Identity and Access Management (IAM) Lead

Air InfoSec•Austin, TX

1d•Onsite

About The Position

The Identity and Access Management (IAM) Lead will support the Texas Department of Transportation (TxDOT) in overseeing enterprise identity lifecycle operations, access governance, application onboarding, authentication services, service performance, audit readiness, and continuous improvement. The role leads and mentors IAM/UAM staff and coordinates with security, infrastructure, application, business, audit, and vendor teams. The IAM Lead helps define the IAM/UAM operating model and ensures access is granted according to least privilege and approved business need. The position maintains audit-ready controls, reports service performance and risks, and recommends actions to technical and executive leadership. This is an onsite role at TxDOT Offices in Austin, Texas. Candidates must be local, reside within 50 miles of the work location, be authorized to work in the U.S., and agree to TxDOT’s in-office work policy. The schedule is Monday–Friday, 8:00 AM–5:00 PM, onsite 4–5 days per week.

Requirements

8 years of progressively responsible experience in information technology, cybersecurity, enterprise infrastructure, technology service delivery, or security programs.
5 years of direct experience in IAM, UAM, identity governance, cybersecurity access administration, or enterprise access-management operations.
3 years of experience leading technical or operational teams, serving as a technical lead, supervising staff, or directing cross-functional IAM workstreams.
3 years of hands-on or service-owner experience with enterprise identity technologies such as Active Directory, Microsoft Entra ID, SSO, MFA, directory services, role-based access control, or privileged access.
2 years of experience with identity governance and administration processes such as provisioning, deprovisioning, access certification, role management, entitlement management, or application onboarding.
2 years of experience supporting audit, compliance, security-control testing, access reviews, risk remediation, or evidence collection for identity and access controls.
Strong knowledge of identity lifecycle management, authentication, authorization, SSO, MFA, identity governance, directory services, privileged access, least privilege, role-based access control, and access-review practices.
Ability to evaluate complex access issues, distinguish operational problems from control risks, and coordinate the appropriate technical and business response.
Ability to write and maintain clear procedures, control documentation, operational standards, executive updates, and audit evidence.
Strong service-management, leadership, analytical, communication, customer-service, collaboration, and problem-solving skills, including prioritization, escalation management, metrics, and root-cause analysis.
Must reside within 50 miles of the Austin, Texas work location.
Must be authorized to work in the U.S.
Must agree to TxDOT’s in-office work policy.

Nice To Haves

Bachelor’s degree in information technology, cybersecurity, computer science, information systems, or a related field; equivalent relevant experience may be considered where permitted.
2 years of experience in a public-sector, regulated, transportation, financial, healthcare, utilities, or critical-infrastructure environment.
2 years of experience with SailPoint, Ping Identity, Microsoft Entra ID, ServiceNow, or comparable identity-governance, federation, directory, or workflow platforms.
Experience with identity automation, workflow orchestration, APIs, scripting, reporting, or data-quality improvement.
Professional certification in IAM, cybersecurity, audit, project management, or IT service management, such as CISSP, CISM, Security+, Microsoft identity certifications, SailPoint certifications, ITIL, PMP, or comparable credentials.

Responsibilities

Lead IAM/UAM operations, projects, service improvements, and modernization initiatives.
Help define the operating model, service ownership, escalation paths, standards, procedures, and control requirements.
Translate security, business, audit, and compliance requirements into practical identity and access-management processes and develop remediation plans for service risks and control gaps.
Oversee identity lifecycle processes, including onboarding, transfers, role changes, temporary access, access recertification, separation, and offboarding.
Establish standards for access provisioning, deprovisioning, exception handling, emergency access, privileged access, and periodic access reviews based on least privilege, role-based access, and separation-of-duties requirements.
Provide service and operational oversight for Active Directory, Microsoft Entra ID, SSO, MFA, conditional access, passwordless authentication, identity governance, and privileged access.
Coordinate application onboarding into enterprise identity platforms, including authentication design, user population, role mapping, approval requirements, provisioning procedures, testing, and support transition.
Manage access-request queues, incidents, service requests, escalations, and backlogs; define and monitor service levels, fulfillment times, quality measures, and recurring issues.
Develop and maintain operational procedures, runbooks, knowledge articles, escalation guidance, support documentation, and service continuity expectations.
Ensure access activities are authorized, traceable, documented, and audit ready.
Support internal and external audits, security assessments, control testing, evidence collection, and remediation of findings.
Lead, coach, and mentor IAM/UAM staff.
Identify automation and self-service opportunities.
Develop dashboards and executive reporting on service performance, risks, and improvement work.