Manager, IT Security Engineering, IAM

What you'll do

• Own enterprise IAM control effectiveness by ensuring identity governance and access controls are audit-ready across all systems.
• Lead the DOJ Data Security Program to protect sensitive data through defined access restrictions and validation.
• Manage and mature access certification programs including campaign strategy, reviewer accountability, and remediation enforcement.
• Execute role-based access control (RBAC) strategies to ensure least privilege and compliance requirements are met.
• Oversee identity lifecycle management for joiner, mover, and leaver processes based on authoritative data sources.
• Act as the service owner for IAM platforms, ensuring high availability, performance, and continuous improvement.
• Manage third-party vendors by defining SLAs, monitoring performance, and enforcing delivery accountability.
• Ensure all IAM processes comply with regulatory requirements including GxP and 21 CFR Part 11.

What we're looking for

• Bachelor's degree plus 6+ years of IT and/or Information Security experience.
• Experience owning and operating IAM governance and control functions, including certification and RBAC at enterprise scale.
• Hands-on experience with IAM platforms such as SailPoint IdentityIQ, SailPoint Identity Security Cloud, or Saviynt.
• Deep experience with access certification programs, RBAC design, and identity lifecycle governance.
• Understanding of regulatory-driven IAM controls, including DOJ DSP, GxP, and 21 CFR Part 11.
• Experience leading IAM operations and service delivery in complex, hybrid enterprise environments.
• Working knowledge of directory services (Active Directory, LDAP) and application integration patterns.
• Experience in pharmaceutical, biotech, or life sciences environments (preferred); familiarity with ABAC and modern IAM architectures (preferred).