IT Security Lead – Identity & Access

Jobtailor

Connecticut

On-site

USD 120,000 - 180,000

Full time

3 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Jobtailor is seeking a Senior IAM Architect to lead identity security across cloud and on‑prem environments. You will design authentication, authorization, PAM, SSO, MFA, and API security, guiding modernization toward Zero Trust. The role requires deep IAM expertise and leadership to drive enterprise initiatives.

You will coordinate with stakeholders to implement secure patterns, manage lifecycle processes, and ensure regulatory compliance while mentoring the IAM team.

Qualifications

7-12+ years of IT/Cybersecurity experience with an Enterprise IAM team.
Deep expertise in IAM frameworks, Zero Trust, and modern identity protocols (SAML, OAuth, OIDC, SCIM).
Experience with enterprise IAM platforms (on‑prem and cloud).
Strong cloud identity knowledge (Azure AD/Entra, AWS IAM, GCP IAM).
Knowledge of AD/Entra processes, patching, hardening, risk management.
Experience with identity tools: Active Directory, Entra ID, Intune, Dell OneIdentity, CyberArk, SAP, Salesforce, Workday.
Bachelor’s in Information Security/CS preferred; CISSP/CRISC/CIMP/CISM preferred.
Authorized to work in the US; visa sponsorship not offered.

Responsibilities

Develop and govern IAM strategy, roadmap, and governance model.
Architect authentication, authorization, PAM, SSO, MFA, API security, and lifecycle management.
Lead modernization efforts: Zero Trust, passwordless, identity automation, AI‑driven threat detection.
Define secure patterns for API identity, OAuth, and token management.
Lead Privileged Access Management with CyberArk.
Ensure projects meet scope, budget, and schedule.
Oversee provisioning, deprovisioning, and password resets across SaaS and on‑prem apps.
Perform regular audits and address security risks proactively.
Ensure compliance with privacy laws and regulatory requirements.
Investigate irregularities in system access and establish metrics.

Skills

IAM

Zero Trust

SAML

OAuth

OIDC

SCIM

Communication

Team Leadership

Education

Bachelor's degree in Information Security / Computer Science

Tools

CyberArk

Dell OneIdentity

SAP

Workday

Azure AD/Entra

AWS IAM

GCP IAM

Intune

OKTA

Job description

Responsibilities

Develop and maintain the organization’s Identity & Access Management strategy, roadmap, and governance model
Architect and oversee solutions for authentication, authorization, privileged access, SSO, MFA, SaaS security posture, API access controls, conditional access policies, and lifecycle management
Technically lead modernization efforts including Zero Trust, passwordless authentication, identity automation, Attribute-Based Access Controls, AI-driven threat detection and response, identity models for AI agents, and continuous AI behavioral authentication
Define standards and secure patterns for API identity, access controls, API key and token management, OAuth, OIDC, least-privilege machine identities, lifecycle management, monitoring, and anomaly detection
Lead the design and operation of Privileged Access Management solutions using CyberArk
Ensure projects are delivered within scope, budget, and schedule
Lead a technical team supporting provisioning, deprovisioning, terminations, and password resets across SaaS and on-premise applications including Dell OneIdentity, Salesforce, SAP, and Workday
Perform regular audits and proactively address security risks
Ensure technical solutions comply with privacy laws and regulatory requirements
Investigate and respond to irregularities in system access
Establish metrics to measure IAM security and business objectives
Plan, test, and implement configuration changes
Document IAM processes and procedures
Escalate and resolve issues in a timely manner

Requirements

7-12 plus years professional experience in IT and/or Cybersecurity with an Enterprise Identity Management Team
Deep expertise in IAM frameworks, Zero Trust, and modern identity protocols (SAML, OAuth, OIDC, SCIM)
Experience with enterprise-scale IAM platforms, on-premise and cloud platforms
Strong understanding of cloud identity (Azure AD/Entra, AWS IAM, GCP IAM, SaaS and API)
Knowledge of security architecture, threat modeling, and identity attack vectors
Significant demonstrated knowledge of Active Directory and Entra processes and tools, including patching, hardening, configuration, and risk management
Demonstrated communication skills to communicate, persuade, influence without authority, and handle challenging conversations
Significant demonstrated knowledge of identity management processes and tools, including Active Directory, Entra ID, Intune, Dell OneIdentity, Semperis, CyberArk, SAP, Salesforce, and Workday
Demonstrated knowledge of recent advances in IAM technology
Bachelor's Degree in Information Security, Computer Science or equivalent (preferred)
Information Security Certifications such as CISSP, CRISC, CIMP and/or CISM (preferred)
Knowledge and experience with Active Directory, Entra ID, Intune, OKTA, Semperis, CyberArk, Zscaler AppTotal, Task Scheduler, PowerShell, InfoBlox BloxOne, Microsoft PKI, NPS, SCCM Patching, Illumio, Microsoft Defender, Dell OneIdentity, Microsoft NPS, JIRA Service Desk, and AI
Must be legally authorized to work in the US
Employer will not sponsor employment visa status now or in the future

Core Competencies

Demonstrates extensive expertise in Identity and Access Management (IAM) frameworks, Zero Trust principles, and modern identity protocols, with a strong focus on cloud identity solutions and security architecture. Proven ability to lead technical teams, manage IAM projects, and ensure compliance with regulatory requirements while addressing security risks.

Highest-signal resume keywords