Manager Identity and Access Management - Cyber Security & TSOC

FirstEnergy • Akron, OH

8h • Hybrid

About The Position

We’re looking for a strategic, technically skilled leader to shape the future of identity and access management platforms at FirstEnergy. In this role, you’ll lead a talented team of system administrators, driving innovation in identity, authorization and access mgmt for both internal and external users. The Mgr IAM is responsible for ensuring that Service Level Agreements are being met, as well as evaluating new technologies and processes for use within the five IAM pillars. You’ll work closely with teams across Cybersecurity, IT, HR, Tx, Dx, Supply Chain and other key business stakeholders to deliver secure, scalable solutions in a hybrid environment.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technology field.
• Minimum of 7 years experience in cyber security, IT infrastructure or application project roles, with demonstrated leadership experience.
• Deep knowledge of Identity & Access Management Technologies including but not limited to: Microsoft Entra ID, Azure B2C, Okta, Ping Identity, SailPoint, OneIdentity, PAM Solutions, Token Management Platforms, IT Service Mgmt Platforms, and various Certificate Lifecycle Management platforms
• Experience with authentication Protocols: SAML, OAuth, OpenID Connect is required.
• Experience with compliance activities such as: SOX, CIP.
• Strong communication (both written and verbal) and interpersonal skills
• Proven ability to collaborate across departments and influence stakeholders
• Strategic mindset with a focus on innovation and continuous improvement
• Ability to effectively manage a large, budgeted portfolio, forecast and re-forecast dollars for both Labor and OTL.
• Ability to work with all levels of management throughout the organization.
• Strong knowledge of core architectural design principles to achieve optimal availability and disaster recovery availability.
• Ability to communicate complex and technical issues to a diverse population, orally and in writing, in an easily understood, authoritative and actionable manner.
• Demonstrated understanding of best practices in system and application management encompassing strategies, policies, principles, procedures and standards.

Nice To Haves

• MBA is preferred.
• Preferred certifications: CISSP, CISM, or IAM-specific certifications.

Responsibilities

• Lead the Identity & Access Management (IAM) program, ensuring secure and efficient management of user identities, authentication, authorization, and access across enterprise systems.
• Develop and execute IAM strategy, roadmap, and operating model aligned with cybersecurity, business, and regulatory requirements.
• Manage a talented team responsible for identity lifecycle, including onboarding, transfers, role changes, and offboarding of employees, contractors; in coordination with HR and IT.
• Maintain a high level of technical knowledge of platforms supported by attending webinars, conferences and workshops; reviewing professional publications and research and establishing personal networks
• Responsible for managing staff performance by setting objectives, goals, priorities, tracking performance and providing feedback. Assists in personal growth of staff through individual development plans, mentoring, coaching and stretch assignments.
• Oversee the management of the infrastructure, hardware and software including their SLAs required to support all aspects of the IAM pillars: Identity Governance, Access Mgmt, Privileged Access Mgmt, Password Mgmt and Identity Analytics and Intelligence.
• Lead enterprise authentication services including Multi-Factor Authentication (MFA), Single Sign-On (SSO), Conditional Access, federation services, and passwordless authentication technologies.
• Establish and enforce role-based access control (RBAC) and least privilege principles across information technology and operational technology environments.
• Ensure compliance with regulatory standards.
• Ensure adherence to cybersecurity, data governance and data loss prevention policies. Enforce role-based access control (RBAC) and multi-factor authentication (MFA). Monitor and enforce access controls and permissions.
• Contribute to long-term technology roadmaps, budget planning, forecasting (both Labor and OTL), and resource allocation. Lead multiple projects simultaneously, ensuring timely delivery within scope and budget.
• Lead investigations and resolve IAM related incidents. Implement corrective actions and continuous improvement measures, including updating procedures and processes. Provide off-hours support for major incidents and critical project activities as needed.
• Integrate IAM controls with cyber operations, threat detection, and insider threat monitoring capabilities.
• Support secure remote access, vendor access management, and privileged access controls for operational technology (OT) and critical infrastructure environments.
• Maintain strong segregation of duties between IAM operations, access governance, and compliance oversight functions.
• Serve as the senior IAM leader during regulatory audits, compliance assessments, and cybersecurity reviews.
• Provide input to contract negotiations for required software, hardware and consulting, to stay within budget.
• Partner with Cyber Operations, Infrastructure, HR, Compliance, Internal Audit, and business stakeholders to ensure identity controls support business objectives while reducing cyber risk.
• Champion FE’s Core Values and Behaviors through coaching and by personal example.

Benefits

• competitive pay plus incentive compensation
• company-sponsored pension plan
• 401(k) savings plan with matching employer contribution
• choice of medical, prescription drug, dental, vision, and life insurance programs
• skills development training with tuition reimbursement

What This Job Offers

• Job Type: Full-time
• Career Level: Manager