Manager, Identity & Access Management

Motional•Las Vegas, NV

3d•Hybrid

About The Position

We are seeking a hands-on results-driven Manager of Identity & Access Management (IAM) to lead and modernize our enterprise identity ecosystem. As an Autonomous Vehicle (AV) company, our security footprint spans complex cloud environments, edge computing, vehicle-to-cloud infrastructure, federated ecosystem partners, and a diverse workforce. You will provide technical thought leadership while managing Identity Governance and Administration (IGA), identity federation, SCIM integrations, custom IAM development, and our core Okta enterprise architecture. This role requires close cross-functional collaboration with HR, Engineering and End-User Services (EUS) to establish operational SLAs, track key metrics, transition OAuth security posture, and automate workforce lifecycle processes.

Requirements

5+ years in Identity & Access Management, with 2+ years in a leadership or managerial role leading IAM operations and cross-functional initiatives.
Proven experience implementing admin-consent workflows, constraining user-consent permissions, and auditing third-party OAuth app integrations.
Deep expertise in architecting complex identity federation models across multi-tenant environments, hybrid clouds, and third-party partner applications.
Deep hands-on and architectural experience with Okta (Certification such as Okta Certified Administrator or Consultant is a plus).
Proven track record of working closely with HR (HRIS integrations like Workday/OracleHCM) and IT Operations/EUS teams to design seamless lifecycle processes.
Demonstrated ability to define, manage, and report on operational SLAs and enterprise IAM metrics/KPIs.
Strong background in software development/scripting for custom identity integrations and API development.
Expert knowledge of SCIM, OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, WS-Federation, and IGA frameworks.
Exceptional stakeholder management skills with the ability to bridge technical requirements with HR, EUS, and executive priorities.

Nice To Haves

Okta Certified Administrator or Certified Identity and Access Manager
Okta (Workflows, Event Hooks, SDKs, OEL)
CyberArk (REST APIs, Conjur, CCP, CPM Plugins)
Active Directory
JumpCloud
Familiarity or previous experience in the automotive or autonomous vehicle industry

Responsibilities

Define the long-term enterprise IAM roadmap, aligning identity security with Zero Trust principles, regulatory compliance, and the unique security demands of autonomous fleet operations.
Drive the strategic transition from user-consent to admin-consent frameworks across all SaaS and enterprise applications, establishing strict OAuth consent policies to minimize dynamic consent risks.
Architect and maintain secure identity federation across multi-cloud environments, B2B partner ecosystems, vendor portals, and external services utilizing SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
Serve as the primary liaison to HR teams to streamline Joiner-Mover-Leaver (JML) workflows via HRIS integrations, and collaborate with End-User Services (EUS) & Endpoint Engineering to optimize identity lifecycle requests, service desk escalations, and user onboarding/offboarding experiences.
Define, track, and enforce operational SLAs for access request fulfillments, incident resolution, and account deprovisioning. Establish key performance indicators (KPIs) measuring IAM system uptime, adoption of MFA/SSO, automation rates, and compliance readiness.
Establish the enterprise identity foundation for governing autonomous AI systems and agentic identities. Define runtime authorization, least-privilege scoping, dynamic delegation, and auditability frameworks to ensure AI agents, autonomous models, and machine-learning workloads operate within secure, verifiable access boundaries.
Serve as the primary subject matter expert for Okta, managing SSO, Adaptive MFA, Lifecycle Management, and Workflows to ensure seamless, secure access.
Oversee enterprise Identity Governance and Administration (IGA) strategies across human workforce and non-human identities (service accounts, bots, microservices, and vehicle-to-cloud identities), lead RBAC/ABAC maturity, access recertification campaigns, and automated least-privilege enforcement.
Standardize and implement SCIM-based provisioning protocols across internal tooling, SaaS platforms, and proprietary AV operational software.
Mentor and manage an IAM engineering team, fostering a culture of innovation, continuous learning, and robust security practices.