Senior Manager, IAM

Ensono; Boston (MA); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Unlimited Paid Days Off

Three health plan options

401k with company match

Education Reimbursement, Student Loan/

Job summary

Ensono is seeking a Senior Manager – IAM Practice Lead to drive migration-focused IAM initiatives for enterprise clients. You will lead architecture oversight, shape strategy, and combine deep IAM expertise with pre-sales experience to accelerate engagements.

Based in Quincy, MA or nearby, this hybrid role requires 12+ years in IAM and 5+ years in leadership, with hands-on ForgeRock and Azure AD experience, and a track record in large-scale migrations.

Qualifications

• 12+ years in Identity and Access Management with progressive leadership responsibilities.
• 5+ years in a Senior Manager or leadership role.
• Proven pre-sales experience including proposal development, client presentations, RFP responses, and solution demonstrations.
• Hands-on experience with ForgeRock Identity Platform (Access Management, Identity Management, Directory Services).
• Expertise in Microsoft Entra ID (Azure AD) including Conditional Access, B2B/B2C, and hybrid identity configurations.
• Deep expertise in IAM domains including: Identity Federation (SAML, OAuth, OIDC); SSO; MFA; PAM; IAM governance (IGA); secret/vault management.

Responsibilities

• Lead IAM integration efforts in migration programs and provide architecture oversight.
• Mentor and develop IAM Engineers, Solution Architects, and Technical Project Managers.
• Establish and govern IAM delivery standards and best practices.
• Partner with sales teams to identify, qualify IAM opportunities and support business development.
• Design and implement IAM patterns across enterprise migrations; support cutover and readiness activities.

Skills

IAM Leadership

Pre-sales

ForgeRock

Azure AD

SAML/OIDC

MFA

PAM

Job description

About the role and what you'll be doing

We are seeking a Senior Manager – IAM Practice Lead with broad domain expertise to support State Street's IAM integration and migration efforts. This role will be instrumental in assessing IAM-related needs as they relate to migration and landing zone exits, and will provide end-to-end solution architecture oversight to accelerate application migrations. The ideal candidate will combine deep technical IAM expertise with proven pre‑sales experience to drive business development and solution positioning.

Practice Leadership & Management

• Lead and manage the IAM practice, providing strategic direction and oversight for all IAM initiatives
• Mentor and develop IAM Engineers, Solution Architects, and Technical Project Managers
• Establish best practices, standards, and governance frameworks for IAM delivery
• Drive continuous improvement and innovation within the IAM practice

Pre‑Sales & Business Development

• Partner with sales teams to identify and qualify IAM opportunities
• Lead discovery sessions and workshops with prospective clients to understand IAM requirements
• Develop compelling proposals, RFP responses, and solution presentations
• Conduct technical demonstrations and proof‑of‑concept engagements
• Build and maintain relationships with key stakeholders and decision‑makers
• Contribute to pricing strategies and effort estimations for IAM engagements
• Design and implement standard IAM patterns and solutions across the enterprise migration program

Solution Architecture & Delivery

• Lead IAM integration efforts in support of application migrations, including:
  • Authentication and Federation – Design and implement identity federation solutions and authentication mechanisms
  • Authorization Integration – Develop and deploy role‑based and attribute‑based access control frameworks
  • Secret Management – Architect secure solutions for credentials, keys, and certificate management
  • Identity Governance and Administration (IGA) – Implement identity lifecycle management and access certification processes
  • Privileged Access Management (PAM) Integration – Design and integrate PAM solutions to secure privileged accounts
• Provide migration readiness and cutover support for IAM controls
• Develop accelerators and self‑service tools to streamline IAM integration during migrations
• Execute IAM integration outcomes for approved backlog items, including configuration, implementation, and documentation
• Work under State Street's direction, governance, and control to deliver IAM solutions aligned with organizational technology and business goals
• Utilize the approved tooling stack consistent with State Street standards

Required Qualifications

• 12+ years of experience in Identity and Access Management with progressive leadership responsibilities
• 5+ years of experience in a Senior Manager or leadership role
• Proven pre‑sales experience including proposal development, client presentations, RFP responses, and solution demonstrations
• Hands‑on experience with ForgeRock Identity Platform (Access Management, Identity Management, Directory Services)
• Expertise in Microsoft Entra ID (formerly Azure AD) including Conditional Access, B2B/B2C, and hybrid identity configurations
• Deep expertise in IAM domains including:
  • Identity Federation (SAML, OAuth, OIDC)
  • Single Sign‑On (SSO) solutions
  • Multi‑Factor Authentication (MFA)
  • Privileged Access Management (CyberArk, BeyondTrust, or similar)
  • Identity Governance (SailPoint, Saviynt, or similar)
  • Secret/Vault Management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
• Experience with cloud platforms (AWS, Azure) and hybrid cloud environments
• Proven track record of supporting large‑scale migration programs
• Strong understanding of enterprise security frameworks and compliance requirements
• Experience with landing zone architecture and cloud‑native IAM services
• Excellent presentation, communication, and executive‑level stakeholder management skills
• Strong business acumen with the ability to translate technical solutions into business value

Preferred Qualifications

• ForgeRock Certified Professional or equivalent certification
• Microsoft Certified: Identity and Access Administrator Associate (SC‑300)
• Experience in financial services or highly regulated industries
• Certifications such as CISSP, CISM, AWS Certified Security Specialty, or Azure Security Engineer
• Experience with containerization and Kubernetes security
• Familiarity with DevSecOps practices and CI/CD pipelines
• Experience developing automation and self‑service tooling for IAM processes
• Experience migrating legacy IAM systems to ForgeRock or Entra ID
• Track record of successfully closing and delivering IAM engagements
• Experience building and scaling IAM practices or teams
• This position is based in Quincy, MA, Princeton, NJ, or Downers Grove, IL
• The role will be hybrid in one of these locations (2‑4 days in office depending on client needs).

Work Environment

• This position is based in Quincy, MA, Princeton, NJ, or Downers Grove, IL
• The role will be hybrid in one of these locations (2‑4 days in office depending on client needs).

Benefits

• Unlimited Paid Days Off
• Three health plan options
• 401k with company match
• Eligibility for dental, vision, short and long‑term disability, life and AD&D coverage, and flexible spending accounts
• Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement
• Paid childbearing and paternal leave
• Education Reimbursement, Student Loan Assistance or 529 College Funding
• Sabbatical leave
• Wellness program
• Flexible work schedule

Salary

As of the date of this posting, a good faith estimate of the current pay scale for this role is $140,000 to $200,000 annually based on a full‑time schedule. Please note that placement in the range may vary based on numerous factors including but not limited to skills, experience, internal equity, and business needs. In addition to base salary, other compensation programs, depending on eligibility, include an annual bonus plan based on company and individual performance and an equity grant under our Associate Equity Appreciation Program.

Equal Opportunity / EEO Statement

Ensono is an Equal Opportunity/Affirmative Action employer. We are committed to providing equal employment to our Associates and building a diverse and inclusive workforce. All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or other legally protected basis, in accordance with applicable law.

Pay transparency nondiscrimination statement

Pay transparency nondiscrimination statement/posting OFCCP’s pay transparency policy can be found on OFCCP’s website.

Accommodations during application

If you need accommodation at any point during the application or interview process, please let your recruiter know or email [e-mail].