Director, Identity & Access Management

Hasbro•Renton, WA

22h•$216,200 - $324,300

About The Position

Wizards of the Coast builds worlds that bring people together through play and imagination. From genre-defining games like Magic: The Gathering® and Dungeons & Dragons® to an expanding multiverse, we create new ways to foster friendship and connection. Millions of players, thousands of creators, and one significant attack surface make identity security essential. Who holds the keys? Our Director of Identity & Access Management does. This leader runs the identity program end to end, authentication, authorization, governance, and privileged access for every employee, contractor, service, and studio, reporting to the VP of Infrastructure Engineering and Operations. The role commands the enterprise identity budget, roadmap, and headcount, and leads managers and principal engineers across identity platform engineering, Identity Governance (IGA), Privileged Access Management (PAM), and a brand-new Identity Security Operations function.

Requirements

12+ years in IAM or security engineering, including 5+ years leading teams and managers.
Experience leading enterprise IAM programs at scale, including identity-provider consolidation, IGA, PAM, and Active Directory modernization.
Hands-on expertise with Okta or Entra ID, Saviynt or SailPoint, CyberArk, and cloud identity services such as AWS IAM Identity Center.
Delivery of zero-trust capabilities, including phishing-resistant or passwordless MFA, conditional access, least privilege, identity-based network access, and just-in-time privileged access.
Experience building or operating identity detection and response, including automated containment and measurable response times.
A record of transforming reactive IAM operations into automation-led platform engineering, supported by measurable results.
Experience managing IAM budgets and vendors, including licensing optimization and contract negotiations that delivered savings.
Experience delivering global identity services and developing identity policy with HR, application, security, and infrastructure partners, including attribute-based access control.

Nice To Haves

Relevant certifications, such as CISSP, Okta, SailPoint, Saviynt, or CyberArk.
Experience with AI-driven identity governance, role mining, access recommendations, or continuous certification.
Experience in a multi-studio, multi-business-unit entertainment or gaming environment.

Responsibilities

Set the multi-year IAM strategy and funding plan.
Consolidate workforce identity onto one provider, retire legacy tooling, and deliver IAM as a single global service that meets regional requirements through configuration instead of one-off regional builds.
Automate access from hire through exit on authoritative HR data.
Keep the role and entitlement model scalable through acquisitions, push access decisions to business leaders through self-service, hold contractors and partners to the same standard, and secure workload and AI-agent identity with short-lived credentials and real-time revocation.
Replace standing privilege with just-in-time elevation and session recording.
Define identity-verification and recovery standards that survive the gaps phishing-resistant MFA leaves behind, make identity the enterprise access control plane, and stand up an Identity Security Operations function that detects and contains identity attacks automatically.
Ensure IAM runs as a Tier 0 service with appropriate service levels, on-call coverage, and change rigor.