IAM/UAM Lead

US: Tryfacta•Austin, TX

About The Position

Tryfacta is seeking an IAM/UAM Lead for a client in Austin, Texas. This is a 12-month temporary contract assignment with a Monday–Friday schedule. The role provides operational, technical, and service-delivery leadership for enterprise identity services, ensuring access to systems, applications, infrastructure, and data is granted, changed, reviewed, and removed securely and consistently in accordance with established policies and control requirements. The IAM/UAM Lead oversees identity lifecycle operations, access governance, application onboarding, authentication services, service performance, audit readiness, and continuous improvement. The position leads staff and coordinates across security, infrastructure, application, business, audit, and vendor teams. It also supports enterprise identity platforms and integrations, strengthens access controls, manages service operations, and communicates service performance, risks, resource needs, and recommended actions to technical and executive leadership.

Requirements

At least 8 years of progressively responsible experience in information technology, cybersecurity, enterprise infrastructure, technology service delivery, or security programs.
At least 5 years of direct experience in IAM, UAM, identity governance, cybersecurity access administration, or enterprise access-management operations.
At least 3 years of experience leading technical or operational teams, serving as a technical lead, supervising staff, or directing cross-functional IAM workstreams.
At least 3 years of hands-on or service-owner experience with enterprise identity technologies such as Active Directory, Microsoft Entra ID, SSO, MFA, directory services, role-based access control, or privileged access.
At least 2 years of experience with identity governance and administration processes such as provisioning, deprovisioning, access certification, role management, entitlement management, or application onboarding.
At least 2 years of experience supporting audit, compliance, security-control testing, access reviews, risk remediation, or evidence collection for identity and access controls.
Strong knowledge of identity lifecycle management, authentication, authorization, SSO, MFA, identity governance, directory services, privileged access, least privilege, role-based access control, and access-review practices.
Ability to evaluate complex access issues, distinguish operational problems from control risks, and coordinate the appropriate technical and business response.
Strong service-management skills, including prioritization, escalation management, metrics, root-cause analysis, continuous improvement, and customer communication.
Ability to write and maintain clear procedures, control documentation, operational standards, executive updates, and audit evidence.
Strong leadership, analytical, communication, customer-service, collaboration, and problem-solving skills.

Nice To Haves

Bachelor's degree in information technology, cybersecurity, computer science, information systems, or a related field; equivalent relevant experience may be considered where permitted.
At least 2 years of experience in a public-sector, regulated, transportation, financial, healthcare, utilities, or critical-infrastructure environment.
At least 2 years of experience with SailPoint, Ping Identity, Microsoft Entra ID, ServiceNow, or comparable identity-governance, federation, directory, or workflow platforms.
Experience with identity automation, workflow orchestration, APIs, scripting, reporting, or data-quality improvement.
Professional certification in IAM, cybersecurity, audit, project management, or IT service management, such as CISSP, CISM, Security+, Microsoft identity certifications, SailPoint certifications, ITIL, PMP, or comparable credentials.

Responsibilities

Lead IAM/UAM operations, projects, service improvements, and modernization initiatives across the enterprise.
Help define the IAM/UAM operating model, service ownership, roles and responsibilities, escalation paths, standards, procedures, and control requirements.
Translate security, business, audit, and compliance requirements into practical identity and access-management processes.
Identify service risks, control gaps, resource constraints, and operational dependencies; develop remediation plans and communicate recommended actions to leadership.
Oversee end-to-end identity lifecycle processes, including onboarding, transfers, job or role changes, temporary access, access recertification, separation, and offboarding.
Ensure access requests are based on approved business need, least privilege, role-based access, separation-of-duties requirements, and established authorization paths.
Establish standards for access provisioning, deprovisioning, exception handling, emergency access, privileged access, and periodic access reviews.
Coordinate with HR, application owners, managers, security teams, and service teams to improve the accuracy and timeliness of identity changes.
Provide service and operational oversight for identity capabilities, including Active Directory, Microsoft Entra ID, SSO, MFA, conditional access, passwordless authentication, identity governance, directory services, role-based access control, and privileged access.
Coordinate application onboarding into enterprise identity platforms, including authentication design, user population, role mapping, approval requirements, provisioning and deprovisioning procedures, testing, and support transition.
Partner with platform and engineering teams to prioritize enhancements, resolve complex identity issues, reduce manual work, and strengthen integrations among IAM technologies and business applications.
Support identity technologies such as SailPoint, Ping Identity, Microsoft Entra ID, Active Directory, ServiceNow, or comparable enterprise platforms.
Manage access-request queues, incidents, service requests, escalations, backlogs, aging work, priority conflicts, and customer communications.
Define and monitor service levels, operating-level expectations, workload volumes, fulfillment times, quality measures, backlog trends, and repeat issues.
Use incident, problem, change, and request-management practices to improve service reliability and reduce recurring access failures.
Develop and maintain operational procedures, runbooks, knowledge articles, escalation guidance, support documentation, and service continuity expectations.
Ensure access decisions, approvals, provisioning activities, exceptions, and removals are authorized, traceable, documented, and audit ready.
Support internal and external audits, security assessments, access reviews, control testing, evidence collection, and remediation of findings.
Track identity-related risks, exceptions, overdue access reviews, orphaned or stale accounts, excessive privileges, and remediation commitments.
Collaborate with cybersecurity, risk, compliance, and audit teams to maintain appropriate controls and demonstrate control effectiveness.
Lead, coach, and mentor IAM/UAM staff; establish priorities, clarify responsibilities, balance workloads, and support staff development.
Coordinate across cybersecurity, infrastructure, application teams, service desk, HR, business stakeholders, auditors, and vendors to resolve issues and deliver identity services.
Develop dashboards and executive reporting for service performance, access-review completion, backlog health, aging requests, incidents, quality, risks, and improvement work.
Identify opportunities for workflow automation, self-service, role engineering, standardization, data-quality improvement, and reduction of manual provisioning.
Communicate project status, service performance, risks, resource needs, control issues, and recommended actions to technical and executive leadership.