IT Security Identity & Access Technical Lead

Top Prospect Group; Shelton (CT); On-site; USD 135,000 - 165,000; Full time

Benefits offered by this job

Annual bonus

Excellent benefits

Job summary

Top Prospect Group is seeking an IT Security Identity & Access Technical Lead to design, implement, and govern an enterprise IAM program. This role partners with Security, Infrastructure, HR, Engineering, and business teams to build a scalable identity ecosystem with secure access across the organization.

The role emphasizes directing IAM strategy, multi-year roadmaps, and modernization initiatives while leveraging leadership to gain buy-in and drive transformation.

Qualifications

• 7–12+ years of professional IT/Cybersecurity experience in an enterprise IAM team.
• Deep expertise in IAM frameworks, Zero Trust, and modern identity protocols (SAML, OAuth, OIDC, SCIM).
• Experience with enterprise IAM platforms (on-prem/cloud/SaaS) and API security.

Responsibilities

• Develop and govern the IAM strategy, roadmap, and governance model.
• Design security solutions for authentication, authorization, MFA, SSO, and lifecycle management.
• Lead modernization efforts including Zero Trust, passwordless, and identity automation.
• Oversee PAM solutions (CyberArk) and API access controls.
• Lead provisioning/deprovisioning across SaaS/on-prem apps and ensure compliance.

Skills

Active Directory

Entra ID

IAM

Zero Trust

PAM

SAML/OIDC

Cloud IAM

API security

Communication skills

Education

Bachelor's degree

Tools

Microsoft Entra ID

Azure AD

CyberArk

Job description

Job Title: IT Security Identity & Access Technical Lead

Location: Remote Position on East Coast Time Zone otherwise if Close to Shelton CT it will be Hybrid: 4 days onsite in Shelton(Fridays remote)

Type: Full Time Direct Hire

Salary: $150K and up DOE plus Bonus and excellent benefits

Must Have: Active directory, IAM, Entra ID and good communication skills

Need someone who can assess where the IAM program is today, define where it needs to go, build a multi-year strategy and roadmap, determine how to modernize identity, Zero Trust, PAM and lifecycle management, gain leadership buy-in, and then lead that transformation.

• IAM strategy / future-state roadmap — MUST HAVE
• Enterprise IAM architecture / transformation leadership — MUST HAVE
• Ability to present and influence senior leadership — MUST HAVE
• AD + Entra — still important, but not the entire job
• Zero Trust / PAM / IGA / SSO / cloud identity modernization —
• Hands-on technical depth —

Job Summary

The IT Security Identity & Access Technical Lead is responsible for designing, implementing, and governing the enterprise-wide Identity and Access Management (IAM) program. This role partners with Security, Infrastructure, HR, Engineering, and Business teams to develop a secure, scalable identity ecosystem while ensuring seamless access across the organization.

Key Responsibilities

• Develop and maintain the Identity & Access Management (IAM) strategy, roadmap, and governance model.
• Design and oversee security solutions for authentication, authorization, privileged access, Single Sign-On (SSO), Multi-Factor Authentication (MFA), SaaS security, API access controls, conditional access policies, and identity lifecycle management.
• Lead modernization initiatives involving Zero Trust, passwordless authentication, identity automation, Attribute-Based Access Controls, AI-driven threat detection, and identity management for AI agents.
• Establish API security standards, including identity and access controls, API key and token management, least-privilege access, and monitoring.
• Implement secure API authentication and authorization using OAuth, OIDC, and token lifecycle management.
• Lead the design and operation of Privileged Access Management (PAM) solutions, including CyberArk.
• Manage project delivery within established scope, budget, and timelines.
• Lead technical teams responsible for user provisioning, deprovisioning, terminations, and password resets across SaaS and on-premises applications.
• Conduct regular security audits, identify risks, investigate access irregularities, and ensure compliance with privacy laws and regulatory requirements.
• Establish performance metrics, document procedures, test and implement configuration changes, and resolve technical issues.
• Drive continuous improvement, operational consistency, and reliable identity management services.

Qualifications & Experience

7–12+ years of professional experience in IT and/or Cybersecurity within an enterprise Identity Management team.

Deep expertise in IAM frameworks, Zero Trust, and modern identity protocols, including SAML, OAuth, OIDC, and SCIM.

Experience with enterprise-scale IAM platforms, on-premises systems, cloud platforms, SaaS applications, and APIs.

Strong understanding of cloud identity platforms, including Microsoft Entra ID, Azure AD, AWS IAM, and GCP IAM.

Significant knowledge of Active Directory and Entra ID, including synchronization, patching, hardening, configuration, and risk management.

Experience with identity management tools and enterprise applications, including Intune, Dell OneIdentity, Semperis, CyberArk, SAP, Salesforce, and Workday.

Knowledge of security architecture, threat modeling, identity attack vectors, and emerging IAM technologies.

Strong communication, collaboration, problem-solving, and influencing skills, including the ability to manage challenging conversations and work effectively across teams.

Preferred Qualifications

Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent experience.

Information security certifications such as CISSP, CRISC, CIMP, and/or CISM.

Experience with the following technologies and tools:

• Active Directory and Azure AD synchronization
• Microsoft Entra ID, application registration, passwordless authentication, Enterprise Application SSO, and Conditional Access Policies
• Okta, Semperis, CyberArk, and Dell OneIdentity
• Zscaler AppTotal, Illumio, Microsoft Defender, and InfoBlox BloxOne
• PowerShell, Task Scheduler, Microsoft PKI, NPS, and SCCM patching
• JIRA Service Desk
• Artificial Intelligence (AI) applications and emerging technologies

Work Location

Hybrid position requiring four days per week in the Shelton, CT office for candidates living within one hour of the office.

Work Authorization

Must be legally authorized to work in the United States. Employment visa sponsorship is not available now or in the future.

About Us

Founded in 2010, Top Prospect Group specializes in connecting high-quality candidates with top-tier clients. In 2023, we joined HW Staffing Solutions, expanding national footprint across manufacturing, engineering, logistics, and technology.