Sr. Manager, Identity Platform Engineering

Blue Shield of CA; Virginia Beach (VA); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Stellarus is seeking a Senior Manager, Identity Platform Engineering to shape the future of our identity platform. You will lead secure, automated IAM capabilities that support hybrid cloud, SaaS, on-prem, and machine identities, partnering with teams to embed identity into modern software delivery and DevOps practices.

You will guide a high-performing team, drive Just-in-Time and least-privilege security, and foster continuous learning while aligning with regulatory and enterprise governance

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent
• 8+ years designing, implementing, and supporting enterprise IAM solutions
• 4+ years of people management experience supervising and evaluating reports
• Experience leading IAM, security engineering, platform engineering, cloud, or related teams
• Strong understanding of Identity Lifecycle Management, Joiner/Mover/Leaver processes, Identity Governance, and Privileged Access Management
• Knowledge of RBAC/ABAC, Just-in-Time, least privilege security models and access control
• Experience with SSO, MFA, SAML, OAuth 2.0, OpenID Connect, SCIM, and modern identity federation
• Experience delivering identity as a platform capability with self-service APIs for developers
• Experience developing automation using scripting, REST APIs, workflow automation
• Experience with DevOps practices: CI/CD, IaC, policy-as-code, automated testing and deployment
• Experience with cloud identity patterns, secrets management, and machine-to-machine access
• Experience integrating IAM into enterprise apps, cloud services, and SaaS platforms
• Experience applying identity controls to AI-enabled systems and governance workflows
• Experience leveraging AI-assisted development to improve IAM operations

Responsibilities

• Lead design and engineering of enterprise IAM solutions across hybrid cloud, SaaS, and on-prem environments
• Direct and coach IAM and platform engineering teams to deliver secure, scalable identity services
• Partner with development teams to integrate identity into software delivery and governance processes
• Drive automation, self-service, least-privilege, and policy-governed identity patterns
• Advance Zero Trust adoption and secure software delivery across the enterprise

Skills

IAM design

People management

Hybrid cloud

SAML OIDC

Automation scripting

CI/CD

DevOps practices

RBAC/ABAC

Zero Trust

AI/Automation

Education

Bachelor's in CS/IS/Cybersecurity

Master's preferred

Tools

Azure AD

Okta

Active Directory

OAuth2 / OIDC tooling

Job description

Your Role

The Identity and Access Management team is responsible for designing, engineering, and operating enterprise identity services that enable secure, scalable, and seamless access across Stellarus' technology ecosystem. The team drives Identity Lifecycle Management, Identity Governance, Privileged Access Management, authentication, authorization, automation, and Zero Trust capabilities while partnering across the enterprise to support digital transformation, regulatory compliance, secure software delivery, and responsible AI adoption.

The Senior Manager, Identity Platform Engineering will report to the Sr. Director, Identity & Access Management. In this role, you will help shape the future of Stellarus' identity platform by engineering secure, automated, and scalable IAM capabilities that support hybrid cloud, SaaS, on-premises, application, privileged, service, machine, and AI-enabled access patterns.

You will partner with teams to integrate identity into modern software delivery practices, accelerate automation through DevOps and AI, and deliver programmatic identity services that can be consumed by development teams through self-service, least-privileged, time-bound, and policy-governed patterns.

Our leadership model is about developing great leaders at all levels and creating opportunities for our people to grow personally, professionally, and financially. We are looking for leaders who are energized by creative and critical thinking, building and sustaining high-performing teams, getting results the right way, and fostering continuous learning.

Your Knowledge and Experience

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent combination of education and experience.
• A minimum of 8 years of experience designing, implementing, and supporting enterprise Identity and Access Management solutions.
• 4 years of prior people management experience with direct responsibility for supervising, coaching, and evaluating direct reports.
• Experience leading IAM, security engineering, platform engineering, cloud, infrastructure, or related technical teams.
• Strong understanding of Identity Lifecycle Management, Joiner/Mover/Leaver processes, Identity Governance, and Privileged Access Management within complex hybrid cloud, SaaS, and on-premises environments.
• Deep understanding of Role-Based Access Control, Attribute-Based Access Control, policy-based access control, Just-in-Time, just-enough, time-bound, and Least Privilege security models.
• Strong knowledge of authentication and authorization frameworks, including Single Sign-On, Multi-Factor Authentication, SAML, OAuth 2.0, OpenID Connect, SCIM, and modern identity federation technologies across enterprise and consumer ecosystems.
• Experience implementing and supporting enterprise identity governance, access management, directory, privileged access, cloud identity, HR, and application integration platforms.
• Experience delivering identity as a platform capability, including self-service, API-driven, and developer-consumable IAM services for application, cloud, platform, and security engineering teams.
• Experience developing automation using scripting languages, REST APIs, workflow automation, or similar programming approaches.
• Experience implementing DevOps or platform engineering practices, including CI/CD, Infrastructure as Code, configuration-as-code, policy-as-code, automated testing, automated deployment, observability, and operational reliability.
• Strong understanding of cloud identity and access patterns, including workload identity, service identities, managed identities, secrets management, key management, privileged access controls, and machine-to-machine access.
• Experience integrating IAM capabilities into enterprise applications, cloud services, SaaS platforms, infrastructure platforms, and modern software development lifecycles.
• Experience applying identity controls to AI-enabled systems, including AI agents, copilots, intelligent automation, machine identities, data access workflows, human-in-the-loop approvals, audit logging, and least-privilege access to sensitive enterprise data.
• Experience leveraging AI-assisted development, intelligent automation, or machine learning technologies to improve operational efficiency, accelerate identity engineering, enhance access governance, or improve risk detection.

Hybrid

This role requires employees to be in-office based on our hybrid workplace model, balancing purposeful in-person collaboration with flexibility. For most teams, this means coming into the office two days each week.

Employees living more than 50 miles from an office location will work with their manager to determine in-office time based on business need.