This role pays less than
65%
of similar roles. Most pay
$144,837–$235,750
— the shaded band above.
At the midpoint, this role pays about
$166k
versus about
$190k
for comparable roles.
Based on 240 similar postings.
Employer
About T. Rowe Price
T. Rowe Price is an asset management firm focused on delivering global investment management excellence and retirement services
T. Rowe Price currently has
29 open roles
on FindRole.
Listed pay typically runs
$121,000–$206,000
across 29 roles with salary data.
Lead Infrastructure Engineer, IAM is a senior-level individual contributor role focused on driving the strategic direction of Identity and Access Management across a global, highly regulated organization. You will lead the evolution of the identity ecosystem by transforming legacy, Active Directory-centric architectures into modern, cloud-first platforms built on Zero Trust principles. Key responsibilities include designing next-generation capabilities for Microsoft Entra ID, AWS IAM Identity Center, federation, privileged access management, and PKI services. You will collaborate with infrastructure, security, and application teams to establish technical standards, manage identity lifecycle models, and mitigate risks. The role requires deep expertise in Kerberos, SAML, OAuth, and certificate-based authentication. You will serve as a technical authority to ensure secure, scalable access for thousands of users while mentoring engineers through complex troubleshooting and architectural decision-making across hybrid cloud environments.
Define and advance the enterprise IAM technology strategy, roadmap, and standards across hybrid Active Directory, Microsoft Entra ID, and AWS environments.
Lead the migration of legacy identity systems to modern, cloud-first platforms based on Zero Trust principles.
Serve as a technical authority for architecture decisions regarding federation, privileged access management, and certificate services.
Design secure and scalable access models for SaaS, enterprise applications, and cloud infrastructure.
Drive the adoption of risk-based authentication, least privilege, and modern MFA capabilities across all platforms.
Establish engineering guardrails, operational procedures, and compliance reporting practices for identity systems.
Provide hands-on technical leadership to troubleshoot complex issues involving Kerberos, SAML, OAuth, and network authentication.
Mentor engineers and technical leaders through design reviews and knowledge sharing on standards-based practices.
What we're looking for
8+ years of experience designing, implementing, operating, or modernizing IAM capabilities in a large enterprise environment.
Deep hands-on expertise with hybrid identity architectures including Active Directory, Microsoft Entra ID, federation, and privileged access management.
Demonstrated ability to independently lead complex technical initiatives.
Strong understanding of security controls, access governance, audit requirements, and operational risk management in regulated environments.
Proven ability to create standards, influence architecture decisions, and mentor engineering teams.
Strong troubleshooting skills across identity, directory, certificate, authentication, federation, cloud, DNS, and network dependencies.
Experience modernizing identity capabilities as part of a broader cloud, data center exit, or platform transformation program (preferred).
Experience with AWS platforms, PKI modernization, passwordless authentication, Zero Trust, and defining enterprise IAM roadmaps (preferred).
AWS
Infrastructure as Code
Python
Linux
Windows
SaaS
DNS
TLS
SSO
Active Directory
SAML
OIDC
Qlik Sense
Tableau
ThoughtSpot
Sigma
Monitoring
Telemetry
Networking
Linux
Python
Bash
SQL
Ansible
Tomcat
WebSphere
AppDynamics
Grafana
Dynatrace
Active Directory
NAS
SAN
ScaleIO
S3
Infrastructure as Code
VMware
Hyper-V
ServiceNow