Manager, Security Architecture and IAM

Seminole Hard Rock; United States; On-site; USD 150,000 - 230,000; Full time

Job summary

Seminole Hard Rock is seeking a Manager of Identity & Access Management (IAM) and Automation to lead enterprise IAM and a centralized automation engineering capability across the cybersecurity organization.

The role requires technical depth, leadership of engineering teams, and the ability to engage both engineers and executives to accelerate security outcomes enterprise-wide. This is a senior, cross-functional leadership position.

Qualifications

• Own the end-to-end enterprise IAM program: vision, roadmap, governance structure, budget, and executive reporting
• Define target-state IAM architecture and drive alignment across IT, HR, Legal, Compliance, and property leadership
• Manage program-level risks, milestones, and escalations; present program health and posture to the Risk Committee and senior leadership
• Ensure IAM controls and processes meet regulatory obligations including PCI-DSS, SOX, and gaming control board requirements

Responsibilities

• Oversee the full identity lifecycle, provisioning, modification, de-provisioning, across all enterprise systems and business lines
• Establish and mature access governance frameworks: RBAC, segregation of duties (SoD), least privilege, and periodic access certification
• Lead selection, implementation, and management of IAM platforms spanning identity governance and administration, enterprise directory and federation, and privileged access management
• Drive PAM, SSO/federation, and MFA strategy across on-premise and cloud environments
• Partner with Internal Audit and Compliance on access reviews, evidence collection, and audit readiness
• Lead the automation engineering stream to design, build, and deliver scalable automation across cybersecurity functions
• Architect bidirectional data flows and integration patterns between security tools and enterprise platforms

Skills

IAM program management

Automation leadership

API design

Event-driven architecture

Stakeholder engagement

Tools

IAM platforms

PAM

SSO

MFA

Job description

Our team members are the key to our company's success, and their health and well-being, as well as that of their families, is very important to us. We offer a comprehensive benefits package that allows our team members stay healthy, plan for their future and maintain a healthy work-life balance. Benefits may vary with employment status. To see our fill list of Team Member Benefits please visit our career site: www.gotoworkhappy.com/benefits

Job Description:

At Seminole Hard Rock Support Services, we're on a mission to protect our guests, team members, and enterprise assets through world-class cybersecurity practices. We are seeking a Manager of Identity & Access Management (IAM) and Automation to lead two strategic and deeply interconnected functions within the Cybersecurity & IT Governance organization. This role carries dual accountability: ownership of the enterprise IAM program and leadership of a centralized automation engineering capability that designs, builds, and delivers automation and integration solutions across the entire cybersecurity organization.

This is not a tool-administrator or playbook-configuration role. The Manager will lead engineers who develop production-grade automation, building APIs, engineering system integrations, designing event-driven workflows, and delivering scalable solutions that eliminate manual processes and accelerate security outcomes enterprise-wide. The ideal candidate is a technically deep leader who has architected automation at scale, understands modern development practices, and can credibly engage both engineers and executive stakeholders.

Scope of Leadership - Two Core Streams

STREAM 1 | Identity & Access Management Program

Program Strategy & Ownership

• Own the end-to-end enterprise IAM program: vision, roadmap, governance structure, budget, and executive reporting
• Define target-state IAM architecture and drive alignment across IT, HR, Legal, Compliance, and property leadership
• Manage program-level risks, milestones, and escalations; present program health and posture to the Risk Committee and senior leadership
• Ensure IAM controls and processes meet regulatory obligations including PCI-DSS, SOX, and gaming control board requirements

Identity Governance & Access Management

• Oversee the full identity lifecycle, provisioning, modification, de-provisioning, across all enterprise systems and business lines
• Establish and mature access governance frameworks: RBAC, segregation of duties (SoD), least privilege, and periodic access certification
• Lead selection, implementation, and management of IAM platforms spanning identity governance and administration, enterprise directory and federation, and privileged access management
• Drive PAM, SSO/federation, and MFA strategy across on-premise and cloud environments
• Partner with Internal Audit and Compliance on access reviews, evidence collection, and audit readiness

STREAM 2 | Automation Engineering & Integration

This stream is an engineering discipline, not a support function. The Manager leads a team of automation engineers responsible for designing and developing the integrations, pipelines, and workflows that power the cybersecurity organization. The team operates as an internal engineering practice with defined delivery standards, a product-style backlog, and accountability for uptime and quality of the solutions they build.

Automation Engineering Practice

• Build and lead an automation engineering team that develops, maintains, and evolves automation solutions as production-grade software, with version control, peer review, testing, and documentation
• Define the team's operating model: intake process, backlog prioritization, sprint cadence, release standards, and SLA commitments for solution uptime and maintenance
• Establish a shared automation platform and toolchain, selecting technologies, setting coding standards, and ensuring reuse across projects rather than one-off scripts
• Champion API‑first design and event‑driven architecture principles cross all automation development work
• Report on automation engineering output : solutions delivered, manual effort eliminated, integration coverage, and backlog health

Integration Development

• Lead the design and development of integrations between security tools, enterprise platforms (ITSM, SIEM, identity systems, HR, cloud), and third-party services, using REST APIs, GraphQL, webhooks, message queues, and middleware
• Architect bidirectional data flows and synchronization patterns across the security toolstack to eliminate silos and enable real‑time data sharing
• Develop and maintain an integration catalog, documenting all active integrations, dependencies, data contracts, and refresh schedules
• Evaluate and manage integration platforms, middleware, and equivalent iPaaS solutions
• Ensure integration solutions are built with resilience in mind: error handling, retry logic, alerting, and rollback procedures

Workflow & Process Automation Development Translate manual, repetitive cyb