Identity Governance Lifecycle Specialist

Farm Credit East•Enfield, CT

1d•$85,000 - $105,000•Hybrid

About The Position

The Identity Governance Lifecycle Specialist supports Farm Credit East staff by enabling effective technology services and improving the employee and customer experience. The role focuses on identity lifecycle management, identity governance, access risk reduction, auditability, application integration, operational efficiency, and user experience. The specialist partners with application and business owners to establish access roles, entitlements, ownership, approvals, risk attributes, and role mappings. The position supports role-based access control, least-privilege practices, separation-of-duties controls, access reviews, privileged and non-human identity governance, and identity and entitlement catalog maintenance. The role coordinates identity governance and administration onboarding for enterprise and modernized applications. It validates technical integration information, supports connectors and workflows, tests provisioning and deprovisioning, and prepares onboarding documentation and operational handoffs. It also develops governance metrics, supports audits and regulatory examinations, collaborates with FPI on managed identity services and controls, and identifies opportunities to automate and improve processes. The posting also describes Azure cloud leadership and hybrid infrastructure responsibilities, including cloud solution design, implementation, optimization, architecture guidance, integration with on-premises data centers, and escalation support for complex infrastructure issues. The position requires a bachelor's degree in a related field and at least four years of relevant experience. Hybrid work options may be available after two weeks of employment, subject to job needs and manager discretion.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
At least 4 years of experience in IAM, IGA, cybersecurity, identity operations, application security, or IT governance.
Hands-on responsibility for identity lifecycle, access governance, provisioning, user access certifications, or application onboarding.

Nice To Haves

Advanced degree or equivalent experience.
Security-related certification such as CISSP, CCSP, or equivalent.
Security+, SSCP, CIAM, Microsoft identity credentials, or equivalent.
IGA platform certification for SailPoint, Saviynt, Microsoft Entra ID Governance, or equivalent.

Responsibilities

Provide hands-on technical leadership for the Microsoft Azure Cloud Center of Excellence, including cloud solution design, implementation, and optimization.
Provide architecture guidance for Azure IaaS and PaaS workloads aligned with enterprise standards, security requirements, and business objectives.
Lead implementation and support of hybrid infrastructure integrating Azure services with on-premises data centers.
Serve as the primary technical escalation point for complex Azure, on-premises, and hybrid connectivity issues.
Partner with business and application owners to define roles, entitlements, ownership, approval paths, risk attributes, and role-to-entitlement mappings.
Support RBAC design, access-policy implementation, least-privilege analysis, separation-of-duties rules, access review campaigns, and exception governance.
Validate access review assignments and document decisions, evidence, remediation, and completion.
Support governance for privileged access, service accounts, application identities, APIs, automation identities, and other non-human identities.
Maintain identity and entitlement catalogs, business-friendly access descriptions, application ownership records, and governance metadata.
Coordinate IGA onboarding with application owners and technical SMEs across enterprise and modernized platforms.
Gather and validate connector/API information, account schemas, entitlement data, test environments, service accounts, error handling, and deployment requirements.
Support connectors and workflow integrations; validate aggregation, provisioning, deprovisioning, reconciliation, logging, and failure handling.
Build and execute test scenarios for lifecycle events, access requests, access certifications, roles, SoD policies, negative cases, rollback, and go-live readiness.
Produce application onboarding and configuration guides and support transition to operational teams.
Design and drive implementation of dashboards and metrics for lifecycle timeliness, request turnaround, certification completion, access removals, exceptions, reconciliation, SoD violations, and application onboarding.
Support IAM-related audits, risk assessments, regulatory examinations, incident response, and evidence requests.
Collaborate with FPI to align managed identity services, SLAs, documentation, control performance, and escalation paths with FCE expectations.
Identify automation and process-improvement opportunities to reduce manual effort and access risk.

Benefits

Short-term incentive to reward business results.
401(k) match up to 6% of salary, or an employer match based on verified student loan payments for eligible employees unable to use the full 401(k) match.
Defined Contribution retirement plan funded at 2–9% of salary depending on years of service.
15–25 days of vacation leave per year, depending on years of service.
12 days of holiday leave per year.
7.5 days of sick leave in the first year, followed by 12 days per year thereafter, with unlimited rollover of unused sick leave.
Up to 80 hours of paid parental leave for birthing, non-birthing, and adoptive parents.
Additional family care leave options under FMLA and company policy.
Medical, dental, and vision plans, including preventive care and wellness programs.
Health Savings Account.
Life insurance at 2x base pay.
Accidental Death and Dismemberment insurance at 2x base pay.
Long-term disability insurance at 2/3 base pay.
Tuition reimbursement.
Continuing education and training.
Employee Assistance Program.
Hybrid work options may be available after two weeks of employment, subject to job role, business needs, performance, and manager discretion.