly regulated financial services