IAM Lead Authentication Services

Iowa Ag; United States; Presencial; USD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Four weeks PTO

Parental leave

Retirement savings plan

Tuition reimbursement

Descripción de la vacante

Corteva Agriscience seeks a seasoned IAM Lead to direct authentication services across our enterprise. You will shape architectures, implement modern identity solutions, and partner with security, cloud, and engineering teams to deliver secure, scalable identity platforms.

The role focuses on Active Directory, Azure Entra ID, SSO/federation, and hybrid identities, ensuring high availability and resilience while driving identity modernization initiatives.

Formación

• 8+ years in Identity and Access Management or related field.
• Extensive hands-on experience with Microsoft Active Directory in large enterprises.
• Strong experience with SSO, federation, and modern authentication protocols (SAML, OAuth 2.0, OIDC).

Responsabilidades

• Lead architecture, engineering, and operations of enterprise IAM authentication services.
• Design and maintain Active Directory architecture, including forests, domains, trusts, and GPOs.
• Build and manage Entra ID (Azure AD) environments and hybrid identity.
• Lead SSO implementations (SAML, OAuth/OIDC, WS-Federation, Kerberos, LDAP).
• Ensure highly available authentication infrastructure with disaster recovery planning.
• Guide identity modernization, passwordless, and Zero Trust initiatives.
• Collaborate with security, cloud, and app teams to onboard applications to IAM platforms.

Conocimientos

Active Directory design

Azure AD / Entra ID

SSO / Federation

Kerberos / LDAP

Hybrid identity

Cloud and on-prem integration

Troubleshooting IAM issues

Leadership / mentoring

Descripción del empleo

### Job Details#### Job Title:IAM Lead - Authentication Services#### Location:,, ,#### Company:#### Industry Sector:#### Industry Type:#### Career Type:#### Job Type:Full Time#### Minimum Years Experience Required:N/A#### Salary:Competitive### Get Job Alerts**Career Type:** IT/Software Development**Country:** USAI agree to receive alerts from and to the .Your alert was created successfully.x## General Alert Saved* The listings below are jobs matching the criteria you've selected for your General Alert on.Criteria selected was:* General alert saved for .* General alert notifications will be sent weekly on Monday.* Please note that you can only have one general alert active at any given time. Creating a new general alert will override an existing general alert.* Visit the to manage your alerts| Number of Years Experience: | Minimum Education Completed: | || Education Major / Discipline Category: | Most Recent / Current Occupation: | |**Position Overview**We are seeking an experienced **Lead - IAM Authentication Services** to provide technical leadership and architectural direction for enterprise identity and authentication services. This role will be responsible for the design, implementation, administration, security, and ongoing evolution of our Identity and Access Management (IAM) authentication platforms.The ideal candidate brings extensive hands-on expertise with **Microsoft Active Directory, Microsoft Entra ID (Azure AD), enterprise Single Sign-On (SSO), federation, and modern authentication protocols**. This individual will serve as a technical subject matter expert and will work closely with infrastructure, cybersecurity, application, cloud, and engineering teams to deliver secure, scalable, and highly available identity services.**Key Responsibilities*** Lead the architecture, engineering, administration, and operational support of enterprise **IAM authentication services**.* Provide technical leadership for **Active Directory architecture**, including domain services, forests, domains, trusts, Group Policy, replication, DNS integration, authentication, and directory security.* Design, implement, and maintain **Microsoft Entra ID (Azure AD)** environments, including tenant architecture, identity synchronization, authentication, Conditional Access, application integrations, and hybrid identity.* Lead the design and implementation of enterprise **Single Sign-On (SSO)** solutions using technologies and protocols such as:+ SAML 2.0+ OAuth 2.0+ OpenID Connect (OIDC)+ WS-Federation+ Kerberos+ LDAP* Architect and support integrations between on-premises Active Directory, Entra ID, SaaS applications, cloud platforms, and enterprise applications.* Establish and maintain authentication patterns and standards for **workforce, application, and service identities**.* Design and support highly available and resilient authentication infrastructure, including disaster recovery and business continuity capabilities.* Provide technical leadership for identity modernization initiatives, including **hybrid identity, cloud migration, passwordless authentication, and Zero Trust architectures**.* Troubleshoot complex authentication, federation, directory, and SSO issues across enterprise environments.* Develop and maintain IAM architecture documentation, standards, technical procedures, and operational runbooks.* Establish and enforce security best practices for identity infrastructure, privileged access, authentication, and directory services.* Partner with cybersecurity teams to identify and remediate identity-related vulnerabilities and risks.* Collaborate with application and engineering teams to onboard applications to enterprise authentication and SSO platforms.* Provide technical guidance and mentorship to IAM engineers and administrators.* Participate in architecture reviews, technology evaluations, and strategic IAM roadmaps.* Support incident response and root-cause analysis for critical identity and authentication incidents.* Evaluate emerging identity technologies and recommend solutions that improve security, resiliency, user experience, and operational efficiency.**Required Qualifications*** **8+ years of experience** in Identity and Access Management, authentication, directory services, infrastructure engineering, or a related discipline.* Extensive hands-on experience designing and administering **Microsoft Active Directory** in large enterprise environments.* Strong understanding of **Active Directory architecture**, including:+ Forests and domains+ Domain controllers+ AD replication+ DNS+ Group Policy+ Trust relationships+ Kerberos authentication+ LDAP+ Active Directory security and hardening* Extensive experience with **Microsoft Entra ID (Azure AD)** and hybrid identity architectures.* Strong experience implementing and troubleshooting **SSO and federation technologies**, including SAML, OAuth 2.0, and OpenID Connect.* Experience integrating enterprise applications with Active Directory and/or Entra ID.* Strong understanding of authentication, authorization, federation, identity lifecycle, and access control concepts.* Experience with **Microsoft Entra Connect / Azure AD Connect** and hybrid identity synchronization.* Experience with **Conditional Access, MFA, identity protection, and modern authentication**.* Strong troubleshooting and root-cause analysis skills across complex identity environments.* Experience working with security, infrastructure, cloud, and application engineering teams in large enterprise environments.* Demonstrated ability to lead technical initiatives and provide direction to engineers and administrators.**Preferred Qualifications*** Experience with **Privileged Identity Management (PIM)** and privileged access management concepts.#LI-AB1**Benefits - How We'll Support You:*** Numerous development opportunities offered to build your skills* Be part of a company with a higher purpose and contribute to making the world a better place* Health benefits for you and your family on your first day of employment* Four weeks of paid time off and two weeks of well-being pay per year, plus paid holidays* Excellent parental leave which includes a minimum of 16 weeks for mother and father* Future planning with our competitive retirement savings plan and tuition reimbursement program* Learn more about our total rewards package here -* Check out life at Corteva!Corteva Agriscience is an equal opportunity employer. We are committed to embracing our differences to enrich lives, advance innovation, and boost company performance. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, military or veteran status, pregnancy related conditions (including pregnancy, childbirth, or related medical conditions), disability or any other protected status in accordance with federal, state, or local laws.To apply please click on APPLY TO THIS POSITIONJob Post Date: 10/27/26Here are some other jobs you may be interested in applying for.| | || - | - || Bayer Residence Based, Iowa | agriCAREERS, INC. Iowa || Bayer Residence Based, Iowa | |9 people are interested in this job.