IAM Manager: Zero-Trust & Workload Identity Leader

NorthMark Compute & Cloud; Dallas (TX); On-site; USD 140,000 - 210,000; Full time

Job summary

NorthMark Compute & Cloud is seeking a Manager of Identity and Access Management to lead a skilled IAM team and drive the strategic identity program across on-prem and cloud environments. You will own identity governance, RBAC, PAM, and workload identity using SPIFFE/SPIRE, with emphasis on cryptographic attestation and secure service-to-service communication.

The role requires deep expertise in Entra ID, PKI, and mTLS, and the ability to translate complex identity risks into actionable

Qualifications

• 6+ years of identity and access management or security engineering experience.
• 2–3+ years leading or managing an IAM or security engineering team.
• Deep expertise in Microsoft Entra ID (Azure AD), including conditional access, identity governance, PIM, and enterprise app integration.
• Hands-on experience with SPIFFE/SPIRE or equivalent workload identity frameworks, and cryptographic identity attestation in distributed/containerized environments.
• Strong command of PKI fundamentals, including CA design, certificate lifecycle management, and large-scale issuance patterns.
• Experience designing and enforcing mTLS architectures for service-to-service communication in microservices/cloud-native environments.
• Familiarity with zero trust architecture principles across hybrid enterprise and cloud-native environments.
• Experience with privileged access management solutions and least-privilege enforcement across human and service accounts.
• Excellent communication skills translating complex identity concepts into clear reporting and recommendations.

Responsibilities

• Lead, mentor, and develop a team of IAM engineers, setting priorities and fostering growth.
• Own the strategy and roadmap for the enterprise identity program, including lifecycle management, RBAC, PAM, and access governance across Entra ID and connected systems.
• Drive design, implementation, and operation of workload and service identity programs using SPIFFE/SPIRE for cryptographically verifiable identities.
• Oversee PKI strategy and certificate lifecycle management across the enterprise.
• Lead adoption and enforcement of mTLS for service-to-service communication across microservices and cloud environments.
• Advance zero-trust identity strategy with continuous validation of user, device, and workload identities.
• Collaborate with Platform Engineering, DevOps, and IT leadership to embed IAM controls in CI/CD and IaC workflows.
• Establish identity governance frameworks: access reviews, entitlement management, least-privilege enforcement.
• Translate identity risks and metrics into reports for security leadership and execs.
• Stay current on evolving SPIFFE/SPIRE developments, certificate transparency, and zero trust frameworks.

Skills

IAM leadership

Azure Entra ID

SPIFFE/SPIRE

PKI

mTLS

Zero Trust

PAM

Excellent communication

Tools

SPIFFE/SPIRE

Job description

NorthMark Compute & Cloud is seeking a Manager of Identity and Access Management to lead a skilled IAM team and drive the strategic identity program across on-prem and cloud environments. You will own identity governance, RBAC, PAM, and workload identity using SPIFFE/SPIRE, with emphasis on cryptographic attestation and secure service-to-service communication.

The role requires deep expertise in Entra ID, PKI, and mTLS, and the ability to translate complex identity risks into actionable