Senior IAM/PAM Engineer

Newell Brands; Atlanta (GA); Hybrid; USD 136,000 - 187,000; Full time

Job summary

Newell Brands is seeking a Senior IAM/PAM Engineer to advance the IAM/PAM program strategy across Microsoft AD, PingFederate, Entra ID and CyberArk. Hybrid and multi‑cloud environments, you will influence standards and drive modernization across security and IT teams.

You will provide technical direction on complex IAM initiatives, collaborate with InfoSec and IT partners on governance, and mentor junior IAM engineers to ensure reliable authentication and authorization at enterprise scale.

Qualifications

• Bachelor’s degree in information security, CS, Info Management Systems or related field.
• 5+ years of hands‑on Windows Server AD admin experience (2016/2019/2022).
• 3+ years in hybrid, multi-cloud environments including AD, Entra ID, AWS and GCP.
• Experience with modern SDLC methods and cross‑team collaboration.
• Intermediate knowledge of cloud platforms with identity services and security controls.
• Experience using IAM tools and automation scripting.
• Ability to translate trends into actionable IAM recommendations.

Responsibilities

• Lead modernization of IAM/PAM infrastructure across enterprise platforms.
• Align IAM policies; serve as the primary technical authority on identity governance decisions.
• Develop and implement Newell's identity and directory strategy with InfoSec stakeholders.
• Lead IAM workstreams in projects; manage cross‑functional dependencies and delivery.
• Provide direction and leadership to resolve complex IAM issues.
• Provide oversight for IAM backend infrastructure and documentation.
• Support onboarding of servers and users to PAM services.
• Troubleshoot authentication and authorization integration issues.
• Administer Windows Server AD forests, trusts, and hybrid Entra ID/AWS/GCP environments.
• Mentor junior IAM engineers and share expertise.

Skills

Windows Server AD

Entra ID

Multi-cloud IAM

Scripting for automation

CyberArk experience

Identity governance

Education

Bachelor's degree in information security, Computer Science, Information Management Systems or a related field

Tools

Terraform

ARM templates

Bicep

CyberArk PAM

Job description

Newell Brands is a leading consumer products company with a portfolio of iconic brands like Graco, Coleman, Oster, Rubbermaid, Sharpie and Yankee Candle and 24,000 talented teammates around the world. Our culture is built on values in action: Integrity, Teamwork, Passion for Winning, Ownership, and Leadership. We work together to win, grow, and make a real impact—supported by a high-performing, inclusive, and collaborative environment where you can be your best, every day.

Job Summary:

The Senior IAM/PAM Engineer advances Newell's IAM/PAM program strategy, modernization of critical infrastructure spanning Microsoft Active Directory, PingFederate, Entra ID and CyberArk Privileged Access Management. This role influences standards, investment decisions and drives execution across multiple security and IT functions.

This role provides technical direction on complex, moderately ambiguous IAM initiatives, influences InfoSec and IT partners to align on identity and directory strategy, and drives improvements to the backend systems that keep authentication and authorization running reliably at enterprise scale. The role contributes to departmental planning and serves as a recognized subject matter expert across the IAM domain.

The ideal candidate is a hybrid and multi-cloud IAM expert who brings knowledge and experience of identity engineering across cloud and on-premises environments, independently drives modernization initiatives from strategy through execution, and influences peers and cross-functional partners to align on governance approaches and technical standards.

Key Responsibilities:

• Lead the modernization of critical IAM/PAM infrastructure, migrating privileged accounts from legacy systems to enterprise platforms in partnership with IT Infrastructure and application teams
• Influence and align Senior Engineers, Architects and Senior Management across the organization on IAM policies, controls and standards; serve as the primary technical authority on identity governance decisions that span multiple functions or departments
• Lead the development of Newell's identity and directories strategy in close partnership with InfoSec and IAM domain leaders, ensuring integration with the broader InfoSec strategy and contributing to multi-year departmental planning efforts
• Independently lead IAM workstreams within business and IT projects, defining approach, managing cross-functional dependencies and ensuring delivery of IAM functionality that meets security, compliance and timeline requirements
• Provide direction and leadership in resolving complex IAM-related issues
• Provide oversight and engineering support for IAM backend infrastructure
• Lead development and implementation of procedures and documentation supporting IAM services
• Support and onboard servers and users to PAM services
• Troubleshoot and resolve complex authentication and authorization integration issues
• Administer Windows Server 2016/2019/2022 Active Directory forests and domain trusts, Group Policy services, and hybrid multi-tenant Microsoft Entra ID, Office 365, AWS and GCP environments
• Provide technical mentorship and guidance to junior and mid-level IAM engineers, reviewing work, sharing expertise and supporting their professional development within the identity domain

Required Qualifications:

• Bachelor’s degree in information security, Computer Science, Information Management Systems or a related field, or equivalent experience
• 5+ years of hands‑on experience with Windows Server 2016/2019/2022 — Active Directory, forest and domain trusts, Group Policy
• 3+ years of experience in hybrid, multi-cloud, multi-tenant environments, including Active Directory, Entra ID, AWS and GCP
• Experience with modern SDLC methods and the ability to learn and adapt to methodologies used across teams
• Intermediate knowledge of cloud platforms (Azure, AWS or GCP), including identity services, entitlement management and security controls within each environment
• Experience using IAM tools and scripting for automation
• Experience spanning business, security, application, UX and network infrastructure architecture
• Deep intellectual curiosity about current and emerging identity technologies, with a demonstrated ability to translate awareness of technology trends and threats into actionable recommendations that influence Newell's IAM strategy and investment priorities

Preferred Qualifications

• Industry certifications related to IAM or Entra ID, such as CISSP, CISM or Azure Security Engineer
• Hands‑on experience with CyberArk or a comparable PAM platform
• Working knowledge of SPIFFE/SPIRE, mTLS or other workload identity standards, with experience applying these to define enterprise authentication policy
• Experience with Infrastructure-as-Code tools (Terraform, ARM templates or Bicep) to manage IAM configurations as version-controlled code

The Remote base pay range for this position is from $136,000 to $187,000. Salary will be based on prior experience related to the skills required for this position.

Newell Brands (NASDAQ: NWL) is a leading global consumer goods company with a strong portfolio of well-known brands, including Rubbermaid, Sharpie, Graco, Coleman, Rubbermaid Commercial Products, Yankee Candle, Paper Mate, FoodSaver, Dymo, EXPO, Elmer’s, Oster, NUK, Spontex and Campingaz. We are focused on delighting consumers by lighting up everyday moments. Newell Brands and its subsidiaries are Equal Opportunity Employers and comply with applicable employment laws. EOE/M/F/Vet/Disabled are encouraged to apply.