Identity and Access Control Manager

Rolls-Royce

2d•$119,520 - $194,220•Remote

About The Position

Rolls-Royce offers an excellent opportunity for an Identity and Access Manager (IAM) to join our team. In this role you will be supporting CMMC /NIST compliance though the application of policy, standards and best practice to support the IT Team. An Identity and Access Manager (IAM) develops and maintains systems that control user access to digital resources, focusing on security, compliance, and efficiency by managing user identities, roles, permissions, and authentication (like MFA), conducting audits, automating provisioning/deprovisioning, and ensuring adherence to policies like NIST v2 and v3 and CMMC. You will act as a bridge between security needs and user access, ensuring only authorized individuals access sensitive data.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related technical field with 5+ years of experience in Identity and Access Controls.
Master’s degree in computer science, Information Technology, or a related technical field with 3+ years of experience in Identity and Access Controls.
In lieu of degree, 7 plus years of experience in Identity and Access Controls.
Must be a US Citizen

Nice To Haves

Good overall knowledge of information systems best practices and a track record of delivering NIST accredited services
ITIL certification
Communicates well and has the skill to influence through persuasion in a formal context
Broad knowledge of IT Identity and Access control practices demonstrated by attainment of appropriate qualifications
Experience / awareness of cloud technologies and capabilities in an enterprise environment

Responsibilities

Responsible for ensuring all AC (22) and Identity (IA-11) Control Statements and their sub actions are managed and maintained to the level required for both Assessment 1 and Assessment 2 (NOFORN) scope
Develop, implement, and enforce IAM policies, procedures, and strategies for secure access.
Design, build, and maintain IAM solutions (e.g., Active Directory, Azure AD, SSO, MFA).
Manage user onboarding, offboarding, role changes, and account provisioning/deprovisioning.
Define and enforce role-based access control (RBAC) and privileged access management (PAM).
Oversee multi-factor authentication (MFA) and other authentication methods.
Conduct regular access audits, monitor for violations, and ensure regulatory compliance (SOX, GDPR, HIPAA).
Provide technical support, resolve access issues, and train users.
Work with IT, security, and business stakeholders to integrate IAM and address risks.
Proactively identify security gaps and vulnerabilities in access controls.