Manager, Identity Security Engineering

RiseMe; Houston (TX); On-site; USD 150,000 - 190,000; Full time

Job summary

Enterprise Products Partners L.P. is seeking an Identity Security Engineering Manager to lead the IGA, authentication security, and PAM programs within the Cybersecurity team.

You will govern identity lifecycle, access control, and authentication services while partnering with audit, compliance, and business units to align with regulatory requirements. The role requires extensive IAM leadership, hands-on platform expertise (SailPoint IdentityIQ, PAM tools), and strong communication to executive

Qualifications

• Bachelor's degree or equivalent work experience in IT/cybersecurity.
• 7+ years IAM experience.
• 5+ years of progressive IT experience.
• 3+ years in leadership roles overseeing security/identity teams.
• Strong IAM program mgmt in large enterprise environments.
• Knowledge of IGA, RBAC, PAM.
• Experience with authentication tech including MFA, SSO, federation.

Responsibilities

• Provide leadership for Identity Governance, Authentication Security, and Privileged Access Management teams.
• Develop and execute the identity security roadmap aligned with cyber, compliance, and business goals.
• Oversee identity lifecycle, access certification, role mgmt, SOD, and privileged access controls.
• Lead SailPoint IdentityIQ and related platforms administration.
• Drive improvements in identity governance controls and risk mitigation.
• Manage AD/LDAP, SSO, MFA, and federated identity services.
• Oversee privileged access security processes and credential management.
• Coordinate with audit/compliance/risk teams to meet regulatory requirements.
• Establish standards and governance for identity and access management.
• Lead project delivery, budgets, vendor relationships, and strategic initiatives.

Skills

IAM leadership

IGA & RBAC

PAM

SailPoint IdentityIQ

SailPoint FAM

CyberArk/Delinea/BeyondTrust

MFA / SSO

Java/Python

Active Directory/LDAP

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

SailPoint IdentityIQ

SailPoint File Access Manager

CyberArk/Delinea/BeyondTrust PAM

REST APIs/JSON/SCIM/SOAP

Job description

Enterprise Products Partners L.P. is one of the largest publicly traded partnerships and a leading North American provider of midstream energy services to producers and consumers of natural gas, NGLs, crude oil, refined products and petrochemicals. Our services include: natural gas gathering, treating, processing, transportation and storage; NGL transportation, fractionation, storage and import and export terminals; crude oil gathering, transportation, storage and terminals; petrochemical and refined products transportation, storage and terminals; and a marine transportation business that operates primarily on the United States inland and Intracoastal Waterway systems. The partnership’s assets include approximately 50,000 miles of pipelines; 260 million barrels of storage capacity for NGLs, crude oil, refined products and petrochemicals; and 14 billion cubic feet of natural gas storage capacity.

The Identity Security Engineering Manager is responsible for leading the organization's Identity Governance & Administration (IGA), Authentication Security, and Privileged Access Management (PAM) programs. As part of the Cybersecurity team, this leadership role is responsible for protecting the organization's information assets by governing the processes, policies, and technologies that manage digital identities, authentication methods, privileged accounts, and access to critical systems and information.

This position oversees a team of cybersecurity professionals responsible for identity lifecycle management, access governance, authentication services, privileged account security, compliance initiatives, and the implementation of security controls to reduce organizational risk. The Manager will work closely with business leaders, application owners, infrastructure teams, audit, compliance, and cybersecurity leadership to ensure identity security strategies align with business objectives and regulatory requirements. Other responsibilities include, but are not limited to:

• Provide leadership and strategic direction for the Identity Governance, Authentication Security, and Priviledged Access Management teams.

• Develop and execute the organization's identity security roadmap, ensuring alignment with cybersecurity, compliance, and business objectives.

• Oversee the design, implementation, and operation of identity lifecycle management, access certification, role management, segregation of duties (SOD), privileged access controls, and authentication technologies.

• Lead the administration and enhancement of SailPoint IdentityIQ and related identity security platforms.

• Drive continuous improvement of identity governance controls, processes, and risk mitigation strategies.

• Manage authentication technologies including Active Directory, LDAP directories, single sign-on (SSO), multifactor authentication (MFA), and federated identity services.

• Oversee privileged access security solutions and processes, including privileged account governance, credential management, secrets management, and privileged session controls.

• Partner with internal audit, compliance, and risk management teams to ensure adherence to regulatory and cybersecurity requirements.

• Establish standards, policies, procedures, and governance frameworks for identity and access management.

• Manage project delivery, resource planning, budgets, vendor relationships, and strategic initiatives related to identity security.

• Coordinate development, testing, deployment, and operational support activities utilizing established SDLC methodologies.

• Provide executive-level reporting on identity security program effectiveness, risks, metrics, and strategic initiatives.

• Lead remediation efforts related to identity, authentication, and privileged access security events.

• Recruit, mentor, develop, and retain high-performing security professionals.

The successful candidate will meet the following qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline, or equivalent work experience.

• 7+ years of experience with IAM experience.

• 5+ additional years of progressive IT experience.

• 3+ years of leadership, supervisory, or management experience leading security, identity, or infrastructure teams.

• Strong experience managing identity governance, authentication, and access management programs within a large enterprise environment.

• Thorough understanding of: Identity Governance & Administration (IGA), Role-Based Access Control (RBAC).

• Privileged Access Management (PAM).

• Authentication and Federation Technologies.

• Experience identifying and implementing improvements to access governance controls and risk mitigation measures.

• Knowledge of Active Directory, LDAP, Oracle Internet Directory (OID), and related directory services technologies.

• Experience with architecture and design across application, database, server, desktop, and network platforms.

• Ability to coordinate and manage development and deployment activities utilizing SDLC frameworks.

• Experience designing and implementing custom workflows, approval processes, forms, and provisioning integrations.

• Development experience with Java, Python, PowerShell, JSON, REST APIs, SCIM, and SOAP-based web services.

• Strong analytical and troubleshooting skills with experience supporting complex identity and access environments.

• Experience developing technical standards, security documentation, architecture diagrams, and operational procedures.

• Excellent verbal and written communication skills, with the ability to communicate technical concepts to executive leadership and business stakeholders.

• Proven ability to lead, mentor, and develop technical teams.

  Experience with SailPoint File Access Manager (FAM).

• Experience with SailPoint Identity IQ.

• Experience with CyberArk, Delinea, BeyondTrust, or similar PAM platforms.

• Experience implementing enterprise authentication technologies including MFA, SSO, federation, and passwordless authentication.

• CISSP, CISM, Security+, or other cybersecurity certifications.

• Experience managing cybersecurity programs in regulated industries.