IAM/UAM Lead

Allied Consultants, Inc.•Austin, TX

About The Position

Allied Consultants, Inc. is seeking an experienced Identity and User Access Management (IAM/UAM) Lead to provide operational, technical, and service-delivery leadership for enterprise identity services. The role is accountable for ensuring access to systems, applications, infrastructure, and data is granted, changed, reviewed, and removed securely, consistently, and in accordance with established policies and control requirements. The IAM/UAM Lead oversees identity lifecycle operations, access governance, application onboarding, authentication services, service performance, audit readiness, and continuous improvement, while leading staff and coordinating across security, infrastructure, application, business, audit, and vendor teams. The role leads IAM/UAM operations, projects, service improvements, and modernization initiatives; helps define the operating model and control requirements; and turns security, business, audit, and compliance needs into practical processes. It oversees identity lifecycle and access administration, enterprise IAM platforms and application integration, service operations, audit and compliance readiness, and team leadership and stakeholder coordination. The position requires progressively responsible experience in IT, cybersecurity, infrastructure, technology service delivery, or security programs; direct IAM/UAM or access-management experience; team or workstream leadership; and experience with enterprise identity technologies, identity governance processes, and access-control audits. A bachelor’s degree and experience in regulated or public-sector environments, identity platforms, automation, and relevant professional certifications are preferred. Allied Consultants describes itself as an Austin-based firm with more than 34 years of experience delivering technical and business professionals within Texas State Agencies. The company offers competitive pay, local support staff, and a comprehensive benefits package. Candidates selected for interviews are subject to a criminal background check and may be required to pass a drug screening; offers are contingent on successful completion of applicable checks. Allied Consultants is an Equal Opportunity Employer committed to diversity and inclusion.

Requirements

At least 8 years of progressively responsible experience in information technology, cybersecurity, enterprise infrastructure, technology service delivery, or security programs.
At least 5 years of direct experience in IAM, UAM, identity governance, cybersecurity access administration, or enterprise access-management operations.
At least 3 years of experience leading technical or operational teams, serving as a technical lead, supervising staff, or directing cross-functional IAM workstreams.
At least 3 years of hands-on or service-owner experience with enterprise identity technologies such as Active Directory, Microsoft Entra ID, SSO, MFA, directory services, role-based access control, or privileged access.
At least 2 years of experience with identity governance and administration processes such as provisioning, deprovisioning, access certification, role management, entitlement management, or application onboarding.
At least 2 years of experience supporting audits, compliance, security-control testing, access reviews, risk remediation, or evidence collection for identity and access controls.
Strong knowledge of identity lifecycle management, authentication, authorization, SSO, MFA, identity governance, directory services, privileged access, least privilege, role-based access control, and access-review practices.
Ability to evaluate complex access issues, distinguish operational problems from control risks, and coordinate appropriate technical and business responses.
Strong service-management skills, including prioritization, escalation management, metrics, root-cause analysis, continuous improvement, and customer communication.
Ability to write and maintain clear procedures, control documentation, operational standards, executive updates, and audit evidence.
Strong leadership, analytical, communication, customer-service, collaboration, and problem-solving skills.

Nice To Haves

Bachelor’s degree in information technology, cybersecurity, computer science, information systems, or a related field; equivalent relevant experience may be considered where permitted.
At least 2 years of experience in a public-sector, regulated, transportation, financial, healthcare, utilities, or critical-infrastructure environment.
At least 2 years of experience with SailPoint, Ping Identity, Microsoft Entra ID, ServiceNow, or comparable identity-governance, federation, directory, or workflow platforms.
Experience with identity automation, workflow orchestration, APIs, scripting, reporting, or data-quality improvement.
Professional certification in IAM, cybersecurity, audit, project management, or IT service management, such as CISSP, CISM, Security+, Microsoft identity certifications, SailPoint certifications, ITIL, PMP, or comparable credentials.

Responsibilities

Lead IAM/UAM operations, projects, service improvements, and enterprise modernization initiatives.
Help define the IAM/UAM operating model, service ownership, roles, responsibilities, escalation paths, standards, procedures, and control requirements.
Translate security, business, audit, and compliance requirements into practical identity and access-management processes.
Identify service risks, control gaps, resource constraints, and operational dependencies; develop remediation plans and communicate recommended actions to leadership.
Oversee identity lifecycle processes including onboarding, transfers, role changes, temporary access, access recertification, separation, and offboarding.
Ensure access requests reflect approved business need, least privilege, role-based access, separation-of-duties requirements, and established authorization paths.
Establish standards for access provisioning and deprovisioning, exception handling, emergency and privileged access, and periodic access reviews.
Coordinate with HR, application owners, managers, security teams, and service teams to improve the accuracy and timeliness of identity changes.
Provide service and operational oversight for identity capabilities such as Active Directory, Microsoft Entra ID, SSO, MFA, conditional access, passwordless authentication, identity governance, directory services, role-based access control, and privileged access.
Coordinate application onboarding into enterprise identity platforms, covering authentication design, user populations, role mapping, approvals, provisioning and deprovisioning, testing, and support transition.
Partner with platform and engineering teams to prioritize enhancements, resolve complex identity issues, reduce manual work, and strengthen integrations.
Manage access-request queues, incidents, service requests, escalations, backlogs, aging work, priority conflicts, and customer communications.
Define and monitor service levels, operating expectations, workload volumes, fulfillment times, quality measures, backlog trends, and repeat issues.
Apply incident, problem, change, and request-management practices to improve reliability and reduce recurring access failures.
Develop and maintain procedures, runbooks, knowledge articles, escalation guidance, support documentation, and service continuity expectations.
Ensure access decisions, approvals, provisioning activities, exceptions, and removals are authorized, traceable, documented, and audit ready.
Support audits, security assessments, access reviews, control testing, evidence collection, and remediation of findings.
Track identity-related risks, exceptions, overdue access reviews, orphaned or stale accounts, excessive privileges, and remediation commitments.
Collaborate with cybersecurity, risk, compliance, and audit teams to maintain controls and demonstrate their effectiveness.
Lead, coach, and mentor IAM/UAM staff; set priorities, clarify responsibilities, balance workloads, and support staff development.
Coordinate with cybersecurity, infrastructure, application teams, service desk, HR, business stakeholders, auditors, and vendors to resolve issues and deliver identity services.
Develop dashboards and executive reports on service performance, access-review completion, backlog health, aging requests, incidents, quality, risks, and improvement work.
Identify opportunities for workflow automation, self-service, role engineering, standardization, data-quality improvement, and reduced manual provisioning.
Communicate project status, service performance, risks, resource needs, control issues, and recommended actions to technical and executive leadership.