Identity & Access Management Platform

Arrowstreet Capital•Boston, MA

4d•Onsite

About The Position

This role will build and lead a new enterprise Identity & Access Management (IAM) Platform team. It is a unique opportunity to shape a critical capability from the ground up assessing today’s environment, defining the future state, and leading a multi-year transformation while keeping existing identity services secure and reliable. You will partner with leaders across technology, cybersecurity, risk, compliance, audit, and the business to understand pain points, align priorities, and develop a practical strategy for modernizing IAM. You will establish the team, operating model, architecture, governance, and roadmap for identity governance, access management, privileged access, and human and non-human identities. The role requires deep experience designing, building, and modernizing IAM capabilities at enterprise scale. The successful candidate will serve as the technical authority for the IAM platform, setting the architectural vision, establishing engineering standards, reviewing critical designs, and partnering closely with engineers throughout implementation. You should be comfortable diving deep into complex identity challenges and contributing directly when needed, without being expected to be the hands-on expert in every IAM product. The ideal candidate will combine strong technical depth with strategic thinking, proven managerial experience, and the ability to translate an ambitious vision into a practical, executable program.

Requirements

Experience developing an enterprise strategy, target operating model, architecture, or transformation roadmap.
Demonstrated experience architecting, building, integrating, or operating enterprise-scale IAM platforms—not solely managing IAM programs or vendors.
Ability to move comfortably between enterprise strategy and detailed technical discussions, including reviewing solution designs, challenging architectural assumptions, and guiding engineering teams through implementation.
Strong understanding of identity architecture and integration patterns across cloud, SaaS, internally developed applications, APIs, and legacy environments.
Strong knowledge of core IAM and IGA concepts, including identity lifecycle management, access governance, authentication, authorization, federation, and privileged access.
Strong understanding of OpenID Connect, OAuth 2.0, SAML, delegated authorization, On-Behalf-Of flows, and service-to-service authentication.
Practical experience with one or more leading identity ecosystems, such as Microsoft Entra ID, Active Directory, AWS IAM, SailPoint, Saviynt, Omada, One Identity, or comparable solutions.
Candidates are not expected to be experts in every product, but should have the technical depth to evaluate platforms, guide integrations, and make sound architecture decisions.
Experience leading complex technology transformation or modernization initiatives while supporting existing services.
Ability to engage senior leaders, uncover organizational pain points, build consensus, and translate needs into practical priorities.
Strong communication and program leadership skills, with the ability to explain technical and risk topics to diverse audiences.

Nice To Haves

Experience establishing or significantly transforming an IAM platform or team is preferred
Knowledge of non-human identities, workload identities, service accounts, secrets management, or AI agent identities is highly desired.
Experience in a regulated or highly controlled environment, including familiarity with SOC 1 or similar controls is an asset.

Responsibilities

Build and lead the new IAM Platform team, including its mission, structure, capabilities, and ways of working.
Assess the current identity environment, processes, controls, integrations, and stakeholder pain points.
Define the IAM strategy, target-state architecture, operating model, and multi-year transformation roadmap. This includes driving detailed architecture and design based on experience of building these systems at enterprise scale.
Create an executable program plan covering investment, resources, priorities, dependencies, risks, and measurable outcomes.
Partner with senior business and technology leaders to build alignment, make trade-offs, and drive adoption.
Guide the evaluation and selection of IAM and IGA platforms, vendors, and implementation partners.
Oversee the modernization of identity governance, authentication, authorization, privileged access, and human and non-human identity management.
Lead the phased migration from legacy capabilities while maintaining service continuity, security, and regulatory compliance.
Strengthen IAM controls, including joiner/mover/leaver processes, access reviews, least privilege, audit evidence, and SOC 1 requirements.
Establish platform performance, risk, control, adoption, and service-reliability measures.