Manager, Identity and Access Management

NorthMark Strategies LLC; Dallas (TX); On-site; USD 140,000 - 180,000; Full time

Job summary

NorthMark Compute & Cloud in Dallas seeks a Manager of Identity and Access Management to lead the IAM team, shape strategy, and drive zero-trust across on-prem and cloud environments.

You will own identity lifecycle, RBAC, PAM, and access governance across Microsoft Entra ID, plus workload identity using SPIFFE/SPIRE, PKI, and the adoption of mTLS in distributed systems. Collaborate with Platform Engineering, DevOps, and IT leadership to embed IAM into CI/CD and IaC.

Qualifications

• 5+ years in identity and access management or security engineering.
• 2–3+ years leading IAM or security engineering team.
• Deep expertise in Microsoft Entra ID (Azure AD), including conditional access, identity governance, PIM, and enterprise app integration.
• Hands-on experience with SPIFFE/SPIRE or workload identity frameworks and cryptographic identity attestation.

Responsibilities

• Lead, mentor, and develop a team of IAM engineers, setting priorities and fostering growth.
• Own the strategy and roadmap for enterprise identity, including RBAC, PAM, and access governance across Microsoft Entra ID.
• Drive workload and service identity programs using SPIFFE/SPIRE for cryptographically verifiable identity.
• Oversee PKI strategy and certificate lifecycle management across the enterprise.
• Lead adoption of mTLS for service-to-service communication across microservices and cloud environments.
• Embed IAM controls into CI/CD pipelines, IaC workflows, and platform architecture.
• Establish identity governance frameworks with access reviews and least-privilege enforcement.

Skills

Identity and access management

Team leadership

Zero trust

mTLS

PKI fundamentals

Azure AD / Entra ID

CI/CD security

Education

Bachelor's or higher in CS / Security

Tools

SPIFFE/SPIRE

Kubernetes

HashiCorp Vault

Certificate management tools

Job description

## Manager, Identity and Access ManagementApplylocations: Dallas, TXtime type: Full timeposted on: Posted 2 Days Agojob requisition id: R13308**The Company**NorthMark Compute & Cloud (NMC2) is backed by dedicated leadership and investment, with a clear mission as it operates at the bleeding edge of technology. Its goal is to scale and enhance the high-performance computing (HPC) and cloud infrastructure that supports its clients’ research, production, and delivery, enabling breakthroughs that shape the industries of tomorrow. Its engineers build critical infrastructure to eliminate friction in scientific research, simulations, analysis, and decision-making, accelerating discovery and driving faster innovation.**The Position**The Identity and Access Management team sits within NMC2's Security organization and is responsible for ensuring that every human, service, and workload interacting with NMC2's platforms is verifiably identified, appropriately authorized, and continuously validated. In an environment where HPC workloads, cloud services, and distributed systems operate at massive scale, identity is the foundational control plane.As the Manager of Identity and Access Management, you will lead a team of engineers responsible for the full spectrum of identity from enterprise identity and access governance to workload and service identity using cryptographic attestation via SPIFFE/SPIRE, mTLS, and PKI. You will set the strategic direction for how NMC2 establishes trust across its human and non-human identity landscape, drive the maturation of the organization's zero trust posture, and serve as the primary IAM partner to Platform Engineering, DevOps, and IT leadership. This role demands both deep technical fluency across modern identity protocols and the leadership capability to build a high-performing team and drive identity-first thinking across the organization.**Responsibilities*** Lead, mentor, and develop a team of IAM engineers, setting clear priorities, fostering technical growth, and cultivating a collaborative, high-performing team culture* Own the strategy and roadmap for NMC2's enterprise identity program, including identity lifecycle management, role-based access control (RBAC), privileged access management (PAM), and access governance across Microsoft Entra ID and connected systems* Drive the design, implementation, and operation of workload and service identity programs using SPIFFE/SPIRE, ensuring cryptographically verifiable identity for services, workloads, and infrastructure components across HPC and cloud environments* Oversee the organization's PKI strategy and certificate lifecycle management program, ensuring the integrity, availability, and scalability of certificate issuance, rotation, and revocation across the enterprise* Lead the adoption and enforcement of mTLS for service-to-service communication, partnering with Platform Engineering and DevOps teams to embed mutual authentication into the fabric of NMC2's distributed systems* Drive NMC2's zero trust identity strategy, ensuring continuous validation of user, device, and workload identity as the primary access control mechanism across on-premises and cloud environments* Partner with Platform Engineering, DevOps, and IT leadership to integrate IAM controls into CI/CD pipelines, IaC workflows, and platform architecture, ensuring identity is never bolted on as an afterthought* Establish and maintain identity governance frameworks, including access reviews, entitlement management, and least-privilege enforcement across both human and non-human identities* Translate complex identity risks, program metrics, and strategic initiatives into clear, concise reporting for security leadership and executive stakeholders* Stay current on emerging identity threats, standards, and technologies — including evolving SPIFFE/SPIRE ecosystem developments, certificate transparency, and zero trust frameworks — continuously maturing the team's capabilities**Requirements*** 6+ years of experience in identity and access management or security engineering, with hands-on depth across both enterprise and workload identity domains* 2–3+ years of experience leading or managing an IAM or security engineering team, with demonstrated ability to develop talent and drive team performance* Deep expertise in Microsoft Entra ID (Azure AD), including conditional access, identity governance, privileged identity management (PIM), and enterprise application integration* Hands-on experience with SPIFFE/SPIRE or equivalent workload identity frameworks, and a strong understanding of cryptographic identity attestation in distributed and containerized environments* Strong command of PKI fundamentals, including certificate authority design, certificate lifecycle management, and certificate issuance patterns for large-scale environments* Experience designing and enforcing mTLS architectures for service-to-service communication across microservices, container orchestration platforms, and cloud-native environments* Familiarity with zero trust architecture principles and experience applying them across a hybrid enterprise and cloud-native environment* Experience with privileged access management solutions and least-privilege enforcement strategies across both human and service accounts* Excellent communication skills with the ability to translate complex identity concepts and risks into clear reporting and recommendations for engineering peers and executive leadership**Nice to Have*** Experience with secrets management platforms such as HashiCorp Vault, with integration into PKI and workload identity workflows* Background working in HPC, research computing, or highly regulated environments where identity assurance requirements are exceptionally stringent* Familiarity with certificate transparency logs and emerging standards in machine identity management* Relevant certifications such as CISSP, CISM, Microsoft Certified: Identity and Access Administrator, or equivalent*It is impossible to list every requirement for, or responsibility of, any position. Similarly, we cannot identify all the skills a position may require since job responsibilities and the Company’s needs may change over time. Therefore, the above job description is not comprehensive or exhaustive. The Company reserves the right to adjust, add to or eliminate any aspect of the above description. The Company also retains the right to require all employees to undertake additional or different job responsibilities when necessary to meet business needs.***Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.**