Mgr, Identity & Access Mgmt

Royal Caribbean Cruises Ltd•Miami, FL

1d•Onsite

About The Position

The Royal Caribbean Group’s Global Information Security Team has an exciting career opportunity for a full time Manager, Identity & Access Management reporting to the Director, Identity & Access Management. The position is onsite and based in Miramar, Florida. The position is also not eligible for work authorization sponsorship. We are seeking a highly technical Manager of IAM Engineering to lead and mentor a global team of Identity Engineers at Royal Caribbean Group. This is not a traditional people-management role or a standard COTS implementation position. We require an engineering leader who will drive the architecture, development, and execution of complex identity services across a massive global enterprise. You will move us beyond out-of-the-box vendor configurations, architecting custom solutions within environments heavily reliant on Entra ID, PingIDM, and PingAM. Your mandate is to engineer scalable, API-first identity lifecycles, eliminate decentralized provisioning models, and drastically reduce standing privileges through advanced automation.

Requirements

10+ years of progressive experience in Identity & Access Management with a mandatory background in software engineering, scripting, or systems architecture.
You must be able to read, write, and review code.
5+ years of experience acting as an engineering lead or technical manager for highly skilled development/engineering teams.
Proven experience utilizing AI to accelerate software development, coupled with a deep architectural understanding of securing AI workloads, managing workload identities, and protecting API endpoints for enterprise AI models.
Deep, hands-on architectural expertise with Microsoft Entra ID and the Ping Identity stack (PingAM, PingIDM).
High proficiency in engineering solutions utilizing federation and provisioning protocols (OIDC, SAML, SCIM, OAuth2, REST APIs).
Extensive experience writing complex automation, reconciliation, and integration scripts using PowerShell, Python, or similar languages.
Demonstrated ability to engineer automated SOX controls and architect Zero Trust principles into workforce IAM, specifically regarding JIT elevation and PAM integrations.
Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or equivalent technical experience.

Nice To Haves

Pure people managers will not be considered.

Responsibilities

Lead, code alongside, and mentor a distributed team of IAM engineers.
Evaluate architecture, review code (PowerShell, Python, API scripts), and raise the technical baseline of the team.
Drive the extensive use of AI coding assistants and generative models within the IAM engineering lifecycle to accelerate script development, automate complex policy generation, and optimize reconciliation logic.
Drive the engineering of custom SCIM endpoints, token exchange mechanisms, and complex reconciliation scripts to integrate disparate systems (including massive ERP environments like Oracle Fusion) into our centralized identity fabric.
Architect and enforce highly consistent, automated, and centralized access provisioning models.
Engineer out the human elements and decentralized processes that typically lead to SOX audit vulnerabilities.
Lead the technical transition away from static privileged access.
Oversee the engineering of Just-In-Time (JIT) elevation workflows within Entra ID and our PAM environments, targeting a near-zero standing privilege baseline.
Manage and extend the technical capabilities of our core IAM platforms (Entra ID, Ping Identity suite).
Design solutions that push the boundaries of these tools rather than settling for standard deployments.
Define and execute a strategy for modernizing IAM capabilities, leveraging advanced scripting, self-service workflows, and AI-driven intelligence for access risk analysis.