IT Security Identity & Access Technical Leader

1000 Pitney Bowes Inc; Shelton (CT); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Career growth opportunities

Inclusive environment

Challenging opportunities to transform

Comprehensive benefits (PB Live Well)

Job summary

Pitney Bowes is seeking a Security Identity & Access Technical Leader to design and govern our enterprise IAM program. You will partner across security, infra, HR, engineering and business teams to deliver a scalable identity ecosystem and secure access experiences.

You will lead modernization efforts including Zero Trust, passwordless authentication, AI-driven threat detection, and lifecycle management. The role requires strong leadership and deep IAM expertise in cloud and on‑prem environments.

Qualifications

• 7–12+ years of IT/cybersecurity with enterprise identity management experience.
• Deep expertise in IAM frameworks, Zero Trust and modern identity protocols (SAML, OAuth, OIDC, SCIM).
• Experience with enterprise‑scale IAM platforms on premise and in the cloud.

Responsibilities

• Develop and maintain IAM strategy, roadmap, governance model across teams.
• Architect and oversee security, authentication, authorization, PAM, MFA, SSO, API access controls, and lifecycle management.
• Lead modernization efforts: Zero Trust, passwordless authentication, identity automation, AI threat detection, and identity models for AI agents.
• Define API security standards: API identity, access controls, key/token management, least-privilege for machine identities.
• Lead PAM design/operation (CyberArk).
• Ensure projects meet scope, budget, and schedule with reliability and speed.
• Oversee provisioning/deprovisioning across SaaS/on‑prem apps (Dell OneIdentity, Salesforce, SAP, Workday).
• Perform audits and ensure privacy/regulatory compliance.

Skills

IAM

Zero Trust

OAuth/OIDC

SAML

SCIM

Azure Entra

AWS IAM

GCP IAM

Active Directory

CyberArk

Intune

Okta

Entra ID

Education

Bachelor's Degree in Information Security/Computer Science

Tools

Dell OneIdentity

Semperis

CyberArk

Salesforce

SAP

Workday

Entra ID

Job description

We’re hiring at Pitney Bowes

We’re hiring at Pitney Bowes, where top talent builds meaningful careers and lasting impact. We move fast, deliver excellence, and win together… that’s The Pitney Bowes way. Here, how we work matters just as much as what we achieve. We’re looking for people who act with urgency, accountability, and purpose; deliver high quality work with consistency and pride; collaborate effectively and elevate those around them; focus on outcomes that drive impact and growth.

Position Overview

You are a Security Identity & Access Technical Leader responsible for designing, implementing, and governing the enterprise‑wide Identity and Access Management (IAM) program. You partner across security, infrastructure, HR, engineering, and business teams to build a modern, scalable identity ecosystem, delivering secure, seamless access experiences across the organization.

Responsibilities

• Develop and maintain the organization’s IAM strategy, roadmap, and governance model, driving alignment and shared accountability across teams.
• Architect and oversee solutions for security, authentication, authorization, privileged access, SSO, MFA, SaaS security posture, API access controls, conditional access policies, and lifecycle management.
• Technically lead modernization efforts such as Zero Trust, passwordless authentication, identity automation, attribute‑based access controls, AI‑driven threat detection and response, identity models for AI agents, and continuous AI behavioral authentication.
• Define standards for API security, including API identity and access controls, secure API key and token management, least‑privilege access for machine identities, and monitoring and anomaly detection for API usage.
• Establish secure patterns for API authentication and authorization, including OAuth, OIDC, and token lifecycle management.
• Lead the design and operation of Privileged Access Management (PAM) solutions (CyberArk).
• Ensure projects are delivered within scope, budget, and schedule, balancing speed with precision.
• Lead a technical team supporting user access provisioning, deprovisioning, terminations, and password resets across multiple SaaS and on‑premise applications (Dell OneIdentity, Salesforce, SAP, Workday).
• Perform regular audits to ensure security protocols are followed and risks are proactively addressed.
• Ensure technical solutions comply with privacy laws and regulatory requirements.
• Investigate and respond to irregularities in system access with urgency and rigor.
• Establish metrics to ensure IAM solutions meet both security and business objectives.
• Plan, test, and implement configuration changes efficiently and effectively.
• Document IAM processes and procedures to enable consistency and scalability.
• Escalate and resolve issues in a timely manner, maintaining a high standard of reliability and responsiveness.

Qualifications

• 7–12+ years of professional experience in IT and/or cybersecurity with an enterprise identity management team.
• Deep expertise in IAM frameworks, Zero Trust, and modern identity protocols (SAML, OAuth, OIDC, SCIM).
• Experience with enterprise‑scale IAM platforms on premise and in the cloud.
• Strong understanding of cloud identity (Azure AD/Entra, AWS IAM, GCP IAM, SaaS and API).
• Knowledge of security architecture, threat modeling, and identity attack vectors.
• Significant demonstrated knowledge of Active Directory and Entra processes and tools, including patching, hardening, configuration, and risk management.
• Demonstrated communication skills to persuade and influence without authority and handle challenging conversations.
• Significant demonstrated knowledge of identity management processes and tools (Active Directory, Entra ID, Intune, Dell OneIdentity, Semperis, CyberArk, SAP, Salesforce, Workday).
• Demonstrated knowledge in recent advances in IAM technology.
• Preferred Bachelor’s Degree in Information Security, Computer Science or equivalent.
• Certifications such as CISSP, CRISC, CIMP, CISM.
• Experience with Active Directory, Azure A/D Synchronization, Entra ID, Intune, OKTA, Semperis, CyberArk, Zscaler, AppTotal, Automation Tools (Task Scheduler, PowerShell), InfoBlox, BloxOne, Microsoft PKI, NPS, SCCM, Patching, Illumio, Microsoft Defender, Dell OneIdentity, Microsoft NPS, JIRA Service Desk, and use of AI for IAM.

Compensation

The wage range for this position is $130,000–$150,000 per year, with the actual pay dependent on your skills and experience as they relate to the job requirements.

Location

This is a hybrid role, requiring four days in the Shelton, CT office. No relocation assistance is offered.

Sponsorship

You must be legally authorized to work in the US. Employer will not sponsor this position for employment visa status now or in the future.

Benefits

• Opportunity to grow and develop your career.
• Inclusive environment encouraging diverse perspectives and ideas.
• Challenging and unique opportunities to contribute to the success of a transforming organization.
• Comprehensive benefits globally (PB Live Well).

Equal Employment Opportunity & Disability Statement

Pitney Bowes is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard for race, color, sex, religion, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other consideration made unlawful by applicable federal, state, or local laws. All qualified applicants, including veterans and individuals with disabilities, are encouraged to apply. Individuals with disabilities who cannot apply via our online application should refer to the alternate application options via our Individuals with Disabilities link.