Director, Identity and Access Management

T-Mobile•Bellevue, WA

About The Position

The Director, Identity and Access Management leads IAM within Cybersecurity and reports directly to the Chief Information Security Officer. The role leads a 96-person organization consolidating IAM work previously split between Infrastructure & Cloud and Cybersecurity. It sets IAM strategy, policy, and standards, including the identity layer of the Zero Trust architecture, and owns identity controls and SOX compliance evidence. The position provides one accountable leader to align identity risk, governance, and regulatory expectations, recognizing identity as the primary security boundary. The director oversees platform, provisioning, and application onboarding work and manages an approximately $4 million budget. The role also involves travel and may include other duties or projects assigned by business management. The posted base pay range is $191,300–$258,800, with a 25% corporate bonus target. Actual starting pay depends on qualifications and experience.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field.
At least 10 years of experience leading Identity and Access Management, cybersecurity, or identity governance programs, including SOX and audit-ready controls.
7–10 years of experience leading large technical or security organizations, including managers and senior managers.
4–7 years of experience with Zero Trust architecture and enterprise identity platforms such as Entra ID, Okta, SailPoint, or CyberArk.
Expertise in Zero Trust, identity governance, privileged access, and enterprise identity platforms.
Expertise in access controls over financial systems, user access reviews, evidence, and audit testing.
Expertise working with threat intelligence and security operations to detect and respond to identity threats.
Expertise in leading managers and senior managers, budgets, and organizational change.
Expertise partnering across Cyber, IT, Finance, and HR to resolve ownership and escalate risk.
Expertise governing machine, AI, automation, and cloud workload identities.
At least 18 years of age.
Legally authorized to work in the United States.
Travel is required.

Nice To Haves

Master’s degree in Computer Science, Information Security, or a related field.
CISSP, CISM, or CISA certification.

Responsibilities

Set IAM strategy, policy, and standards for Cybersecurity, including the identity layer of the Zero Trust architecture.
Own identity controls and SOX compliance evidence, including user access reviews, privileged access, and audit readiness.
Direct identity threat detection and response and insider threat controls in partnership with Cyber threat intelligence and security operations teams.
Govern risk from non-human identities created by AI, automation, and cloud workloads.
Lead the 96-person IAM organization, including platform, provisioning, and application onboarding work.
Manage an approximately $4 million budget.
Perform other duties or projects as assigned by business management.

Benefits

Medical, dental, and vision insurance.
Flexible spending account.
401(k).
Employee stock grants.
Employee stock purchase plan.
Paid time off and up to 12 paid holidays.
Paid parental and family leave.
Family building benefits.
Back-up care and enhanced family support.
Childcare subsidy.
Tuition assistance and college coaching.
Short- and long-term disability coverage.
Voluntary AD&D, accident, life, disability, and long-term care coverage.
Mobile service and home internet discounts for eligible employees.
Pet insurance for eligible employees.
Commuter and transit programs for eligible employees.
Year-end corporate bonus based on company and/or individual performance, with a 25% target.