Identity Governance Lifecycle Specialist

Farm Credit Council; Enfield (CT); Hybrid; USD 85,000 - 105,000; Full time

Benefits offered by this job

Hybrid work after two weeks

401(k) match

Tuition reimbursement

Parental Leave

Employee Assistance Program

Job summary

Farm Credit East is seeking an IAM/IGA professional to lead identity lifecycle, access governance, and onboarding initiatives within a hybrid cloud environment, primarily focused on Azure.

You will provide architecture guidance for Azure IaaS/PaaS, partner with owners to implement RBAC, and drive compliance, audits, and dashboard reporting while supporting a world class technology service for staff and customers.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Minimum 4 years in IAM/IGA, with hands-on lifecycle management and access governance responsibilities.
• Security certifications (CISSP/CCSP or equivalent) preferred.

Responsibilities

• Act as the technical lead for the Microsoft Azure Cloud COE, guiding cloud solution design and optimization.
• Lead the implementation and support of hybrid infrastructure, integrating Azure with on-prem environments.
• Define roles, entitlements, ownership, and approval paths for RBAC and access governance.
• Support onboarding, integration, testing, provisioning, and deprovisioning across applications.
• Design dashboards/metrics for lifecycle timeliness, access certification, and compliance.

Skills

IAM

Identity governance

Cloud security

Architecture leadership

Education

Bachelor's degree in IT/c Cybersecurity or related field

Tools

Azure cloud

IAM platforms (SailPoint/Saviynt/Entra)

RBAC design

Job description

Description/Job Summary

Be part of a team focused on enabling the success of Farm Credit East's staff through world class technology support. Farm Credit East's success is built on its ability to leverage technology and staff to provide a high-class customer and employee experience. This position provides staff the support and resources they need to provide the level of service Farm Credit East is known for. We are One Team Working Together with a focus on our five pillars: Outstanding Customer and Employee Experience, Quality Growth, Operational Excellence, Commitment to our Communities, and Protecting Customer Information.

The value drivers for this role are as follows:

• Lifestyle Control Effectiveness
• Least Privilege and Access Risk Reduction
• Auditability and Regulatory Readiness
• Application Onboarding and Integration
• Operational Efficiency and User Experience

Duties and Responsibilities:

Identity Lifecycle and Identity Governance Administration & Operations

• Act as the technical lead for the Microsoft Azure Cloud Center of Excellence (COE), providing hands on leadership for cloud solution design, implementation, and optimization.
• Provide solution architecture guidance for Azure IaaS and PaaS workloads, ensuring alignment with enterprise standards, security requirements, and business objectives.
• Lead the implementation and support of hybrid infrastructure solutions, integrating Azure cloud services with on premises data center environments.
• Serve as the primary technical escalation point for complex infrastructure issues related to Azure, on prem systems, and hybrid connectivity.

Application Roles, Entitlements and Access Governance

• Partner with business and application owners to define roles, entitlements, ownership, approval paths, risk attributes, and role-to-entitlement mappings.
• Support RBAC design, access-policy implementation, least-privilege analysis, separation-of-duties rules, access review campaigns, and exception governance.
• Validate that the right reviewers assess the right access based on risk and that decisions, evidence, remediation, and completion are documented.
• Support governance for privileged access, service accounts, application identities, APIs, automation identities, and other non-human identities.
• Maintain identity and entitlement catalogs, business-friendly access descriptions, application ownership records, and governance metadata.

Application Onboarding, Integration and Testing

• Coordinate IGA onboarding with application owners and technical SMEs across enterprise and modernized platforms.
• Gather and validate connector/API information, account schemas, entitlement data, test environments, service accounts, error handling, and deployment requirements.
• Support connectors and workflow integrations; validate account aggregation, provisioning, deprovisioning, reconciliation, logging, and failure handling.
• Build and execute test scenarios for lifecycle events, access requests, user access certifications, roles, SoD policies, negative cases, rollback, and go-live readiness.
• Produce application onboarding/configuration guides and support transition to operational teams.

Reporting, Compliance and Improvement

• Design and drive implementation of dashboards and metrics for lifecycle timeliness, request turnaround, certification completion, access removals, exceptions, reconciliation, SoD violations, and application onboarding.
• Support IAM-related audits, risk assessments, regulatory examinations, incident response, and evidence requests.
• Collaborate with FPI to align managed identity services, SLAs, documentation, control performance, and escalation paths with FCE expectations.
• Identify automation and process-improvement opportunities that reduce manual effort and access risk

Job Qualifications and Requirements:

• This position requires a Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field required. Advanced degree or equivalent experience preferred.
• Minimum of 4 years of experience in IAM, IGA, cybersecurity, identity operations, application security, or IT governance, with hands-on responsibility for identity lifecycle, access governance, provisioning, user access certifications, or application onboarding.
• Security-related certifications such as CISSP, CCSP or equivalent are preferred.
• Security+, SSCP, CIAM, Microsoft identity credentials, or equivalent preferred.
• IGA platform certifications for SailPoint, Saviynt, Microsoft Entra ID Governance, or equivalent are preferred
• We offer hybrid work options after two weeks of employment with Farm Credit East. Hybrid work options are determined based on job role and balancing the needs of the customers, the team, and individual work performance. This will be reviewed based on manager discretion.

Compensation and Benefits:

• Salary range: $85,000 - $105,000 commensurate with experience.
• Short Term Incentive to reward business results
• Retirement Contributions:
  • 401(k) match up to 6% of salary; or for those unable to take full advantage of the 401(k) match, verified student loan payments may qualify for an employer match in your 401(k) up to 6% of salary
  • Defined Contribution retirement plan funded at 2-9% of salary depending on years of service
• Time Off:
  • 15-25 days of vacation leave per year, depending on years of service
  • 12 days of holiday leave per year
  • 7.5 days of sick leave in your first year, followed by 12 days of sick leave per year thereafter; unlimited rollover of unused sick leave year to year
  • Paid Parental Leave: Up to 80 hours of paid leave for birthing, non-birthing, and adoptive parents
  • Family Care Leave: Additional leave options available under FMLA and company policy
• Health and Insurance:
  • Comprehensive medical, dental, and vision plans, including preventive care and wellness programs to support your overall health and well-being
  • Health Savings Account
  • Life insurance at 2x base pay
  • Accidental Death and Dismemberment insurance at 2x base pay
  • Long-term disability insurance at 2/3 base pay
• Additional Benefits:
  • Tuition reimbursement
  • Continuing education and training
  • Employee Assistance Program offering a wide variety of tools and resources
• Benefits Eligibility:
  • Eligibility Begins: First of the month following your hire date
  • Eligible Employees: Full-time employees working 30+ hours per week; Part-Time employees working 20+ hours per week.

Farm Credit East is an Equal Opportunity Employer. As an Equal Opportunity Employer, we do not discriminate on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, age, marital status, disability status, protected veteran status, genetic information or any other status protected by federal, state or local law. It is our goal to make employment decisions that further the principle of equal employment opportunity by utilizing objective standards based upon an individual's qualifications for a specific job opening. In compliance with the Americans with Disabilities Act (\"ADA\"), if you have a disability and would like a reasonable accommodation in order to apply for a position with Farm Credit East, please call 1-800-562-2235 or e-mail [e-mail].