Director, Identity Security

Ecolab•Saint Paul, MN

7d•$137,400 - $206,200

About The Position

The Director of Identity is responsible for maturing the enterprise Identity and Access Management (IAM) program across strategy, engineering, operations, architecture, and emerging identity security capabilities. This role provides leadership for a global IAM function supporting a large-scale internal and external identity environment and is accountable for advancing identity governance, privileged access, authentication, lifecycle management, and secrets and cryptography capabilities in alignment with business, risk, and compliance requirements. The role combines strategic direction, operational accountability, organizational leadership, and program execution. The Director of Identity will lead mature identity services while driving transformation initiatives such as IAM governance maturation, role-based access control, PAM modernization, passwordless authentication, certificate lifecycle automation, and enterprise secrets management.

Requirements

Bachelor's degree in Information Technology, Information Security, Computer Science, Engineering, or a related discipline; equivalent experience may be considered.
12+ years of progressive experience in Identity and Access Management, cybersecurity, or security engineering.
5+ years of leadership experience managing multi-team IAM functions at the Senior Manager or Director level.
Demonstrated success leading enterprise IAM programs across strategy, operations, engineering, governance, and transformation initiatives.
Experience owning IAM governance, policy development, audit response, executive reporting, and control maturity efforts.
Experience building or standing up new security capabilities, teams, or services.
Strong knowledge of Identity and Access Management (IAM) platforms; Saviynt preferred. Experience with SailPoint or One Identity is also relevant.
Strong knowledge of Privileged Access Management concepts and platforms; BeyondTrust preferred, with CyberArk or Delinea also relevant.
Experience with Microsoft identity services including Active Directory, Entra ID, B2C, federation, and conditional access.
Knowledge of authentication and federation standards such as SAML, OAuth 2.0, and OpenID Connect.
Understanding of hybrid and cloud IAM patterns across Azure, AWS, and GCP environments.
Knowledge of secrets management, PKI, certificate lifecycle management, and key management technologies such as HashiCorp Vault or Azure Key Vault.
Familiarity with IAM maturity frameworks, security governance models, and regulatory or control expectations.
Strategic thinker with the ability to set direction and translate strategy into execution.
Strong decision-maker who operates effectively in complex, matrixed environments.
Delivery-oriented leader with a strong focus on accountability, outcomes, and service quality.
Effective communicator able to translate complex identity and security topics for executives, audit stakeholders, and technical teams.
Strong collaborator with the ability to influence across cybersecurity, infrastructure, cloud, HR, audit, and application teams.
Proven people leader with the ability to coach talent, build teams, and develop future leaders.

Nice To Haves

Experience in a Fortune 500, global, manufacturing, or industrial environment.
Experience with SOX-related IAM controls and certification processes.
Experience with ServiceNow-based access workflows and Workday-driven provisioning processes.
Relevant certifications such as CISSP, CISM, or identity-platform specific certifications.

Responsibilities

Define and own the enterprise IAM strategy, roadmap, and operating model aligned to cybersecurity, compliance, and business objectives.
Mature the IAM program through formal governance, policies, standards, controls, metrics, and leadership reporting.
Present IAM program status, risks, priorities, and investment needs to security leadership and executive stakeholders.
Lead prioritization decisions across operations, platform engineering, architecture, and project-based identity initiatives.
Establish and monitor KPIs, service performance, maturity goals, and program outcomes.
Lead delivery of enterprise IAM capabilities including identity lifecycle management, joiner/mover/leaver processes, access provisioning, access requests, access reviews, privileged access, authentication, federation, and directory services.
Oversee transformation initiatives such as IGA expansion, RBAC governance, PAM modernization, passwordless authentication, and identity security posture improvements.
Ensure IAM services meet operational expectations for reliability, resilience, scalability, and user support.
Partner with application, infrastructure, cloud, HR, audit, and security teams to implement identity controls and integration patterns across the enterprise.
Ensure IAM processes and controls support audit, regulatory, and internal compliance requirements, including SOX-related controls where applicable.
Oversee audit readiness, remediation activities, control evidence, and policy enforcement across identity-related processes.
Align identity capabilities to recognized frameworks and standards such as NIST CSF 2.0, NIST 800-63, and enterprise security policies.
Reduce identity-related risk by strengthening governance, control automation, privileged access protections, and secrets management practices.
Provide leadership across identity architecture, platform standards, and integration patterns for workforce, privileged, and customer identity environments.
Lead the development of enterprise secrets and cryptography capabilities, including certificate lifecycle management, PKI modernization, vault strategy, and operational controls.
Support modern identity approaches across hybrid and cloud environments, including federation, conditional access, and non-human/service identity considerations.
Drive decisions on tooling, architectural direction, and strategic vendor partnerships that improve security, scalability, and operational efficiency.
Lead and develop a distributed IAM organization consisting of managers, architects, engineers, and operations personnel.
Build organizational clarity across operations, engineering, architecture, and new capability areas.
Provide leadership in talent development, succession planning, coaching, performance management, and team engagement.
Manage staffing strategy across full-time employees, partners, and contingent resources to meet delivery needs.
Oversee third-party vendors and consulting partners supporting IAM programs and services.