Managing Director, Identity & Access Management - Evernorth Health Services (Hybrid)

The Cigna Group•Bloomfield, CT

1d•$209,600 - $349,300•Hybrid

About The Position

Identity sits at the core of every digital interaction. As Managing Director of Identity and Access Management, this role defines how millions of identities securely access critical systems, data, and services across the enterprise. The leader is accountable for the strategy, engineering, and operation of enterprise-wide IAM platforms that support employees, contractors, customers, and an expanding set of non-human identities at global scale. This includes end-to-end ownership of the platform lifecycle—architecture, delivery, operations, and continuous improvement—ensuring identity services are secure, resilient, and scalable to enable business growth, regulatory compliance, and accelerating AI adoption. This role leads the IAM engineering function responsible for building and operating platforms that serve 70,000 employees, 50,000 contractors, over 10 million customers, and a rapidly growing population of non-human identities, including 10,000+ bots. The Managing Director owns the full engineering lifecycle across core IAM domains, spanning design, delivery, runtime operations, and continuous optimization.

Requirements

12 or more years of experience in identity and access management, cybersecurity, or related engineering disciplines
5 or more years leading engineering teams, with demonstrated ability to grow and develop technical talent
Hands-on experience with enterprise IAM platforms including Okta, Savyint, Cyberark and AD
Working knowledge of core identity protocols: OAuth 2.0, OIDC, SAML, LDAP, and SCIM
Experience designing and operating identity solutions at large enterprise scale (tens of thousands of identities minimum)
Proven track record delivering complex platform engineering programs on time and within scope
Strong grasp of modern engineering practices including CI/CD, infrastructure as code, and observability

Nice To Haves

Experience building identity infrastructure for non-human identities, AI agents, or machine identity programs
Familiarity with delegation models, self-attenuating authorization, and agent-based authentication patterns
Background in regulated industries with audit, compliance, or data residency requirements
Experience leading through a shift from legacy identity administration to automation-first engineering models

Responsibilities

Define and drive the multi-year IAM vision, strategy, roadmap, and investment priorities aligned to business and security objectives
Champion IAM as a strategic business enabler
Lead modernization efforts
Own and drive delivery against the IAM engineering roadmap in partnership with architecture and security leadership
Hold accountability for platform availability, authentication latency, and provisioning SLAs and SLOs
Lead the engineering lifecycle for core IAM platforms including Okta, Savyint, CyberArk, AD, Entra ID, and Other IAM systems.
Ensure platforms produce audit-ready evidence by design, reducing manual compliance effort
Drive deployment frequency, reduce change failure rates, and improve mean time to recovery across all platform teams
Build and operate the identity infrastructure for non-human identities including AI agents, bots, service accounts, and machine identities
Develop credentialing, authentication, and delegation models for ephemeral and autonomous workloads
Implement self-attenuating authorization patterns and decoupled identity models for agent-based systems
Establish observability and inspection capabilities for AI agent identity activity
Drive automation of provisioning, deprovisioning, access certification, and entitlement management
Build and maintain SDKs, documentation, and sandbox environments that allow application teams to adopt centralized identity patterns without friction
Champion shift-left identity practices, embedding opinionated identity patterns into application design decisions early in the development lifecycle including skilling AI development tooling
Track and improve adoption KPIs including percentage of automated provisioning, percentage of applications on centralized authentication, and non-human identity coverage
Run each platform team with a product-aligned model: clear backlogs, defined ownership, and lifecycle accountability
Build, inspire, and develop a diverse team of IAM leaders. Build and retain engineering talent with deep protocol-level skills in OAuth 2.0, OIDC, SAML, LDAP, and SCIM
Develop team capability to operate effectively as the identity function shifts from traditional administration toward automation, scripting, and AI-ready infrastructure
Establish strong succession planning and talent development strategies for critical IAM capabilities and talent