Identity and Entitlement Management Workstream Lead

Farm Credit East•Enfield, CT

1d•$100,000 - $125,000•Hybrid

About The Position

Be part of a team focused on enabling the success of Farm Credit East’s staff through world class technology support. Farm Credit East’s success is built on its ability to leverage technology and staff to provide a high-class customer and employee experience. This position provides staff the support and resources they need to provide the level of service Farm Credit East is known for. We are One Team Working Together with a focus on our five pillars: Outstanding Customer and Employee Experience, Quality Growth, Operational Excellence, Commitment to our Communities, and Protecting Customer Information. The Identity and Entitlement Management Workstream Lead is accountable for leading Farm Credit East’s identity governance and administration (IGA), and entitlement-management workstream through strategy, design, implementation, application onboarding, testing, go-live, and transition to operations. This includes overseeing the Customer Identity & Access Management and Identity Governance Lifecycle management implementations. The role serves as the FCE product owner and decision coordinator, aligns business, Information Security, IT, HR, Compliance, application owners, Farm Credit Financial Partners, Inc. (FPI), and implementation partners, and provides formal review and sign-off for workstream deliverables. The lead ensures identities, access rights, entitlements, approvals, and non-human identities are governed consistently and auditable across the modernized platform ecosystem. The value drivers for this role are as follows: Identity Strategy and Product Ownership, Secure Platform Modernization, Risk Reduction and Regulatory Readiness, Cross-Functional Delivery and Accountability, Operational Sustainability and Adoption.

Requirements

A Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field required.
Minimum of 8 years of progressive experience in IAM, IGA, cybersecurity, enterprise applications, or technology program delivery, including at least 3 years leading complex cross-functional identity initiatives or serving as an IAM/IGA product owner.
Experience operating in a regulated financial-services environment and coordinating with managed service providers is strongly preferred.
Project or product credentials such as PMP, PMI-ACP, Certified Scrum Product Owner, or equivalent are preferred.

Nice To Haves

Master's degree or equivalent experience preferred.
Preferred certifications include CISSP, CISM, CRISC, CISA, CGEIT, or an IGA/IAM platform certification.

Responsibilities

Own the Identity & Entitlement Management workstream including working with cross functional leaders to develop vision, roadmap, delivery backlog, priorities, acceptance criteria, decisions, risks, and dependencies.
Lead recurring workstream status, requirements, design, governance, and decision forums; communicate progress, blockers, and recommendations to program and security leadership.
Coordinate functional delivery across Information Security, IT, HR, Compliance, Legal/Privacy, FPI, business teams, application owners, technical SMEs, and implementation partners.
Review and formally approve FCE deliverables, ensuring traceability from requirements through design, testing, deployment, and operational handoff.
Manage sequencing dependencies with Salesforce Financial Services Cloud and nCino role/profile design, the customer portal, CIAM/FGA, integrations, and data initiatives.
Direct selection and implementation of the IGA platform based on business, technical, integration, security, and operational requirements.
Establish governance for authoritative identity sources, joiner-mover-leaver lifecycle states, access requests, approvals, provisioning and deprovisioning, access certification, RBAC, separation of duties, reporting, and exception management.
Ensure entitlement models support least privilege, need-to-know access, customer-data protection, segregation of duties, and auditable approvals.
Oversee non-human identity and service-account governance, including inventory, ownership, lifecycle policy, and accountable use.
Define decision rights and sustainable ownership for identity policies, roles, entitlements, certifications, exceptions, and application onboarding.
Oversee authoritative-source integration and phased onboarding of prioritized business applications.
Ensure application owners and technical SMEs provide connector/API details, account and entitlement data, role-to-entitlement mappings, test environments, service accounts, error handling, and deployment support.
Direct business testing, including test planning, requirements traceability, defect remediation, integration validation, rollback planning, security validation, and go-live readiness.
Coordinate release and environment promotion for access-control changes and verify reconciliation, monitoring, and operational support are established.
Ensure delivery of hypercare, operational runbooks, application onboarding guides, configuration documentation, and knowledge transfer.
Partner with GRC, Compliance, Legal/Privacy, and Internal Audit to validate control design, access reviews, separation of duties, evidence, reporting, policy alignment, and regulatory readiness.
Establish KPIs and KRIs for access requests, lifecycle timeliness, certification completion, provisioning exceptions, reconciliation, policy violations, and application onboarding.
Identify delivery, adoption, security, and operational risks; drive corrective actions and escalate unresolved decisions.
Continuously mature identity governance based on audit results, incidents, stakeholder feedback, platform capabilities, and evolving threats.

Benefits

Short Term Incentive to reward business results
401(k) match up to 6% of salary; or for those unable to take full advantage of the 401(k) match, verified student loan payments may qualify for an employer match in your 401(k) up to 6% of salary
Defined Contribution retirement plan funded at 2-9% of salary depending on years of service
15-25 days of vacation leave per year, depending on years of service
12 days of holiday leave per year
7.5 days of sick leave in your first year, followed by 12 days of sick leave per year thereafter; unlimited rollover of unused sick leave year to year
Up to 80 hours of paid leave for birthing, non-birthing, and adoptive parents
Additional leave options available under FMLA and company policy
Comprehensive medical, dental, and vision plans, including preventive care and wellness programs to support your overall health and well-being
Health Savings Account
Life insurance at 2x base pay
Accidental Death and Dismemberment insurance at 2x base pay
Long-term disability insurance at 2/3 base pay
Tuition reimbursement
Continuing education and training
Employee Assistance Program offering a wide variety of tools and resources