Manager - Identity & Access Management

SHI International Corp.•Somerset, NJ

1d•$170,000 - $220,000•Hybrid

About The Position

The Manager - Identity & Access Management (IAM) is responsible for leading the design, engineering, and operational execution of SHI's enterprise Identity and Access Management strategy. This role oversees a team of IAM engineers and is accountable for delivering secure, scalable, and compliant identity services across the organization. The Manager drives IAM modernization initiatives, including identity lifecycle management, access governance, privileged access management, and application onboarding, while supporting a zero-trust security model and enterprise security standards. This position serves as a key liaison between Security, Infrastructure, Cloud, and Application teams to ensure identity services enable business growth while maintaining a strong security and audit posture. This position is required to report to the Somerset, NJ office location on a hybrid basis.

Requirements

Strong leadership, coaching, and team development skills with the ability to build and lead high-performing engineering teams.
Expertise in Identity and Access Management (IAM), including identity lifecycle management, Joiner/Mover/Leaver (JML) processes, Role-Based Access Control (RBAC), access governance, and certification programs.
Strong knowledge of IAM platforms, enterprise identity integrations, and identity governance solutions.
Experience developing and executing IAM strategies, roadmaps, modernization initiatives, and enterprise security programs.
Ability to design, implement, and support secure, scalable, and reliable IAM architectures and services.
Strong understanding of authentication technologies, identity protocols, and directory services, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Active Directory, and Microsoft Entra ID.
Experience implementing and supporting privileged access management (PAM/CPAM), least-privilege access models, just-in-time access, and risk-based authentication controls.
Knowledge of zero-trust security principles and identity-centric security frameworks.
Experience with IAM technologies such as SailPoint, Saviynt, CyberArk, and Microsoft Entra ID.
Familiarity with cloud platforms, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP).
Experience with API integrations, automation technologies, and modern identity protocols.
Strong understanding of authentication workflows, identity traffic patterns, and enterprise security controls.
Excellent analytical, problem-solving, decision-making, and risk management skills.
Strong communication, collaboration, and stakeholder management skills with the ability to influence across security, infrastructure, engineering, and business teams.
Ability to establish operational discipline, drive continuous improvement, and balance innovation with stability, compliance, and security.
Demonstrated strategic thinking and execution skills, with the ability to align IAM capabilities to organizational business and security objectives and deliver measurable results.
Bachelors Degree or equivalent work experience required
7-10+ years of experience in Identity & Access Management or a related field.
2-4+ years of experience leading, mentoring, or managing engineering teams.
Proven experience leading IAM programs within large enterprise environments.

Nice To Haves

Experience implementing IAM solutions within a zero-trust security model.
Knowledge of DevOps methodologies and automation practices.
Experience with scripting and automation tools, including PowerShell and Python.
Industry certifications such as Microsoft Identity Administrator, CISSP, or other IAM-related certifications.

Responsibilities

Own the IAM platform strategy, roadmap, and execution across the enterprise.
Translate business, security, and compliance requirements into IAM capabilities and solutions.
Lead IAM initiatives, including: Identity lifecycle automation (Joiner, Mover, Leaver processes), Access governance and certification programs, Privileged Access Management (PAM), Zero-trust security alignment.
Establish and continuously enhance IAM standards, policies, and reference architectures.
Lead, mentor, and develop a team of IAM engineers.
Establish priorities, assign work, and align team efforts with organizational objectives.
Provide technical leadership and remove obstacles impacting complex IAM initiatives.
Drive accountability for: Engineering delivery, Operational stability, Continuous improvement.
Foster a high-performance culture centered on ownership, accountability, and execution.
Oversee the design and implementation of IAM solutions, integrations, and workflows.
Ensure IAM platforms are secure, scalable, reliable, and maintainable.
Guide engineering efforts across: Identity platforms, including Microsoft Entra ID; Authentication services, including Single Sign-On (SSO) and Multi-Factor Authentication (MFA); Directory services, including Active Directory and Microsoft Entra ID.
Ensure consistent onboarding of applications into the IAM ecosystem.
Own enterprise identity lifecycle processes, including: Joiner, Mover, Leaver (JML) automation; Role-Based Access Control (RBAC) design and governance; Access reviews and certification programs.
Ensure effective governance of access provisioning, monitoring, and deprovisioning.
Maintain audit readiness and compliance with internal and external standards.
Partner with Security teams to implement and enforce identity-related controls and policies.
Mature and support security initiatives, including: Least privilege access models; Just-in-time access; Conditional access and risk-based authentication.
Ensure IAM controls support regulatory and compliance requirements, including SOC and ISO frameworks.
Identify, assess, and mitigate identity-related security risks.
Oversee IAM operational processes, including: Provisioning workflows; Incident and issue management; Platform and performance monitoring.
Drive automation initiatives to reduce manual effort and improve service reliability.
Define and monitor key performance indicators such as: Provisioning latency; Certification completion rates; Application onboarding timelines.
Ensure documentation, standard operating procedures, and operational runbooks remain current and effective.
Partner closely with: Security Engineering teams; Cloud and Infrastructure teams; Application owners; Business stakeholders.
Serve as the escalation point for complex IAM issues.
Provide leadership with updates on IAM roadmaps, risks, initiatives, and operational performance.