Identity Access Manager

Pantherx Specialty LLC; Pittsburgh (Allegheny County); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with employer matching

Employer-paid life insurance

Short/long term disability

Employee Assistance Program

Generous paid time off

Paid holidays

Job summary

PANTHERx Rare Pharmacy is hiring an Identity & Access Manager in Pittsburgh, hybrid. You will lead the IAM program across on-premises, cloud, and hybrid environments, ensuring least-privilege access and auditable controls.

This role partners with IT, Security Operations, HR, Compliance, and business stakeholders to reduce identity-related risk. The role requires leading IAM staff, executing the strategy, managing vendors, and defining metrics to track access governance.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field, or equivalent experience.
• 7+ years in information technology or cybersecurity with 5+ years in IAM and 2+ years in leadership.

Responsibilities

• Lead IAM staff, set priorities, and foster accountability.
• Develop and execute IAM strategy including zero trust and phishing-resistant authentication.
• Manage IAM vendors, licensing, and input on budget and resources.
• Define and report IAM metrics and risk indicators to security leadership.

Skills

Team leadership

Analytical thinking

Effective communication

Cross-functional collaboration

Education

Bachelor's degree or equivalent in Information Security/IT

Tools

Microsoft Entra ID

Active Directory

SAML/OAuth/OpenID Connect

Job description

Current job opportunities are posted here as they become available.

7,000 Diseases - 500 Treatments - 1 Rare Pharmacy

PANTHERx is the nation's largest rare disease pharmacy, and we put the patient experience at the top of everything that we do.

We are seeking team members who:

Are inspired and compassionate problem solvers;

Produce high quality work;

Thrive in the excitement of the ever-challenging environment of modern medicine; and

Are committed to achieving superior health outcomes for people living with rare and devastating diseases.

At PANTHERx, we know our employees are the driving force in what we do. We cultivate talent and encourage growth within PANTHERx so that our associates can continue to explore their interests and expand their careers. Guided by our mission to provide uncompromising quality every day, we continue our strategic growth to further reach those affected by rare diseases.

Join the PANTHERx team, and define your own RxARE future in healthcare!

Identity & Access Manager

Location: Pittsburgh, PA (Hybrid)

Classification: Exempt

Status: Full-Time

Reports to: Director of Information Security

Purpose

The Identity & Access Manager is responsible for leading the organization's identity and access management (IAM) program, including identity lifecycle management, authentication, authorization, privileged access, and access governance across on-premises, cloud, and hybrid environments. This role manages IAM analysts, owns the strategy and operation of core identity platforms, and ensures that access to systems and sensitive data is appropriate, auditable, and aligned with least-privilege principles. The Identity & Access Manager partners closely with IT, Infrastructure, Security Operations, HR, Compliance, and business stakeholders to reduce identity-related risk, strengthen the organization’s security posture, and support compliance with applicable regulatory and organizational requirements.

Responsibilities

• Lead, mentor, and develop IAM staff, including setting priorities, assigning work, conducting performance reviews, and fostering a culture of accountability and continuous learning.
• Develop and execute the IAM strategy and roadmap, including zero trust identity principles and phishing-resistant authentication initiatives.
• Manage IAM vendors, licensing, and service providers, and provide input on budget and resource planning.
• Define, track, and report IAM metrics and key risk indicators, such as access review completion, privileged account counts, MFA coverage, and provisioning turnaround time, to security leadership.

Identity Lifecycle & Directory Services

• Oversee identity lifecycle processes, including onboarding, role changes, and offboarding, in partnership with HR and IT to ensure timely and accurate provisioning and deprovisioning.
• Provide leadership and oversight for hybrid Active Directory and Microsoft Entra ID environments, including synchronization, group management, device identity, and directory hygiene.
• Oversee the management of service accounts, application registrations, managed identities, and non-human identities.
• Partner with application owners to integrate applications with enterprise single sign-on and automated provisioning using standards such as SAML.

Authentication & Privileged Access

• Own authentication standards and technologies, including multi-factor authentication, conditional access policies, and the migration to phishing-resistant methods.
• Oversee privileged access management, including just-in-time access, separation of privileged and standard accounts, and privileged account monitoring and vaulting.
• Define and maintain role-based access control models, access request workflows, and approval processes that enforce least privilege and segregation of duties.
• Establish emergency access, break-glass, and exception handling procedures with appropriate controls and monitoring.

Access Governance & Compliance

• Lead periodic access reviews, entitlement certifications, and privileged access recertifications, and track remediation of findings to closure.
• Support security audits, assessments, and compliance initiatives, including HITRUST and HIPAA, by providing evidence and remediation for access control requirements.
• Maintain identity and access policies, standards, and procedures, and track remediation of audit findings and corrective action plan items.
• Partner with data owners and Compliance to ensure access to systems containing regulated data is appropriately restricted and reviewed.

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field, or equivalent experience.
• 7+ years of experience in information technology or cybersecurity, including 5+ years in identity and access management and at least 2 years in a team lead or management role.
• Experience implementing and managing enterprise identity platforms, including Microsoft Entra ID and Active Directory in hybrid environments.
• Experience with Microsoft security technologies, including Conditional Access, Privileged Identity Management, and Identity Protection.
• Knowledge of authentication and federation standards, including SAML, OAuth, OpenID Connect, Kerberos, and SCIM, and of multi-factor authentication and privileged access management solutions.
• Strong knowledge of IAM principles, including least privilege, role-based access control, segregation of duties, zero trust, and identity lifecycle management.
• Knowledge of security frameworks and regulations, including NIST CSF, CIS Controls, HIPAA, and HITRUST.
• Proven ability to lead, coach, and develop technical staff and to manage third‑party vendors.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Strong written and verbal communication skills with the ability to communicate technical concepts to both technical and non-technical audiences, including executive leadership.
• Ability to manage multiple priorities and work effectively across cross‑functional teams.

Preferred Qualifications

• CISSP, CISM, CCSP, CRISC, Microsoft SC-300, SC-100, or other relevant identity or cybersecurity certifications.
• Experience with identity governance and administration (IGA) platforms and in a healthcare or other highly regulated environment.

This job functions in a professional home or office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, and fax machines.

Physical Demands

While performing the duties of this job, the employee is regularly required to sit, see, talk, or hear. The employee frequently is required to stand, walk, use hands and fingers to handle or feel, and reach with hands and arms. Visual acuity is necessary for tasks such as reading or working with various forms of data for extended periods. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the job.

Hybrid, remote and flexible on-site work schedules are available, based on the position. PANTHERx Rare Pharmacy also affords an excellent benefit package, including but not limited to medical, dental, vision, health savings and flexible spending accounts, 401K with employer matching, employer-paid life insurance and short/long term disability coverage, and an Employee Assistance Program! Generous paid time off is also available to all full-time employees, as well as limited paid time off for part-time employees. Of course we offer paid holidays too!

PANTHERx Rare Pharmacy is an equal opportunity employer, and does not discriminate in recruiting, hiring, promotions or any term or condition of employment based on race, age, religion, gender, ethnicity, sexual orientation, gender identity, disability, protected veteran's status, or any other characteristic protected by federal, state or local laws.