Identity Governance & Administration Lead

Envista Holdings Corporation•Brea, CA

About The Position

We are seeking a strategic and execution-focused Identity Governance & Administration (IGA) Lead to drive and mature enterprise identity governance capabilities across workforce and customer identity environments. This role owns the strategy, operating model, governance framework, and roadmap for delivering secure, scalable, and auditable access management across the organization. This position will balance security, compliance, automation, and user experience while driving modernization across identity lifecycle management, entitlement governance, and authentication controls.

Requirements

Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, Business, Engineering, or a related field; Equivalent industry experience, military service, professional certifications, and demonstrated leadership experience are valued equally
One or more of the following certifications: Microsoft Certified: Identity and Access Administrator Associate; Microsoft Cybersecurity Architect Expert; SailPoint IdentityIQ / ISC Certifications; Saviynt Certifications; Certified Identity and Access Manager (CIAM)
7+ years leading enterprise IAM/IGA programs
2+ years of experience managing MSPs
Experience supporting large-scale global organizations with multiple business units, acquisitions, and complex application ecosystems
Hands-on experience with a leading IGA platform (SailPoint, Saviynt, Entra ID Governance, or Okta)
Deep expertise in: Joiner/Mover/Leaver processes; Access certifications; Entitlement management; RBAC/ABAC; Segregation of Duties (SoD); Access request and approval workflows; Identity lifecycle management

Nice To Haves

Prior ownership of enterprise identity governance strategy and roadmap
Experience building or transforming an IGA program from low maturity to optimized maturity
Experience supporting M&A integration and identity consolidation programs
CISSP, CISM, CRISC, CCSP certification(s)

Responsibilities

Define and lead enterprise IGA strategy, roadmap, operating model, and maturity plan
Establish governance frameworks across workforce, privileged, third-party, machine, AI, and customer identities
Act as primary owner for access governance risk, control effectiveness, and audit readiness
Oversee lifecycle processes including joiner, mover, leaver, contractor, and partner access
Govern access across enterprise apps, cloud, SaaS, privileged systems, and critical platforms
Lead RBAC/ABAC initiatives including role mining, engineering, and lifecycle management and toxic combination identification
Define customer identity governance standards including registration, identity proofing, consent, delegated administration, entitlement management, and lifecycle controls (activation, inactivity, deletion, retention)
Ensure alignment with privacy, regulatory, and user experience requirements
Advance adoption of passwordless and phishing-resistant authentication
Collaborate with the Detection team to mature identity threat detection capabilities through behavioral analytics
Build and lead a high-performing identity governance function
Provide executive reporting on access risk, governance maturity, and remediation progress
Partner across Security, IT, HR, Legal, Privacy, Product, Engineering, and business teams
Define KPIs/KRIs including provisioning SLAs, certification quality, remediation aging, SoD violations, and risk trends
Ensure audit-ready reporting, repeatable evidence, and control assurance