Cyber Operate Manager - IAM PBAC Architect/Engineer

Deloitte • Jersey City, NJ

11d • $134,500 - $265,100

About The Position

Deloitte’s Cyber Operate offering helps organizations operate and evolve critical cyber capabilities, including identity and access management. As a Lead Managed Services Engineer II, you will lead the design, implementation, and evolution of policy-based access control (PBAC) and broader identity and access management (IAM) solutions for large, highly regulated client environments. You will combine hands-on engineering with technical leadership to strengthen security, support regulatory compliance, and help clients manage access at scale.

The Cyber Operate team operates clients’ critical cyber assets as a fully managed service or in partnership with clients. It provides talent, leading technologies, and processes for operating cyber capabilities, including the identity lifecycle, security operations, threat intelligence, application security business transformation, and continuous compliance.

The position requires residing within commuting distance of the assigned office, with the ability to commute daily if required. Employees can expect to co-locate an average of once a week, with variation based on work, projects, and client locations, and travel an average of 20–25%.

Requirements

• Bachelor’s degree in Computer Science or Information Systems.
• At least 6 years of experience in IAM, including PBAC, identity governance, automated provisioning and de-provisioning, enterprise access management, and IAM security audits.
• Experience building IAM automation using Python or PowerShell.
• Experience working with Active Directory or LDAP, Okta or Azure Active Directory, and SAML, OAuth, or OpenID Connect.
• Ability to reside within commuting distance of the assigned office and commute daily if required, without overnight accommodations.
• Ability to co-locate an average of once a week, with variation depending on work, projects, and client locations.
• Ability to travel an average of 20–25%, based on work and client or industry needs.
• Ability to work independently and as part of a team; communicate effectively in writing and verbally; maintain attention to detail and quality; manage priorities in a fast-paced environment; lead projects or workstreams; and mentor and guide others.

Nice To Haves

• Master’s degree.
• Current CISSP, CISM, CCSP, or vendor-specific identity and access management or cloud security certification.
• Experience supporting financial services organizations, including banking, insurance, or capital markets.
• Experience supporting security operations, threat intelligence, application security, or continuous compliance services.
• Experience with PlainID or Axiomatics.
• Experience leading IAM technical workstreams, technology roadmaps, or process-improvement initiatives.

Responsibilities

• Lead the design, implementation, and ongoing enhancement of PBAC and IAM solutions for complex, regulated client environments.
• Translate business and security requirements into IAM architectures, controls, implementation plans, and technology roadmaps.
• Build and maintain automated provisioning, de-provisioning, and access-control workflows.
• Assess IAM controls and vulnerabilities, troubleshoot access issues, and lead root-cause remediation that minimizes business disruption.
• Lead technical workstreams, maintain IAM documentation, deliver enablement on IAM policies and procedures, and mentor team members.
• Work independently and collaboratively, manage multiple tasks, prioritize work, meet deadlines, and build professional relationships.

Benefits

• May be eligible to participate in a discretionary annual incentive program; any award depends on individual and organizational performance and other factors.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior