IT Security Identity & Access Technical Leader

Top Prospect Group; Trumbull (CT); Remote; USD 150,000 - 190,000; Full time

Job summary

Top Prospect Group is seeking an Identity & Access Management (IAM) Technical Leader to drive modernization of the enterprise IAM. You will lead strategy, architecture, and a multi-year roadmap, with hands-on depth in AD, Entra ID, SSO, MFA, and PAM across on-prem and cloud environments.

The role requires presenting to senior leadership, influencing cross-functional teams, and delivering secure, scalable identity solutions while guiding lifecycle management and zero-trust initiatives.

Qualifications

• 7+ years of IT and/or cybersecurity experience with enterprise IAM focus.
• Hands-on expertise in AD and Microsoft Entra ID (Azure AD).
• Strong grasp of IAM concepts, architecture and lifecycle processes.
• Experience with SSO, MFA, CA, authentication and authorization.
• Knowledge of SAML, OAuth, OIDC, SCIM protocols.
• Experience across on-premises and cloud identity environments.
• Strong ability to present to senior leadership.

Responsibilities

• Lead the enterprise IAM strategy, architecture, and multi-year roadmap.
• Design, implement, and maintain identity solutions across on-prem and cloud.
• Provide technical leadership for AD and Entra ID, including CA, MFA, passwordless.
• Oversee identity lifecycle processes: provisioning, deprovisioning, access management.
• Drive IAM modernization: Zero Trust, automation, secure authn/authz.
• Guide privileged access and access controls; share technical guidance.
• Collaborate with Security, Infrastructure, HR, Engineering and business teams.
• Troubleshoot identity/access issues and security concerns.
• Develop standards, docs, processes, and metrics for IAM.
• Present solutions, risks, and status to senior leadership and stakeholders.
• Lead technical projects end-to-end from design through implementation.

Skills

Leadership

Communication

Strategic thinking

Cross-functional collaboration

Scripting/Automation

PowerShell

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Active Directory

Microsoft Entra ID (Azure AD)

Okta

CyberArk PAM

Dell One Identity

Semperis

AWS IAM

GCP IAM

Zscaler

Job description

IT Security Identity & Access Technical Leader

Direct Hire / 150K and up - DOE - with yearly bonus

REMOTE - EAST COAST Candidates only

• Our client is near Trumbull CT - Please note if you are local within 60 miles onsite is expected

Need someone who can assess where the IAM program is today, define where it needs to go, build a multi-year strategy and roadmap, determine how to modernize identity, Zero Trust, PAM and lifecycle management, gain leadership buy‑in, and then lead that transformation.

• 1. IAM strategy / future-state roadmap — MUST HAVE
• 2. Enterprise IAM architecture / transformation leadership — MUST HAVE
• 3. Ability to present and influence senior leadership — MUST HAVE
• 4. AD + Entra — still important, but not the entire job
• 5. Zero Trust / PAM / IGA / SSO / cloud identity modernization —
• 6. Hands‑on technical depth —

We are seeking an experienced Identity & Access Management (IAM) Technical Leader to help lead and modernize the organization's enterprise IAM environment. This is a highly technical role requiring strong hands‑on experience with Active Directory, Microsoft Entra ID, and enterprise IAM, along with the ability to communicate technical concepts and recommendations to senior leadership.

Key Responsibilities

• Lead and support the enterprise Identity & Access Management (IAM) strategy, architecture, and roadmap.
• Design, implement, and maintain identity and access solutions across on‑premise and cloud environments.
• Provide technical leadership for Active Directory and Microsoft Entra ID, including synchronization, application integrations, SSO, Conditional Access, MFA, and passwordless authentication.
• Lead identity lifecycle processes including provisioning, deprovisioning, access management, and terminations.
• Support IAM modernization initiatives including Zero Trust, identity automation, and secure authentication/authorization.
• Provide technical guidance around privileged access, authentication, authorization, and access controls.
• Partner with Security, Infrastructure, HR, Engineering, and business teams to implement secure and scalable identity solutions.
• Troubleshoot and investigate identity/access issues and security concerns.
• Develop standards, documentation, processes, and metrics around IAM.
• Present technical solutions, risks, recommendations, and project status to senior leadership and business stakeholders.
• Lead technical projects from design through implementation.

Required Experience

• 7+ years of IT and/or Cybersecurity experience, with significant experience in enterprise IAM.
• Strong hands‑on experience with Active Directory and Microsoft Entra ID (Azure AD).
• Strong understanding of enterprise Identity & Access Management concepts, architecture, and lifecycle processes.
• Experience with SSO, MFA, Conditional Access, authentication and authorization.
• Strong knowledge of modern identity protocols including SAML, OAuth, OIDC, and SCIM.
• Experience working across both on‑premise and cloud identity environments.
• Strong communication skills with the ability to present technical information and recommendations to senior leadership.
• Ability to influence and collaborate across technical and business teams without direct authority.
• Experience with scripting/automation, preferably PowerShell.

Preferred / Additional Experience

• CyberArk / Privileged Access Management (PAM)
• Okta
• Dell One Identity
• Semperis
• AWS IAM or GCP IAM
• API security / machine identities
• Zscaler
• Microsoft PKI / NPS / SCCM

Education/Certifications:

Bachelor's degree in Computer Science, Information Security, or related field preferred. CISSP, CISM, CRISC, or similar certifications are a plus.

Work Authorization:

Must be legally authorized to work in the U.S. No current or future sponsorship available.