Manager, Identity & Access Management Engineering (Hybrid)

Securian Financial; Saint Paul (MN); Hybrid; USD 110,000 - 204,000; Full time

Benefits offered by this job

Health insurance

401(k) retirement plan

Paid time off (PTO)

Nine company holidays

Volunteer time off

Associate Resource Groups

Job summary

Securian Financial is seeking an IAM Engineering Manager to lead one or both engineering teams responsible for the design, deployment and ongoing modernization of enterprise IAM platforms. You will mentor engineers, enforce strong engineering practices, and partner with governance and operations to deliver secure, reliable identity services across the enterprise.

This hybrid role focuses on building technical talent while shaping platform strategy, with deep experience in SailPoint, CyberArk,

Qualifications

• Bachelor’s degree or equivalent work experience in CS/IS/cybersecurity
• Experience leading technology, cybersecurity, IAM, infrastructure or platform engineering in a large corporate environment
• Strong understanding of modern engineering practices: automation, source control, IaC, testing, cloud
• Experience with enterprise IAM or security tech (SailPoint, CyberArk, Ping, Venafi)
• Cloud-based infrastructure experience, AWS preferred
• Ability to balance delivery, production support, debt, lifecycle management, and modernization
• Experience developing technical staff and growth opportunities
• Strong leadership, communication and stakeholder skills
• Ability to thrive in a fast-paced environment and lead through change
• Experience in audit/governance/cybersecurity/regulatory environments

Responsibilities

• Lead one or both IAM Engineering teams for design, engineering, integration, reliability and lifecycle management of enterprise IAM platforms
• Ensure IAM platforms align with Reliability Engineering practices for reliability, resiliency and quality
• Develop and mentor IAM engineers to deepen technical depth and ownership
• Establish priorities balancing project delivery, modernization, production support and debt
• Drive consistent engineering practices across IAM, including automation, IaC, source control, testing, documentation and peer review
• Partner with IAM Governance to translate identity, access, and governance requirements into technical solutions
• Partner with IAM Operations to resolve complex service issues and automate where possible
• Work with application teams to onboard apps into SailPoint ISC and integrate with authentication, privileged access and certificate management
• Provide technical direction and coaching to senior engineers and leads
• Identify opportunities to simplify or retire legacy approaches and evolve with enterprise practices
• Manage platform lifecycle activities: upgrades, vendor roadmaps, vulnerabilities, end-of-support, capacity and risks
• Foster relationships with infrastructure, architecture, cybersecurity and business partners
• Promote ownership, collaboration, continuous learning and a positive team culture

Skills

Leadership

Communication

Stakeholder partnership

Agile / DevOps mindset

Team coaching

Education

Bachelor’s degree in computer science, information systems, cybersecurity, or equivalent

Tools

SailPoint

CyberArk

PingID

PingFederate

PingOne for Customer

Venafi

AWS

Job description

*The Securian internal job title is Info Security MGR*

Position Summary

We are looking for someone excited to step into a people leadership role within the Identity and Access Management (IAM) organization in Enterprise Cybersecurity Solutions and help lead our IAM Engineering organization.

As Securian continues to modernize and scale its IAM capabilities, this role will help shape how our core identity, access, authentication, privileged access, and certificate management platforms are engineered and supported across the enterprise. IAM Engineering partners closely with IAM Operations, IAM Governance, application teams, cybersecurity partners, and other technology teams to build reliable and secure IAM capabilities, modernize existing platforms, and continuously improve how identity services are delivered.

The IAM Engineering organization currently consists of two primary engineering teams:

• IGA Platform Engineering supports SailPoint Identity Security Cloud (ISC), including platform configuration, integrations, application onboarding, connectors, identity and entitlement models, and the AWS-hosted Virtual Appliance infrastructure that supports the service.
• Access Platform Engineering supports CyberArk, PingID, PingFederate, PingOne for Customer, Venafi TPP, and Venafi ZTPKI, along with the cloud infrastructure, integrations, automation, and engineering practices needed to operate and modernize those platforms.

Depending on the selected candidate’s qualifications, technical background, and leadership experience, this manager will initially lead one or both of these engineering teams. The broader IAM leadership model may continue to evolve as the organization and its responsibilities grow.

This role is a great fit for someone who enjoys developing technical talent, bringing structure and consistency to engineering work, solving complex problems, and helping teams modernize how they build and support technology. It is also a strong opportunity for someone who is ready to grow as a leader of people while remaining close enough to the technology to provide direction, challenge assumptions, and help engineers work through difficult problems.

Prior deep technical experience is important, but we do not expect this leader to be the deepest technical expert in every platform the teams support. Just as important is the ability to develop people, establish strong engineering practices, lead through change, build strong partnerships across technical and business teams, and build upon the existing positive, collaborative, and fun team culture.

Responsibilities

Responsibilities include, but are not limited to:

• Lead one or both IAM Engineering teams responsible for the design, engineering, integration, reliability, and lifecycle management of enterprise IAM platforms.
• Ensure IAM platforms are fully aligned with modern practices being driven by our Reliability Engineering (REO) organization as it relates to reliability, resiliency, and quality.
• Develop and mentor IAM engineers with a range of experience levels, helping them build technical depth, broaden their capabilities, and take greater ownership of the platforms they support.
• Establish clear priorities and balance project delivery, platform modernization, production support, technical debt, lifecycle management, and other engineering commitments.
• Drive consistent engineering practices across IAM platforms, including automation, infrastructure as code, source control, testing, documentation, peer review, and repeatable deployment practices.
• Partner with engineers and technical leads to improve platform resiliency, supportability, disaster recovery readiness, monitoring, and overall service health.
• Reduce reliance on individual subject matter experts by encouraging cross-training, documentation, shared ownership, and intentional development of support depth.
• Partner closely with IAM Governance to translate identity, access, role, entitlement, authentication, privileged access, and other governance requirements into sustainable technical solutions.
• Partner closely with IAM Operations to resolve complex service issues, improve escalation paths, identify opportunities for automation, and reduce manual operational work over time.
• Work with application teams and other technology partners to design and implement integrations with IAM platforms, including onboarding applications into SailPoint ISC and integrating applications with authentication, privileged access, and certificate management services.
• Provide technical direction and coaching while empowering senior engineers and technical leads to own platform decisions and lead complex initiatives.
• Identify opportunities to simplify, modernize, or retire legacy approaches and ensure engineering teams continue to evolve with broader enterprise technology practices.
• Manage platform lifecycle activities including upgrades, vendor roadmaps, vulnerabilities, end-of-support timelines, capacity needs, and technology risks.
• Build strong working relationships with Enterprise Technology infrastructure teams, application teams, architecture, cybersecurity stakeholders, vendors, and business partners.
• Foster a team environment that values ownership, collaboration, continuous learning, constructive technical challenge, and a positive team culture.

Qualifications

• Bachelor’s degree in computer science, information systems, cybersecurity, or equivalent work experience.
• Demonstrated experience leading technology, cybersecurity, IAM, infrastructure, platform engineering, or similar technical efforts and/or teams in a large corporate environment, or strong readiness to step into a people leadership role.
• Strong understanding of modern engineering and infrastructure practices, including automation, source control, infrastructure as code, testing, cloud technologies, and reliable production support.
• Experience working with enterprise IAM or security technologies such as SailPoint, CyberArk, Ping, Venafi, or similar platforms.
• Experience with cloud-based infrastructure and services, preferably including AWS.
• Ability to lead technical teams supporting a combination of SaaS platforms, cloud-hosted infrastructure, integrations, and enterprise applications.
• Proven ability to balance engineering delivery, production support, technical debt, lifecycle management, and longer-term modernization work.
• Ability to provide meaningful technical guidance without needing to personally be the subject matter expert for every technology supported by the team.
• Experience developing technical staff and creating opportunities for engineers to expand their skills, ownership, and responsibilities.
• Ability to identify areas of technical or operational risk and drive teams toward practical, sustainable solutions.
• Strong leadership, communication, organizational, and stakeholder partnership skills.
• Ability to thrive in a fast-paced environment, balance competing priorities, and lead teams through technical and organizational change while maintaining a positive team culture.
• Experience working in audit, governance, cybersecurity, or other regulated control environments.

This position will be in a hybrid working arrangement.

Securian Financial believes in hybrid work as an integral part of our culture. Associates get the benefit of working both virtually and in our offices. If you’re in a commutable distance (90 minutes) you’ll join us 3 days each week in our offices to collaborate and build relationships. Our policy allows flexibility for the reality of business and personal schedules.

Preferred Skills

Cybersecurity, Enterprise Information Security, Information Security Engineering, Information Security Management, Information Security Standards, Internal Communications, Problem Solving, Team Leadership

The Estimated Base Pay Range For This Job Is

$110,200.00 - $203,500.00

Pay may vary depending on job-related factors and individual experience, skills, knowledge, etc. More information on base pay and incentive pay (if applicable) can be discussed with a member of the Securian Financial Talent Acquisition team.

Paid Time Off

Be you. With us.

At Securian Financial, we understand that attracting top talent means offering more than just a job – it means providing a rewarding and fulfilling career. As a valued member of our high-performing team, we want you to connect with your work, your relationships and your community. Enjoy our comprehensive range of benefits designed to enhance your professional growth, well-being and work-life balance, including the advantages listed here:

• We want you to take time off for what matters most to you. Our PTO program provides flexibility for associates to take meaningful time away from work to relax, recharge and spend time doing what’s important to them. And Securian Financial rewards associates for their service by providing additional PTO the longer you stay at Securian.
• Leave programs: Securian’s flexible leave programs allow time off from work for parental leave, caregiver leave for family members, bereavement and military leave.
• Holidays: Securian provides nine company paid holidays.

Company-funded pension plan and a 401(k) retirement plan

Share in the success of our company. Securian’s 401(k) company contribution is tied to our performance up to 10 percent of eligible earnings, with a target of 5 percent. The amount is based on company results compared to goals related to earnings, sales and service.

Health insurance

From the first day of employment, associates and their eligible family members – including spouses, domestic partners and children – are eligible for medical, dental and vision coverage.

Volunteer time

We know the importance of community. Through company-sponsored events, volunteer paid time off, a dollar-for-dollar matching gift program and more, we encourage you to support organizations important to you.

Associate Resource Groups

Build connections, be yourself and develop meaningful relationships at work through associate-led ARGs. Dedicated groups focus on a variety of interests and affinities, including:

• Environmental Health & Sustainability
• Mental Wellness and Disability
• Pride at Securian Financial
• Securian Young Professionals Network
• Securian Multicultural Network
• Securian Women and Allies Network
• Servicemember Associate Resource Group

For more information regarding Securian’s benefits, please review our Benefits page.

This information is not intended to explain all the provisions of coverage available under these plans. In all cases, the plan document dictates coverage and provisions.

Securian Financial Group, Inc. does not discriminate based on race, color, religion, national origin, sex, gender, gender identity, sexual orientation, age, marital or familial status, pregnancy, disability, genetic information, political affiliation, veteran status, status in regard to public assistance or any other protected status. If you are a job seeker with a disability and require an accommodation to apply for one of our jobs, please contact us by email at [e-mail], by telephone [phone] (voice), or 711 (Relay/TTY).

Securian Financial is a drug-free workplace.

To view our privacy statement click here

To view our legal statement click here