Identity & Access Leader: Zero Trust & SSO Architect

AMETEK, Inc.; Berwyn (PA); On-site; USD 140,000 - 180,000; Full time

Job summary

AMETEK, Inc. is building a premier Identity and Access Management function. We seek a founding IAM Leader to define strategy, implement a modern IAM platform, and lead hands-on delivery in a fast‑paced environment.

You will own the identity lifecycle, hybrid identity, and SSO across enterprise apps, partnering with Architecture, Security, and IT teams. Strong leadership and collaboration are essential.

Qualifications

• Eight or more years of progressive experience in identity and access management.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field is required; equivalent professional experience will be considered.
• Master's degree in a related field is preferred.
• Deep, hands-on expertise with Active Directory and Microsoft Entra ID, including hybrid join, conditional access, and directory synchronization tools such as Entra Connect.
• Practical experience designing or implementing Zero Trust identity controls, including least privilege, conditional access, MFA, etc.
• Strong understanding of modern identity security patterns across workforce, privileged, third‑party, service account, and machine identity use cases.
• Proven experience designing and implementing SSO using SAML, OIDC, and OAuth 2.0 across a multi‑application enterprise environment.
• Experience with an enterprise IAM or identity governance platform selection and implementation from requirements to go‑live.
• Experience assessing an existing identity environment and improving security posture as part of modernization.
• Strong scripting and automation background (PowerShell, Python, or similar).
• Experience integrating HR systems with downstream identity provisioning processes.
• Knowledge of RBAC, access certification, and PAM concepts.
• Willingness to work hands‑on in the environment in early stages.
• Strong written and verbal communication skills.
• Proven people leadership experience.
• Ability to use AI tools to improve productivity and cost efficiency.

Responsibilities

• Evaluate AMETEK's current identity and access management practices and develop a roadmap for maturing the program, including near-term improvements and a longer-term target architecture.
• Lead the requirements definition, vendor evaluation, and selection process for a modern IAM platform.
• Define and advance AMETEK’s identity-centric Zero Trust architecture for AMETEK, with emphasis on least privilege access, conditional access, continuous verification, and risk-based authentication.
• Partner with Security Architecture, Network, Endpoint, Cloud, and Enterprise Architecture teams to align identity controls IAM, device posture, segmentation, application access, and data protection under a Zero Trust model.
• Develop policies for adaptive access, privileged access, service accounts, machine identities, third-party access, and other non-human identity use cases.
• Integrate IAM controls with endpoint security, security monitoring, vulnerability management, and incident response processes to improve visibility, enforcement, and response.
• Establish measurable Zero Trust maturity measures, goals and metrics.
• Design and implement the target-state identity lifecycle architecture across onboarding, role changes, and offboarding.
• Serve as SME for Active Directory and Microsoft Entra ID, including hybrid identity, conditional access, and directory synchronization.
• Own and improve SSO architecture across SAML, OIDC, and OAuth 2.0 for enterprise applications.
• Establish access certification, RBAC, and PAM practices as the program matures.
• Partner with EA, HR systems, and Corporate Technology Services on integration standards.
• Support IAM components of mergers and acquisitions.
• Coordinate with security, compliance, and internal audit on access control requirements.
• Be a hands-on contributor day-to-day in early stages.
• Build and lead AMETEK's Identity and Access Management team.

Skills

Active Directory

Microsoft Entra ID

Single sign-on

Zero Trust

PowerShell

Python

Hybrid identity

Directory synchronization

Education

Bachelor's degree in Computer Science / Information Systems / Cybersecurity

Master's degree preferred

Tools

Entra Connect

Job description

AMETEK, Inc. is building a premier Identity and Access Management function. We seek a founding IAM Leader to define strategy, implement a modern IAM platform, and lead hands-on delivery in a fast‑paced environment.

You will own the identity lifecycle, hybrid identity, and SSO across enterprise apps, partnering with Architecture, Security, and IT teams. Strong leadership and collaboration are essential.