IAM Security Architect | Zero Trust Leader

Pitney Bowes; Town of Florida (NY); Hybrid; USD 150,000 - 230,000; Full time

Benefits offered by this job

PB Benefits and Wellbeing Programs

Inclusive environment

Job summary

Pitney Bowes is seeking a Security Identity & Access Technical Leader to design, implement, and govern a enterprise IAM program. You’ll partner across security, infra, HR, engineering and business teams to deliver secure, scalable identity ecosystems and seamless access across the organization.

You will drive IAM strategy, architecture, and governance, lead modernization including Zero Trust and passwordless authentication, and manage lifecycle and API access controls across multiple platforms.

Qualifications

• 7-12+ years of IT and/or Cybersecurity experience in an Enterprise Identity Management team.
• Deep expertise in IAM frameworks, Zero Trust, and modern identity protocols (SAML, OAuth, OIDC, SCIM).
• Experience with enterprise scale IAM platforms, On Premise and Cloud Platforms.
• Strong understanding of cloud identity (Azure/Entra, AWS IAM, GCP IAM, SaaS and API).
• Knowledge of security architecture, threat modeling, and identity attack vectors.
• Experience with Active Directory and Entra processes and tools (patching, hardening, configuration, risk mgmt).
• Knowledge of Identity management processes and tools (Active Directory, Entra ID, Intune, Dell OneIdentity, Semperis, CyberArk, SAP, Salesforce, Workday).
• Knowledge of recent IAM technology advances.

Responsibilities

• Develop and govern IAM strategy, roadmap, and governance model.
• Architect and oversee security, authentication, authorization, PAM, SSO, MFA, and API security.
• Lead modernization efforts like Zero Trust, passwordless, AI-driven threat detection, and AI agent identities.
• Define API security standards: OAuth, OIDC, token lifecycle, least privilege for machine identities.
• Lead structured PAM solutions (CyberArk).
• Oversee provisioning/deprovisioning across SaaS/on-prem apps (Dell OneIdentity, Salesforce, SAP, Workday).
• Perform regular security audits and ensure privacy/regulatory compliance.
• Document IAM processes for consistency and scalability.
• Establish metrics tying security to business objectives.
• Plan, test, and implement configuration changes efficiently.

Skills

Active Directory

Entra ID

Okta

Semperis

CyberArk

Zscaler AppTotal

Task Scheduler

PowerShell

InfoBlox BloxOne

Microsoft Defender

Dell OneIdentity

Microsoft NPS

JIRA Service Desk

AI

Education

Bachelor’s Degree in Information Security, Computer Science or equivalent

Information Security Certifications such as CISSP, CRISC, CIMP and/or CISM

Tools

Dell OneIdentity

Semperis

CyberArk

Okta

Entra ID

JIRA Service Desk

InfoBlox BloxOne

Microsoft Defender

Zscaler AppTotal

SAML/OAuth/OIDC/SCIM

Job description

Pitney Bowes is seeking a Security Identity & Access Technical Leader to design, implement, and govern a enterprise IAM program. You’ll partner across security, infra, HR, engineering and business teams to deliver secure, scalable identity ecosystems and seamless access across the organization.

You will drive IAM strategy, architecture, and governance, lead modernization including Zero Trust and passwordless authentication, and manage lifecycle and API access controls across multiple platforms.