IAM Manager

TEKsystems; San Francisco (CA); On-site; USD 96,000 - 103,000; Full time

Job summary

TEKsystems is seeking an IAM Manager to lead the Identity & Access Management program, translating business requirements into secure access controls and lifecycle improvements. You will drive automation, oversee SailPoint IIQ-related work, implement least-privilege provisioning, and educate teams across the organization to ensure compliant IAM practices.

This onsite San Francisco, CA-based role emphasizes collaboration, strong communication, and a proactive security mindset to protect critical

Qualifications

• 5+ years of information security experience including IAM.
• Experience in large-scale enterprise environments with multiple authentication methods.
• Knowledge of privileged identity management and access governance.
• Experience with IAM tools such as SailPoint IdentityIQ and AD based systems.
• Strong communication skills to work with technical and non-technical stakeholders.

Responsibilities

• Lead the IAM team and educate service leads across the organization.
• Drive automation of manual processes through API integration and SailPoint IIQ development.
• Develop and execute least-privilege provisioning plans (just-in-time/just-enough).
• Audit users and groups; cleanup legacy or stale accounts.
• Streamline provisioning/de-provisioning across applications, networks, and third parties.
• Implement role-based access controls for common account types.
• Centralize security reviews, certifications, and interface with internal/external entities.
• Act as IAM champion and educate the enterprise on IAM.

Skills

Identity & Access Management

Information Security

Leadership

Automation

Communication

Tools

Active Directory

Ping Identity

SailPoint IdentityIQ

Delenia

Job description

You will lead the Identity & Access Management (IAM) team, responsible for analyzing and translating business requirements and developing our Identity & Access Management program. The IAM Manager will help create process improvements to the account management lifecycle. This role will help drive assurance with IAM-related security and compliance requirements across all areas of IAM.

Here is what you will do...

• Help drive innovation to improve processes and streamline the customer experience.
• Drive automation of manual processes through enhancing API integration and SailPoint IIQ development.
• Develop and execute a plan that ensures least privilege for account access using just in time, just enough provisioning.
• Lead the IAM team and work with service leads throughout the organization to educate on IAM and engage to facilitate an optimal IAM implementation.
• Audit current users and groups and drive cleanup for legacy or stale accounts.
• Drive the IAM program to leverage established architectures to streamline the provisioning and de-provisioning of access to applications, networks, as well as, the access of associates, clients and third parties.
• Implement role-based access for most common account types.
• Centrally manages user security and entitlement reviews and certifications, as well as interfacing with internal clients and external vendors.
• Acts as champion and educates the enterprise on all aspects of IAM.

Here is how you will be successful...

• Leading by example, becoming a role model for the team to drive change and efficiency.
• Foster and grow a mindset of innovation to streamline processes and lead to a better customer experience.
• Show a passion for automation and drive the team to innovate the reduction in manual processes.

Here's what you will bring...

• Minimum 5+ years of experience in Information Security including Identity & Access Management
• Experience in large scale, dynamic enterprise environments with multiple authentication methods and large variety of user types
• Extensive knowledge and experience with privileged identity management, access governance and other IAM solutions such as Active Directory, Ping, Delenia, SailPoint Identity IIQ, etc.
• Ability to work with authentication and authorization protocols (OAuth, Kerberos, SAML, OpenID)
• Have the ability to train, manage and assist co-workers and direct reports on all aspects of the program build and evolution
• Strong communications skills (written and verbal) to be able to work with technical and non-technical team members
• Highly motivated, strong sense of urgency and track record of getting results
• Excellent written and verbal communication skills

Job Type & Location

This is a Permanent position based out of San Francisco, CA.

Pay and Benefits

The pay range for this position is $70.00 - $75.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment.

Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Workplace Type

This is a fully onsite position in San Francisco,CA.

Application Deadline

This position is anticipated to close on Sep 11, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance

Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI)

We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.