Manager, Identity & Access Management Engineering (Hybrid)

Securian; Saint Paul (MN); Hybrid; USD 110,000 - 204,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Pension plan

Paid time off

Company holidays

Volunteer time

Employee resource groups

Job summary

Securian Financial is seeking an IAM Engineering leader to guide the design, delivery, and modernization of our enterprise IAM platforms. You will mentor engineers, define priorities, and partner with Governance, Operations, and business teams to secure and scale identity services.

The role combines hands-on leadership with strategic direction, focusing on SailPoint ISC, CyberArk, Ping, and Venafi ecosystems, in a hybrid environment with opportunities to grow as a people leader while staying

Qualifications

• Bachelor's degree or equivalent work experience in a technical field.
• Proven experience leading technology, cybersecurity, IAM, infrastructure, or platform engineering teams in a large org.
• Strong understanding of automation, source control, IaC, testing, cloud tech, and production support.
• Experience with enterprise IAM/security technologies (SailPoint/CyberArk/Ping/Venafi or similar).
• Ability to mentor engineers, set priorities, and drive modernization while maintaining a positive culture.

Responsibilities

• Lead one or both IAM Engineering teams responsible for design, engineering, integration, reliability, and lifecycle management of enterprise IAM platforms.
• Ensure IAM platforms align with Reliability Engineering for reliability, resiliency, and quality.
• Develop and mentor IAM engineers to build depth, ownership, and capabilities.
• Establish priorities balancing delivery, modernization, production support, debt and lifecycle management.
• Drive consistent engineering practices: automation, IaC, source control, testing, documentation, peer review, deployment.

Skills

Leadership

People development

Communication

Stakeholder management

Cloud and infrastructure

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

SailPoint

CyberArk

PingFederate

PingOne

Venafi

AWS

Job description

Position Summary

We are looking for someone excited to step into a people leadership role within the Identity and Access Management (IAM) organization in Enterprise Cybersecurity Solutions and help lead our IAM Engineering organization.

As Securian continues to modernize and scale its IAM capabilities, this role will help shape how our core identity, access, authentication, privileged access, and certificate management platforms are engineered and supported across the enterprise. IAM Engineering partners closely with IAM Operations, IAM Governance, application teams, cybersecurity partners, and other technology teams to build reliable and secure IAM capabilities, modernize existing platforms, and continuously improve how identity services are delivered.

The IAM Engineering organization currently consists of two primary engineering teams:

• IGA Platform Engineering supports SailPoint Identity Security Cloud (ISC), including platform configuration, integrations, application onboarding, connectors, identity and entitlement models, and the AWS-hosted Virtual Appliance infrastructure that supports the service.
• Access Platform Engineering supports CyberArk, PingID, PingFederate, PingOne for Customer, Venafi TPP, and Venafi ZTPKI, along with the cloud infrastructure, integrations, automation, and engineering practices needed to operate and modernize those platforms.

Depending on the selected candidate's qualifications, technical background, and leadership experience, this manager will initially lead one or both of these engineering teams. The broader IAM leadership model may continue to evolve as the organization and its responsibilities grow.

This role is a great fit for someone who enjoys developing technical talent, bringing structure and consistency to engineering work, solving complex problems, and helping teams modernize how they build and support technology. It is also a strong opportunity for someone who is ready to grow as a leader of people while remaining close enough to the technology to provide direction, challenge assumptions, and help engineers work through difficult problems.

Prior deep technical experience is important, but we do not expect this leader to be the deepest technical expert in every platform the teams support. Just as important is the ability to develop people, establish strong engineering practices, lead through change, build strong partnerships across technical and business teams, and build upon the existing positive, collaborative, and fun team culture.

Responsibilities

Responsibilities include, but are not limited to:

• Lead one or both IAM Engineering teams responsible for the design, engineering, integration, reliability, and lifecycle management of enterprise IAM platforms.
• Ensure IAM platforms are fully aligned with modern practices being driven by our Reliability Engineering (REO) organization as it relates to reliability, resiliency, and quality.
• Develop and mentor IAM engineers with a range of experience levels, helping them build technical depth, broaden their capabilities, and take greater ownership of the platforms they support.
• Establish clear priorities and balance project delivery, platform modernization, production support, technical debt, lifecycle management, and other engineering commitments.
• Drive consistent engineering practices across IAM platforms, including automation, infrastructure as code, source control, testing, documentation, peer review, and repeatable deployment practices.
• Partner with engineers and technical leads to improve platform resiliency, supportability, disaster recovery readiness, monitoring, and overall service health.
• Reduce reliance on individual subject matter experts by encouraging cross-training, documentation, shared ownership, and intentional development of support depth.
• Partner closely with IAM Governance to translate identity, access, role, entitlement, authentication, privileged access, and other governance requirements into sustainable technical solutions.
• Partner closely with IAM Operations to resolve complex service issues, improve escalation paths, identify opportunities for automation, and reduce manual operational work over time.
• Work with application teams and other technology partners to design and implement integrations with IAM platforms, including onboarding applications into SailPoint ISC and integrating applications with authentication, privileged access, and certificate management services.
• Provide technical direction and coaching while empowering senior engineers and technical leads to own platform decisions and lead complex initiatives.
• Identify opportunities to simplify, modernize, or retire legacy approaches and ensure engineering teams continue to evolve with broader enterprise technology practices.
• Manage platform lifecycle activities including upgrades, vendor roadmaps, vulnerabilities, end-of-support timelines, capacity needs, and technology risks.
• Build strong working relationships with Enterprise Technology infrastructure teams, application teams, architecture, cybersecurity stakeholders, vendors, and business partners.
• Foster a team environment that values ownership, collaboration, continuous learning, constructive technical challenge, and a positive team culture.

Qualifications

• Bachelor's degree in computer science, information systems, cybersecurity, or equivalent work experience.
• Demonstrated experience leading technology, cybersecurity, IAM, infrastructure, platform engineering, or similar technical efforts and/or teams in a large corporate environment, or strong readiness to step into a people leadership role.
• Strong understanding of modern engineering and infrastructure practices, including automation, source control, infrastructure as code, testing, cloud technologies, and reliable production support.
• Experience working with enterprise IAM or security technologies such as SailPoint, CyberArk, Ping, Venafi, or similar platforms.
• Experience with cloud-based infrastructure and services, preferably including AWS.
• Ability to lead technical teams supporting a combination of SaaS platforms, cloud-hosted infrastructure, integrations, and enterprise applications.
• Proven ability to balance engineering delivery, production support, technical debt, lifecycle management, and longer-term modernization work.
• Ability to provide meaningful technical guidance without needing to personally be the subject matter expert for every technology supported by the team.
• Experience developing technical staff and creating opportunities for engineers to expand their skills, ownership, and responsibilities.
• Ability to identify areas of technical or operational risk and drive teams toward practical, sustainable solutions.
• Strong leadership, communication, organizational, and stakeholder partnership skills.
• Ability to thrive in a fast-paced environment, balance competing priorities, and lead teams through technical and organizational change while maintaining a positive team culture.
• Experience working in audit, governance, cybersecurity, or other regulated control environments.

This position will be in a hybrid working arrangement.

Securian Financial believes in hybrid work as an integral part of our culture. Associates get the benefit of working both virtually and in our offices. If you're in a commutable distance (90 minutes) you'll join us 3 days each week in our offices to collaborate and build relationships. Our policy allows flexibility for the reality of business and personal schedules.

Preferred Skills:

Cybersecurity, Enterprise Information Security, Information Security Engineering, Information Security Management, Information Security Standards, Internal Communications, Problem Solving, Team Leadership

The estimated base pay range for this job is:

$110,200.00 - $203,500.00

Pay may vary depending on job-related factors and individual experience, skills, knowledge, etc. More information on base pay and incentive pay (if applicable) can be discussed with a member of the Securian Financial Talent Acquisition team.

Be you. With us.

At Securian Financial, we understand that attracting top talent means offering more than just a job - it means providing a rewarding and fulfilling career. As a valued member of our high-performing team, we want you to connect with your work, your relationships and your community. Enjoy our comprehensive range of benefits designed to enhance your professional growth, well-being and work-life balance, including the advantages listed here:

Paid time off:

• We want you to take time off for what matters most to you. Our PTO program provides flexibility for associates to take meaningful time away from work to relax, recharge and spend time doing what's important to them. And Securian Financial rewards associates for their service by providing additional PTO the longer you stay at Securian.
• Leave programs: Securian's flexible leave programs allow time off from work for parental leave, caregiver leave for family members, bereavement and military leave.
• Holidays: Securian provides nine company paid holidays.

Company-funded pension plan and a 401(k) retirement plan:

Share in the success of our company. Securian's 401(k) company contribution is tied to our performance up to 10 percent of eligible earnings, with a target of 5 percent. The amount is based on company results compared to goals related to earnings, sales and service.

Health insurance:

From the first day of employment, associates and their eligible family members - including spouses, domestic partners and children - are eligible for medical, dental and vision coverage.

Volunteer time:

We know the importance of community. Through company-sponsored events, volunteer paid time off, a dollar-for-dollar matching gift program and more, we encourage you to support organizations important to you.

Associate Resource Groups:

• Environmental Health & Sustainability
• Mental Wellness and Disability
• Pride at Securian Financial
• Securian Young Professionals Network
• Securian Multicultural Network
• Securian Women and Allies Network
• Servicemember Associate Resource Group

For more information regarding Securian's benefits, please review our Benefits page.

This information is not intended to explain all the provisions of coverage available under these plans. In all cases, the plan document dictates coverage and provisions.

Securian Financial Group, Inc. does not discriminate based on race, color, religion, national origin, sex, gender, gender identity, sexual orientation, age, marital or familial status, pregnancy, disability, genetic information, political affiliation, veteran status, status in regard to public assistance or any other protected status. If you are a job seeker with a disability and require an accommodation to apply for one of our jobs, please contact us by email at [e-mail], by telephone [phone] (voice), or 711 (Relay/TTY).

Securian Financial is a drug-free workplace.

To view our privacy statement click here

To view our legal statement click here