IAM Lead – Authentication Services

Corteva Agriscience • Des Moines, IA

3d

About The Position

Corteva Agriscience is seeking an experienced IAM authentication services lead to provide technical leadership and architectural direction for enterprise identity and authentication services. The role is responsible for designing, implementing, administering, securing, and evolving IAM authentication platforms, with hands-on expertise in Microsoft Active Directory, Microsoft Entra ID (Azure AD), enterprise SSO, federation, and modern authentication protocols. The lead serves as a technical subject matter expert and works with infrastructure, cybersecurity, application, cloud, and engineering teams to deliver secure, scalable, and highly available identity services.

The role also provides technical guidance and mentorship to IAM engineers and administrators; contributes to architecture reviews, technology evaluations, and strategic IAM roadmaps; and supports incident response and root-cause analysis for critical identity and authentication incidents. The position evaluates emerging identity technologies and recommends solutions to improve security, resiliency, user experience, and operational efficiency.

Requirements

• At least 8 years of experience in Identity and Access Management, authentication, directory services, infrastructure engineering, or a related discipline.
• Extensive hands-on experience designing and administering Microsoft Active Directory in large enterprise environments.
• Strong understanding of Active Directory architecture, including forests and domains, domain controllers, AD replication, DNS, Group Policy, trust relationships, Kerberos authentication, LDAP, and Active Directory security and hardening.
• Extensive experience with Microsoft Entra ID (Azure AD) and hybrid identity architectures.
• Strong experience implementing and troubleshooting SSO and federation technologies, including SAML, OAuth 2.0, and OpenID Connect.
• Experience integrating enterprise applications with Active Directory and/or Entra ID.
• Strong understanding of authentication, authorization, federation, identity lifecycle, and access control concepts.
• Experience with Microsoft Entra Connect / Azure AD Connect and hybrid identity synchronization.
• Experience with Conditional Access, MFA, identity protection, and modern authentication.
• Strong troubleshooting and root-cause analysis skills across complex identity environments.
• Experience working with security, infrastructure, cloud, and application engineering teams in large enterprise environments.
• Demonstrated ability to lead technical initiatives and provide direction to engineers and administrators.

Nice To Haves

• Experience with Privileged Identity Management (PIM) and privileged access management concepts.

Responsibilities

• Lead the architecture, engineering, administration, and operational support of enterprise IAM authentication services.
• Provide technical leadership for Active Directory architecture, including domain services, forests, domains, trusts, Group Policy, replication, DNS integration, authentication, and directory security.
• Design, implement, and maintain Microsoft Entra ID (Azure AD) environments, including tenant architecture, identity synchronization, authentication, Conditional Access, application integrations, and hybrid identity.
• Lead the design and implementation of enterprise SSO solutions using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Federation, Kerberos, and LDAP.
• Architect and support integrations between on-premises Active Directory, Entra ID, SaaS applications, cloud platforms, and enterprise applications.
• Establish and maintain authentication patterns and standards for workforce, application, and service identities.
• Design and support highly available and resilient authentication infrastructure, including disaster recovery and business continuity capabilities.
• Provide technical leadership for identity modernization initiatives, including hybrid identity, cloud migration, passwordless authentication, and Zero Trust architectures.
• Troubleshoot complex authentication, federation, directory, and SSO issues across enterprise environments.
• Develop and maintain IAM architecture documentation, standards, technical procedures, and operational runbooks.
• Establish and enforce security best practices for identity infrastructure, privileged access, authentication, and directory services.
• Partner with cybersecurity teams to identify and remediate identity-related vulnerabilities and risks.
• Collaborate with application and engineering teams to onboard applications to enterprise authentication and SSO platforms.
• Provide technical guidance and mentorship to IAM engineers and administrators.
• Participate in architecture reviews, technology evaluations, and strategic IAM roadmaps.
• Support incident response and root-cause analysis for critical identity and authentication incidents.
• Evaluate emerging identity technologies and recommend solutions that improve security, resiliency, user experience, and operational efficiency.

Benefits

• Numerous development opportunities to build your skills.
• Health benefits for you and your family starting on your first day of employment.
• Four weeks of paid time off and two weeks of well-being pay per year, plus paid holidays.
• Parental leave including a minimum of 16 weeks for mothers and fathers.
• Competitive retirement savings plan.
• Tuition reimbursement program.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed