Senior Manager, IAM Security Operations

What you'll do

• Own the health, reliability, and security posture of enterprise identity platforms including Entra ID, Okta, and SailPoint.
• Lead the migration and consolidation of workforce identity providers to Microsoft Entra ID and passwordless MFA.
• Develop and execute a multi-year operational roadmap focused on automation, self-service, and toil reduction.
• Manage a multi-layered organization of engineers and analysts across onshore, offshore, and managed-service teams.
• Establish and monitor operational excellence metrics including SLAs, KPIs, and executive-level service health reporting.
• Direct major incident command, problem management, and change governance for all identity-related services.
• Oversee access lifecycle operations including joiner-mover-leaver processes, provisioning, and privileged access.
• Serve as the accountable owner for identity operations during audit, regulatory, and compliance engagements.

What we're looking for

• 10+ years of experience in identity and access management or information security operations.
• 7+ years of experience leading teams.
• 5+ years of experience leading other leaders or owning a functional area.
• Significant senior leadership experience owning a major operational portfolio or identity security function.
• Operational ownership of enterprise identity platforms including Microsoft Entra ID, Okta, Active Directory, SailPoint, and BeyondTrust.
• Technical command of SSO, MFA, SAML, OIDC, OAuth, Conditional Access, and identity lifecycle management.
• Experience with SLA ownership, major incident command, and ITIL-aligned problem and change management.
• Bachelor's degree in a related field or equivalent experience.
• Experience leading identity operations through a major platform migration or consolidation (preferred).
• Experience in retail or another large, distributed, high-transaction-volume enterprise (preferred).
• Experience as an accountable owner in audit and compliance programs such as SOX or PCI-DSS (preferred).
• Experience leading globally distributed and managed-service delivery teams (preferred).
• Depth in passwordless/FIDO2, Zero Trust patterns, and identity threat detection and response (preferred).
• Relevant certifications such as CISSP, CISM, SC-300, or ITIL (preferred).