Director of Identity and Access Management

Commonwealth of Massachusetts•Boston, MA

13h•Hybrid

About The Position

The Massachusetts Digital Service (Mass Digital), within the Executive Office of Technology Services and Security (EOTSS), is seeking a Director of Identity and Access Management (IAM) to provide technical and organizational leadership for MyMassGov and related constituent identity capabilities. The Director is responsible for the platform’s technical strategy, architecture, engineering, operational performance, security, and continued evolution, while directly managing the engineers and technical leads who build, operate, and improve the Commonwealth’s identity services. This is a senior technical leadership position requiring substantial independence and accountability for the technical quality and operational performance of a critical Commonwealth digital service. The Director is expected to work closely with engineers on architectural decisions, implementation approaches, complex technical problems, and engineering standards while building and developing an effective engineering organization. The role leads a blended team of Commonwealth employees and external technical partners and strengthens internal expertise for the long-term operation and evolution of MyMassGov. Working with Mass Digital product leadership, EOTSS security and architecture teams, and agency partners, the Director translates constituent and business needs into technical priorities and implementation plans. The Director also provides technical expertise and strategic recommendations for the Commonwealth’s broader IAM approach, including emerging identity technologies, digital credentials, and enterprise standards. The primary work location is One Ashburton Place, Boston, Massachusetts 02108. The standard schedule is Monday through Friday, 9:00 AM to 5:00 PM Eastern Time. The position follows a hybrid work model, requiring at least two in-office days per week, with additional on-site presence as needed to support business operations. Flexibility and adaptability are expected to meet operational needs and evolving business priorities.

Requirements

At least four years of professional IAM experience, including designing, implementing, or supporting enterprise identity solutions.
At least two years of management experience leading technical teams, including overseeing daily operations, managing technical delivery, guiding system design, and supporting staff development.
Experience designing, developing, or managing consumer-facing digital products or services, with an understanding of user needs, usability, accessibility, and intuitive, reliable digital experiences.
Experience in IT service delivery, including designing, implementing, and maintaining secure, scalable, user-friendly digital solutions that meet organizational objectives and end-user needs.
Strong understanding of authentication, authorization, identity federation, single sign-on, identity lifecycle management, and industry standards including OpenID Connect, OAuth 2.0, and SAML.
Experience designing, implementing, or operating enterprise identity platforms for large user populations and multiple applications, considering security, privacy, interoperability, and operational sustainability.
Strong knowledge of modern cloud architecture, software engineering, APIs, distributed systems, platform engineering, and production operations.
Experience with modern engineering practices and technologies, including CI/CD, infrastructure as code, automated testing, observability, performance optimization, and secure software development.
Ability to establish technical standards, evaluate architectural tradeoffs, and guide engineering teams through complex design and implementation challenges.
Experience leading software engineering or platform engineering teams, including setting technical direction and priorities, promoting engineering best practices, and ensuring high-quality delivery.
Ability to supervise, coach, and develop technical professionals, provide constructive performance feedback, and foster a collaborative, high-performing engineering environment.
Experience driving technical improvements, strengthening engineering practices, and leading organizational or technology-related change.
Ability to coordinate work across internal teams and external vendors while maintaining accountability for technical quality, service delivery, and outcomes.
Progressively responsible professional experience in software engineering, cloud or platform engineering, cybersecurity, or IAM, including experience designing, developing, or operating large-scale production systems.
Knowledge of digital credentials, identity verification, and emerging digital identity technologies or standards.
A bachelor’s degree in computer science, information technology, engineering, cybersecurity, or a related field, or an equivalent combination of relevant education and professional experience.
Meet the minimum entrance requirements: at least seven years of full-time or equivalent part-time professional, administrative, supervisory, or managerial experience in IT administration or IT management, including at least three years in a managerial capacity.

Nice To Haves

Experience directly supervising engineers or other technical professionals, including hiring, performance management, coaching, and professional development.
Experience with customer identity and access management (CIAM) platforms, large-scale public-facing identity systems, or high-volume authentication services.
Experience leading identity provider migrations, platform modernization initiatives, or evaluation and implementation of emerging identity technologies.
Experience managing highly available digital services with complex security, privacy, accessibility, or regulatory requirements.
Experience working in government, public-sector technology, or other large, complex organizations.
Relevant professional certifications in identity and access management, cloud architecture, cybersecurity, or software engineering.

Responsibilities

Establish and lead the technical strategy, architecture, and engineering direction for MyMassGov and related constituent identity capabilities.
Lead engineers and technical staff in designing solutions, evaluating technical approaches, resolving complex engineering challenges, and maintaining high technical standards.
Translate product and organizational priorities into executable technical roadmaps and engineering plans.
Lead technical evaluations of major platform decisions, including identity provider technologies, platform modernization, migration approaches, and emerging identity capabilities.
Provide technical guidance and recommendations on broader Commonwealth IAM strategy, standards, and architecture in collaboration with enterprise technology and security leadership.
Ensure the secure, reliable, scalable, and sustainable operation of MyMassGov and associated identity services.
Collaborate with cybersecurity, infrastructure, and enterprise architecture teams to ensure identity services meet applicable Commonwealth security policies and technical standards.
Directly supervise, mentor, and develop Commonwealth engineers and technical leads responsible for MyMassGov and related identity services.
Develop the technical capabilities and organizational practices needed to support the long-term operation and evolution of the Commonwealth’s identity services.
Collaborate with Commonwealth agencies and their technical teams to support adoption and integration of MyMassGov across government applications and services.
Advise senior technical and executive leaders on IAM architecture, technology choices, security considerations, operational risks, and opportunities for improvement.
Represent Mass Digital and the Commonwealth in technical discussions with agency leadership, other states, public-sector organizations, standards communities, and industry partners.