Platform Owner, Identity & Access Management

Plains All American•Houston, TX

20h

About The Position

The Platform Owner, Identity & Access Management (IAM), is a strategic technical position responsible for the end-to-end architecture, development, automation, and management of the organization’s IAM framework, with a core focus on Microsoft Entra as the enterprise identity platform. This role is pivotal in aligning IAM initiatives with the organization’s business objectives and technology strategy, leveraging the TOGAF framework to ensure a robust, scalable, and compliant identity architecture.

Requirements

Bachelor’s degree or higher in Information Systems, Computer Science, or a related business field.
Minimum of 7 years’ experience operating and automating enterprise-scale I&AM services infrastructures, with direct expert level experience in Microsoft Entra and related identity platforms (e.g., Ping, Okta, Delinea, CyberArk, SailPoint, SASE).
Experience on operationalizing Mergers and Acquisitions in a fast to market approach to create value for the business.
Expert-Level understanding of legacy and modern applications authentications.
Expert-Level understanding of Citrix/VDI/Virtual hosted application and authentication mechanisms.
Demonstrated expertise in designing and implementing IAM solutions based on TOGAF architecture principles.
Expert experience with supporting Microsoft Identity Manager (MIM)
Experience with Power Platform Managed Identity
Experience transitioning from legacy to modern identity platforms.
Proficiency in Active Directory, Exchange, and other core identity systems, including hands-on experience with automating provisioning, group management, and access controls.
Strong analytical, problem-solving, documentation, and critical thinking skills, with the ability to troubleshoot and resolve complex system issues.
Experience with scripting and automation (e.g., PowerShell, Java, .NET) to support IAM operations.
Deep experience with industry cryptography protocols and standards such as LDAPs, Kerberos, SAML, x.509, TLS/SSL, and others.
Proven ability to work collaboratively with technical and business teams across diverse disciplines.
Cleared criminal history (background) and satisfactory reference checks
Compliance with the Company’s drug and alcohol policy including pre-employment D&A testing.
This position is not eligible for employment-based visa sponsorship. Applicants must be authorized to work in the U.S. for the duration of their employment

Nice To Haves

Preferred Certifications: Microsoft Certified Identity and Access Administrator Associate, Delinea Certified Engineer, Certified Information Systems Security Professional (CISSP), Certified Identity and Access Manager (CIAM), and Microsoft Certified Azure Solutions Architect Expert.
Preferred experience in the Oil & Gas Sector in both IT/OT Domains.

Responsibilities

Lead and mentor a geographically distributed team of Access Administrators and managed services provider, fostering a culture of excellence, automation, and continuous improvement.
Architect, implement, and optimize the IAM platform using Microsoft Entra, ensuring alignment with TOGAF principles for enterprise architecture, including Business, Application, Data, and Technology domains.
Oversee the lifecycle management of user and group accounts within Active Directory, Exchange, and integrated systems, ensuring secure and efficient provisioning and JML processes.
Collaborate with Information Security, IT, and business stakeholders to define and enforce access policies, ensuring timely and accurate fulfillment of user access requests.
Develop and report on key performance indicators and metrics related to access management, driving data-driven decisions and continuous service improvement.
Steward the access request process, identifying and implementing process automation enhancements to streamline provisioning and strengthen security controls.
Align IAM mappings and controls to NIST CSF 2.0 standards and other relevant compliance requirements (e.g., PCI, SOX).
Champion security, business value, operational efficiency, and business user experience.
Track, analyze, and report on metrics that demonstrate improvements in identity security posture and business productivity.