Identity and Access Management Technical Lead

Secondary Responsibilities

• Collaborate with Cyber Security and Enterprise Apps personnel on security posture and access strategies.
• Coordinate with MSPs and SaaS vendors for identity integrations and compliance validation.
• Own and lead audit preparation and reporting for identity and access controls across all enterprise systems.
• Maintain detailed IAM documentation and evidence logs for SOC2, PCI, GDPR compliance. Coordinate with Risk & Compliance, Privacy, and Cyber Security team members to ensure timely completion of annual and periodic access reviews. Deliver audit reports to leadership and regulatory bodies as required.
• Support end-user training on MFA, SSO, and secure access practices.
• Provide technical input during security incidents and remediation efforts.
• Research emerging IAM technologies and recommend improvements for automation and efficiency.
• Strong knowledge of IAM principles, RBAC, and identity governance frameworks.
• Experience defining IAM policies and governance standards.
• Bachelor’s degree (B.A./B.S.) in IT or related field; or equivalent combination of education and experience.
• 2–4 years of experience in IAM or IT security roles, with hands-on expertise in identity lifecycle management, authentication protocols, and compliance support.
• Must be eligible to work legally in the United States.
• Experience with Azure Entra ID, Okta, M365, and SaaS integrations.
• Experience with compliance frameworks (SOC2, PCI, GDPR) and audit related audits.
• Familiarity with authentication protocols (SAML, OAuth, OpenID Connect).
• Hands-on expertise in identity and access management, including federation, SSO (SAML/OIDC), MFA
• Strong familiarity with enterprise CRM and productivity platforms, including user provisioning and password management.
• Hands-on experience with identity and access management tools such as Microsoft Entra ID, including configuring SSO and MFA for third-party SaaS applications.
• Proficiency in administering collaboration and file-sharing platforms (e.g., Dropbox, Google Shared Drives) with a focus on secure access.