Manager of Identity & Access Management (Technical IAM)

INSPYR Solutions; Arlington (TX); On-site; USD 145,000 - 150,000; Full time

Job summary

INSPYR Solutions in Arlington, TX, seeks a Manager of Identity & Access Management to lead the design, engineering, and operation of enterprise IAM platforms across on-premises, cloud, and hybrid environments.

You will direct a team of IAM engineers, coordinate with cybersecurity, infrastructure, and audit partners, and drive automation, privileged access, authentication, and PKI services in alignment with Zero Trust.

Qualifications

• Deep technical knowledge of IAM technologies including AD, PKI, SailPoint, Okta, CyberArk.
• Experience leading IAM program engineering and integration.
• Familiarity with zero-trust and least-privilege security concepts.

Responsibilities

• Lead IAM platform engineering, configuration, and integration across AD, SailPoint IIQ/ISC, Okta, CyberArk, and PKI.
• Oversee integrations with HR systems, ServiceNow, cloud services, and vendors.
• Ensure highly available, scalable IAM architectures in on-prem and cloud.
• Define reference architectures, patterns, and standards for IAM services.
• Govern AD and SailPoint Joiner-Mover-Leaver processes and access certifications.

Skills

IAM engineering

Security architecture

Zero Trust

RBAC

Tools

Active Directory

SailPoint IIQ

SailPoint ISC

Okta

CyberArk

PKI

Job description

Title: Manager of Identity & Access Management (Technical IAM)

Location: Arlington TX

Duration: Full-time / Permanent

Compensation: 145K-150K

Work Requirements: US Citizen, GC Holders or Authorized to Work in the US

Job Description:

About the Role

The Manager of Identity & Access Management (IAM) Engineering and Integration will lead the design, engineering, integration, and operational management of enterprise IAM platforms. This role ensures secure, scalable, and compliant identity services across Active Directory, SailPoint IdentityIQ (IIQ), SailPoint Identity Security Cloud (ISC), Okta, CyberArk, and PKI Services in on-premises, cloud, and hybrid environments.

The manager will lead a team of IAM engineers and analysts, oversee managed service partner resources, and collaborate with cybersecurity, infrastructure, application teams, and audit partners. Key responsibilities include identity lifecycle automation, privileged access management, authentication services, and certificate management aligned with Zero Trust and least-privilege principles.

Key Responsibilities

IAM Platform Engineering & Integration

• Lead engineering, configuration, integration, and lifecycle management of IAM platforms, including Active Directory, SailPoint IIQ and ISC, Okta, CyberArk, and PKI Services.
• Oversee integrations with HR systems, ServiceNow, enterprise applications, cloud services, and third-party vendors.
• Ensure resilient, highly available, and scalable IAM architectures across on-premises and cloud environments.
• Establish reference architectures, integration patterns, and technical standards for IAM services.

Active Directory

• Provide technical and operational leadership for enterprise Active Directory services across on-premises and hybrid environments.
• Define AD architecture, design standards, and operational practices aligned with Zero Trust and least-privilege security.
• Oversee directory hygiene and lifecycle management for user objects, service accounts, groups, and delegated administration.
• Govern AD groups and service accounts in alignment with SailPoint-driven Joiner-Mover-Leaver (JML) processes and access certifications.
• Partner with Identity Governance teams to ensure AD entitlements are accurately modeled, managed, and auditable within SailPoint.
• Manage secure integration between Active Directory and Okta, including federation, authentication flows, and directory synchronization.
• Enhance privileged access controls for Active Directory in coordination with CyberArk, protecting domain-level and Tier 0 accounts.
• Lead remediation of legacy groups, orphaned accounts, excessive permissions, and insecure configurations.
• Establish monitoring, alerting, and operational metrics for directory availability, security posture, and access integrity.
• Serve as the escalation point for directory-related incidents, audits, and compliance inquiries.
• Collaborate with Infrastructure, Endpoint, Cloud, and Security Architecture teams to maintain Active Directory as a foundational enterprise identity control.

Identity Governance & Lifecycle Management

• Own Joiner-Mover-Leaver (JML) automation, role-based access control (RBAC), entitlement modeling, and access request workflows using SailPoint.
• Ensure consistent execution of access certifications.
• Partner with application owners and engineers to onboard applications into IAM governance and provisioning frameworks.
• Ensure entitlement metadata is complete, accurate, and properly maintained.
• Assist with testing in lower environments.

Privileged Access & Authentication Services

• Lead implementation and ongoing enhancement of CyberArk for privileged account management, credential vaulting, and session monitoring.
• Oversee Okta services, including single sign-on (SSO), multifactor authentication (MFA), and API authentication.
• Ensure authentication services meet enterprise security, user experience, and regulatory requirements.

PKI & Certificate Services

• Manage enterprise Public Key Infrastructure (PKI), including certificate issuance, automation, renewal, and lifecycle management.
• Ensure certificates are properly governed and integrated across applications, infrastructure, and security platforms.
• Support enterprise certificate compliance requirements.

Security, Risk & Compliance

• Ensure IAM controls meet regulatory and audit requirements, including SOX and internal cybersecurity standards.
• Support internal and external audits by providing evidence, conducting walkthroughs, and developing remediation plans.
• Understand and support look-back efforts.
• Identify IAM risks, vulnerabilities, and control gaps, and lead remediation efforts.
• Lead the engineering, maintenance, and modernization of IAM platforms.
• Identify mitigating controls to reduce risk.
• Ensure compliance with internal policies, audit requirements, and applicable regulatory frameworks.

Qualifications

Required Knowledge & Skills

• Deep technical knowledge of IAM technologies, including Active Directory, PKI, SailPoint, Okta, CyberArk, and modern authentication standards.
• Strong understanding of identity governance, privileged access controls,

About INSPYR Solutions:

As a leading information technology partner, we connect top IT talent with our clients to provide innovative business solutions through our IT Staffing, Professional Services, and Infrastructure Solutions divisions. We understand and value the unique needs of highly-skilled information technology professionals in the industry and always strive to stay above the curve. Our company was founded on the following core values: Be the Best, Understand the Urgency, Never Ever Give Up, Have the Courage to Excel, and Make a Contribution. We take pride in our business model and strive to create a positive workplace environment through an exemplary culture.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.

Applicants requiring reasonable accommodation during the application or interview process should contact [e-mail] for assistance.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.