Manager - IAM Engineering and Integration

GM Financial•Arlington, TX

1d•Hybrid

About The Position

Innovation isn’t just a talking point at GM Financial, it’s how we operate. From generative AI and cloud-native technologies to peer-led learning and hackathons, our tech teams are building real solutions that make a difference. We’re committed to AI-powered transformation, using advanced machine learning and automation to help us reimagine customer interactions and modernize operations, positioning GM Financial as a leader in digital innovation within a dynamic industry. Join us and discover a workplace where your ideas matter, your development is prioritized, and you can truly make a global impact. Flexible hybrid work environment (onsite 2 days a week/3 days remote) at our Arlington (AOC1), TX office. Please note: We are unable to provide any type of sponsorship for this position at this time.

Requirements

5-7 years in Identity and Access Management or related experience at a medium-to-large company required
High School Diploma or equivalent required
Bachelor’s Degree in related field or equivalent experience required
Deep knowledge of Identity and Access Management technologies across Active Directory, PKI, SailPoint, Okta, CyberArk, and modern authentication standards
Strong understanding of identity governance frameworks, privileged access controls, certificate-based authentication, and directory services
Ability to architect and guide the implementation of secure, scalable IAM solutions
Solid understanding of Zero Trust principles, identity security best practices, audit requirements, and regulatory controls
Ability to embed security-by-design into all IAM engineering processes
Vendor relationship and contract management experience (particularly with SailPoint, Okta, CyberArk, and certificate authorities)
Hands on experience with Active Directory/Azure AD, SailPoint IdentityIQ & ISC, Okta (SSO, MFA), CyberArk (PAM), PKI/Certificate Services

Nice To Haves

3-5 years of experience in an IT leadership role preferred
Experience leading complex engineering teams, including roadmapping, prioritization, and resource planning
Demonstrated experience managing high-performing technical teams and developing engineering talent
Effective stakeholder communication and coordination across security, infrastructure, and application teams
Strong problem-solving skills and ability to lead incident response related to IAM platforms

Responsibilities

Lead engineering, configuration, and lifecycle management of IAM platforms including Active Directory, SailPoint (IIQ and ISC), Okta, CyberArk, and PKI Services
Oversee platform integrations with HR systems, ServiceNow, enterprise applications, cloud services, and third party vendors
Ensure resilient, highly available, and scalable IAM architectures across on prem and cloud environments
Establish reference architectures, integration patterns, and technical standards for IAM services
Provide technical and operational leadership for enterprise Active Directory services, including on premises and hybrid directory environments
Own AD architecture, design standards, and operational patterns, ensuring alignment with Zero Trust, least privilege, and identity centric security models
Oversee directory hygiene and lifecycle management, including user objects, service accounts, groups, and delegated administration models
Lead AD group and service account governance, ensuring alignment with SailPoint driven identity lifecycle (Joiner Mover Leaver) processes and access certifications
Partner with Identity Governance teams to ensure AD entitlements are authoritative, well modeled, and auditable within SailPoint
Ensure secure integration between Active Directory and Okta, including federation, authentication flows, and directory synchronization
Support and enhance privileged access controls for AD in coordination with CyberArk, including protection of domain level and Tier 0 privileged accounts
Lead AD remediation and risk reduction efforts, including cleanup of legacy groups, orphaned accounts, excessive permissions, and insecure configurations
Establish and maintain monitoring, alerting, and operational metrics for directory services availability, security posture, and access integrity
Act as the escalation point for directory related incidents, audits, and compliance inquiries, ensuring timely remediation and root cause resolution
Collaborate with Infrastructure, Endpoint, Cloud, and Security Architecture teams to ensure AD remains a foundational identity control plane for enterprise services
Own Joiner Mover Leaver (JML) automation, role based access control (RBAC), entitlement modeling, and access request workflows using SailPoint
Ensure consistent execution of access certifications
Partner with application owners and engineers to onboard applications into IAM governance and provisioning frameworks to ensure completeness and accuracy and entitlement metadata
Assist in testing of lower environments
Lead implementation and ongoing enhancement of CyberArk for privileged account management, credential vaulting, and session monitoring
Oversee Okta services including SSO, MFA, and API authentication for workforce and application access
Ensure authentication services meet enterprise security, user experience, and regulatory requirements
Manage enterprise PKI services, including certificate issuance, automation, renewal, and lifecycle management
Ensure certificates are properly governed and integrated across applications, infrastructure, and security platforms
Support certificate compliance requirements across the enterprise
Ensure IAM controls meet regulatory and audit requirements (e.g., SOX, internal cybersecurity standards)
Support internal and external audits by providing evidence, walkthroughs, and remediation plans
Understanding of look back efforts
Proactively identify IAM risks and lead remediation of control gaps and vulnerabilities
Lead the engineering, maintenance, and modernization of IAM platforms
Identify mitigating controls to reduce risk
Ensure compliance with internal policies, audit requirements, and regulatory frameworks