Identity and Entitlement Management Workstream Lead

Farm Credit Council; Enfield (CT); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Hybrid work option

Professional development

Job summary

Farm Credit East is seeking an Identity & Entitlement Management Workstream Lead to drive governance and platform modernization. You will own the IAM/IGA product strategy, align information security, IT, HR, and compliance, and oversee non-human identity governance and service accounts.

The role coordinates with MSPs and partners, ensuring least privilege, auditable approvals, and secure onboarding for applications across the enterprise.

Qualifications

• This position requires a Bachelor's degree in IT, Cybersecurity, or related field; Master's preferred.
• Minimum of 8 years in IAM/IGA, with 3+ years leading cross-functional identity initiatives.
• Experience in regulated financial services and coordination with MSPs is preferred.

Responsibilities

• Own the Identity & Entitlement Management workstream with vision, roadmap, priorities, and acceptance criteria.
• Lead governance forums; report progress, blockers, and recommendations to leadership.
• Coordinate delivery across security, IT, HR, Compliance, and partners.
• Oversee integration with Salesforce FSC, nCino, CIAM/FGA, and data initiatives.
• Define ownership for identity policies, roles, entitlements, and certifications.

Skills

IAM

IGA

Cybersecurity

Leadership

Product ownership

Education

Bachelor's degree in IT or related

Master's preferred

Tools

Salesforce Financial Services Cloud

nCino

Job description

Description/Job Summary

Be part of a team focused on enabling the success of Farm Credit East's staff through world class technology support. Farm Credit East's success is built on its ability to leverage technology and staff to provide a high-class customer and employee experience. This position provides staff the support and resources they need to provide the level of service Farm Credit East is known for. We are One Team Working Together with a focus on our five pillars: Outstanding Customer and Employee Experience, Quality Growth, Operational Excellence, Commitment to our Communities, and Protecting Customer Information.

The Identity and Entitlement Management Workstream Lead is accountable for leading Farm Credit East's identity governance and administration (IGA), and entitlement-management workstream through strategy, design, implementation, application onboarding, testing, go-live, and transition to operations. This includes overseeing the Customer Identity & Access Management and Identity Governance Lifecycle management implementations. The role serves as the FCE product owner and decision coordinator, aligns business, Information Security, IT, HR, Compliance, application owners, Farm Credit Financial Partners, Inc. (FPI), and implementation partners, and provides formal review and sign-off for workstream deliverables. The lead ensures identities, access rights, entitlements, approvals, and non-human identities are governed consistently and auditable across the modernized platform ecosystem.

The value drivers for this role are as follows:

• Identity Strategy and Product Ownership
• Secure Platform Modernization
• Risk Reduction and Regulatory Readiness
• Cross-Functional Delivery and Accountability
• Operational Sustainability and Adoption

Duties and Responsibilities:

Workstream Leadership and Product Ownership

• Own the Identity & Entitlement Management workstream including working with cross functional leaders to develop vision, roadmap, delivery backlog, priorities, acceptance criteria, decisions, risks, and dependencies.
• Lead recurring workstream status, requirements, design, governance, and decision forums; communicate progress, blockers, and recommendations to program and security leadership.
• Coordinate functional delivery across Information Security, IT, HR, Compliance, Legal/Privacy, FPI, business teams, application owners, technical SMEs, and implementation partners.
• Review and formally approve FCE deliverables, ensuring traceability from requirements through design, testing, deployment, and operational handoff.
• Manage sequencing dependencies with Salesforce Financial Services Cloud and nCino role/profile design, the customer portal, CIAM/FGA, integrations, and data initiatives.

IGA and Entitlement Governance

• Direct selection and implementation of the IGA platform based on business, technical, integration, security, and operational requirements.
• Establish governance for authoritative identity sources, joiner-mover-leaver lifecycle states, access requests, approvals, provisioning and deprovisioning, access certification, RBAC, separation of duties, reporting, and exception management.
• Ensure entitlement models support least privilege, need-to-know access, customer-data protection, segregation of duties, and auditable approvals.
• Oversee non-human identity and service-account governance, including inventory, ownership, lifecycle policy, and accountable use.
• Define decision rights and sustainable ownership for identity policies, roles, entitlements, certifications, exceptions, and application onboarding.

Implementation, Testing and Application Onboarding

• Oversee authoritative-source integration and phased onboarding of prioritized business applications.
• Ensure application owners and technical SMEs provide connector/API details, account and entitlement data, role-to-entitlement mappings, test environments, service accounts, error handling, and deployment support.
• Direct business testing, including test planning, requirements traceability, defect remediation, integration validation, rollback planning, security validation, and go-live readiness.
• Coordinate release and environment promotion for access-control changes and verify reconciliation, monitoring, and operational support are established.
• Ensure delivery of hypercare, operational runbooks, application onboarding guides, configuration documentation, and knowledge transfer.

Risk, Compliance and Continuous Improvement

• Partner with GRC, Compliance, Legal/Privacy, and Internal Audit to validate control design, access reviews, separation of duties, evidence, reporting, policy alignment, and regulatory readiness.
• Establish KPIs and KRIs for access requests, lifecycle timeliness, certification completion, provisioning exceptions, reconciliation, policy violations, and application onboarding.
• Identify delivery, adoption, security, and operational risks; drive corrective actions and escape unresolved decisions.
• Continuously mature identity governance based on audit results, incidents, stakeholder feedback, platform capabilities, and evolving threats.

Job Qualifications and Requirements:

• This position requires a Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field required. Master's degree or equivalent experience preferred.
• Minimum of 8 years of progressive experience in IAM, IGA, cybersecurity, enterprise applications, or technology program delivery, including at least 3 years leading complex cross-functional identity initiatives or serving as an IAM/IGA product owner.
• Experience operating in a regulated financial-services environment and coordinating with managed service providers is strongly preferred.
• Preferred certifications include CISSP, CISM, CRISC, CISA, CGEIT, or an IGA/IAM platform certification.
• Project or product credentials such as PMP, PMI-ACP, Certified Scrum Product Owner, or equivalent are preferred.
• We offer hybrid work options after two weeks of employment with Farm