Identity and Access Management Leader

AMETEK, Inc.; Berwyn (PA); On-site; USD 140,000 - 180,000; Full time

Job summary

AMETEK, Inc. is building a premier Identity and Access Management function. We seek a founding IAM Leader to define strategy, implement a modern IAM platform, and lead hands-on delivery in a fast‑paced environment.

You will own the identity lifecycle, hybrid identity, and SSO across enterprise apps, partnering with Architecture, Security, and IT teams. Strong leadership and collaboration are essential.

Qualifications

• Eight or more years of progressive experience in identity and access management.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field is required; equivalent professional experience will be considered.
• Master's degree in a related field is preferred.
• Deep, hands-on expertise with Active Directory and Microsoft Entra ID, including hybrid join, conditional access, and directory synchronization tools such as Entra Connect.
• Practical experience designing or implementing Zero Trust identity controls, including least privilege, conditional access, MFA, etc.
• Strong understanding of modern identity security patterns across workforce, privileged, third‑party, service account, and machine identity use cases.
• Proven experience designing and implementing SSO using SAML, OIDC, and OAuth 2.0 across a multi‑application enterprise environment.
• Experience with an enterprise IAM or identity governance platform selection and implementation from requirements to go‑live.
• Experience assessing an existing identity environment and improving security posture as part of modernization.
• Strong scripting and automation background (PowerShell, Python, or similar).
• Experience integrating HR systems with downstream identity provisioning processes.
• Knowledge of RBAC, access certification, and PAM concepts.
• Willingness to work hands‑on in the environment in early stages.
• Strong written and verbal communication skills.
• Proven people leadership experience.
• Ability to use AI tools to improve productivity and cost efficiency.

Responsibilities

• Evaluate AMETEK's current identity and access management practices and develop a roadmap for maturing the program, including near-term improvements and a longer-term target architecture.
• Lead the requirements definition, vendor evaluation, and selection process for a modern IAM platform.
• Define and advance AMETEK’s identity-centric Zero Trust architecture for AMETEK, with emphasis on least privilege access, conditional access, continuous verification, and risk-based authentication.
• Partner with Security Architecture, Network, Endpoint, Cloud, and Enterprise Architecture teams to align identity controls IAM, device posture, segmentation, application access, and data protection under a Zero Trust model.
• Develop policies for adaptive access, privileged access, service accounts, machine identities, third-party access, and other non-human identity use cases.
• Integrate IAM controls with endpoint security, security monitoring, vulnerability management, and incident response processes to improve visibility, enforcement, and response.
• Establish measurable Zero Trust maturity measures, goals and metrics.
• Design and implement the target-state identity lifecycle architecture across onboarding, role changes, and offboarding.
• Serve as SME for Active Directory and Microsoft Entra ID, including hybrid identity, conditional access, and directory synchronization.
• Own and improve SSO architecture across SAML, OIDC, and OAuth 2.0 for enterprise applications.
• Establish access certification, RBAC, and PAM practices as the program matures.
• Partner with EA, HR systems, and Corporate Technology Services on integration standards.
• Support IAM components of mergers and acquisitions.
• Coordinate with security, compliance, and internal audit on access control requirements.
• Be a hands-on contributor day-to-day in early stages.
• Build and lead AMETEK's Identity and Access Management team.

Skills

Active Directory

Microsoft Entra ID

Single sign-on

Zero Trust

PowerShell

Python

Hybrid identity

Directory synchronization

Education

Bachelor's degree in Computer Science / Information Systems / Cybersecurity

Master's degree preferred

Tools

Entra Connect

Job description

Select how often (in days) to receive an alert:

Job Title: Identity and Access Management Leader

Location: Berwyn, PA, US, 19312

Business Unit: Nul

Posting Date: Aug 17, 2026

Job Description: AMETEK is building out its identity and access management capability and is hiring a founding Identity and Access Management Leader to lead this effort. Reporting to the Director of Enterprise Operations and Architecture, the leader will help establish identity as a central role in advancing foundational control for AMETEK’s Zero Trust strategy by making identity the primary control point for secure access, with, ensuring access decisions informed are continuously evaluated based on user, device, application, data sensitivity, location, and risk context. This is a hands-on, senior-level role for someone with deep expertise in Active Directory, Microsoft Entra ID, and single sign-on, who can both set the strategic direction for identity management and work directly in the environment to implement it. The role will evaluate, select, and implement a modern IAM platform, and will partner closely with our Enterprise Architecture function on broader technology alignment.

Key Responsibilities:

• Evaluate AMETEK's current identity and access management practices and develop a roadmap for maturing the program, including near-term improvements and a longer-term target architecture.
• Lead the requirements definition, vendor evaluation, and selection process for a modern IAM platform.
• Define and advance AMETEK’s identity-centric Zero Trust architecture for AMETEK, with emphasis on, including least privilege access, conditional access, continuous verification, and risk-based authentication.
• Partner with Security Architecture, Network, Endpoint, Cloud, and Enterprise Architecture teams to align identity controls IAM, device posture, segmentation, application access, segmentation, and data protection controls under a Zero Trust operating model.
• Develop policies and maintain standards for adaptive access, privileged access, service accounts, machine identities, third-party access, and other non-human identity use cases.
• Integrate IAM controls with endpoint security, security monitoring, vulnerability management, and incident response processes to improve visibility, and enforcement, and response across the environment.
• Establish measurable Zero Trust maturity measures, goals and metrics, such as MFA coverage, conditional access adoption, privileged access reduction, stale account remediation, access review completion, and response to high-risk sign-in response.
• Design and implement the target-state identity lifecycle architecture, covering onboarding, role changes, and offboarding across the employee lifecycle.
• Serve as the subject matter expert for Active Directory and Microsoft Entra ID, including hybrid identity, conditional access, and directory synchronization.
• Own and continuously improve single sign-on architecture across SAML, OIDC, and OAuth 2.0, integrating enterprise and divisional applications.
• Establish access certification, role-based access control, and privileged access management practices as the program matures.
• Partner with Enterprise Architecture, HR systems, and Corporate Technology Services on integration standards and cross-domain alignment.
• Support the identity and access components of merger and acquisition integrations as AMETEK continues to grow.
• Coordinate with security, compliance, and internal audit on access control requirements relevant to AMETEK's regulated business environments.
• Be a hands-on contributor in the environment day to day, particularly during the program's early stages, not solely an advisory or architectural resource.
• Build and lead AMETEK's Identity and Access Management team, including defining the team structure, hiring, and developing team members as the function grows.

Required Qualifications:

• Eight or more years of progressive experience in identity and access management, including experience building or significantly maturing an IAM function.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field is required; equivalent professional experience will be considered in lieu of a degree
• Master's degree in a related field is preferred.
• Deep, hands-on expertise with Active Directory and Microsoft Entra ID, including hybrid join, conditional access, and directory synchronization tools such as Entra Connect.
• Practical experience designing or implementing Zero Trust identity controls, including least privilege, conditional access, MFA, privileged access management, device compliance-based access, and risk-based access policies.
• Strong understanding of modern identity security patterns across workforce, privileged, third‑party, service account, and machine identity use cases.
• Proven experience designing and implementing single sign‑on using SAML, OIDC, and OAuth 2.0 across a multi‑application enterprise environment.
• Direct experience with at least one enterprise IAM or identity governance platform selection and implementation, from requirements through go‑live.
• Experience assessing an existing identity environment and improving its security posture as part of a broader modernization effort.
• Strong scripting and automation background (PowerShell, Python, or similar).
• Experience integrating human resources systems of record with downstream identity provisioning processes.
• Working knowledge of role‑based access control, access certification, and privileged access management concepts.
• Demonstrated willingness to work hands‑on in the environment day to day, particularly in the first six to twelve months.
• Strong written and verbal communication skills, with the ability to explain identity architecture decisions to both technical staff and business stakeholders.
• Proven people leadership experience, including hiring, developing, and managing a technical team, ideally having built a team or function from an early stage.
• Demonstrated ability and willingness to use AI tools to improve productivity, decision‑marking, work quality, and to reduce costs. The successful candidate must be able to identify appropriate AI use cases and critically evaluate AI‑generated outputs

Preferred Qualifications:

• Experience in a large, decentralized, multi‑division manufacturing or industrial company with an active mergers and acquisitions history.
• Familiarity with regulated‑environment access control frameworks such as CMMC, ITAR, or NIST 800‑171.
• Relevant certifications such as Microsoft Identity and Access Administrator (SC‑300), or vendor certifications from SailPoint, Saviynt, or Okta.
• Experience standing up or maturing an identity governance program.

#LI-BM1

Compensation

Employee Type: Salaried

Currency: USD

Salary Minimum: 140,000

Salary Maximum: 180,000

Incentive: Yes

Disclaimer:Where a specific pay range is noted, it is a good faith estimate at the time of this posting. The actual salary offered will be based on experience, skills, qualifications, market / business considerations, and geographic location.

AMETEK, Inc. is a leading global provider of industrial technology solutions serving a diverse set of attractive niche markets with annual sales over $7.5billion.

AMETEK is committed to making a safer, sustainable, and more productive world a reality. We use differentiated technology solutions to solve our customers’ most complex challenges. We employ 22,000colleagues, in 35countries, that are grounded by our core values: Ethics and Integrity, Respect for the Individual, Inclusion, Teamwork, and Social Responsibility. AMETEK isacomponent of the S&P 500. Visithttps://www.ametek.com/careers for more information.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class.Individuals who need a reasonable accommodation because of a disability for any part of the employment process should call 1 [phone].