Senior Director, Identity and Access Management

Baker Tilly•Chicago, IL

About The Position

Baker Tilly is hiring a Senior Director, Identity and Access Management (IAM) for its Enterprise IT team. The leader will define and execute a modern identity strategy for an enterprise of more than 15,000 users, improving IAM maturity, reliability, automation, and user experience. The role ensures identity services securely support workforce, privileged, B2B, and B2C use cases across cloud and SaaS platforms, and leads people, platforms, partners, and operational outcomes across identity and security technologies. The Senior Director owns IAM strategy, architecture, engineering, operations, and product/capability maturity. The role oversees workforce identity, privileged access, identity governance, authentication, authorization, federation, external identity, machine and non-human identity, and directory services. It leads platform modernization and automation, operational reliability, identity integration, organizational change, and responsible use of AI and machine learning in IAM. The position works closely with Security, Enterprise Architecture, HR, Legal, Risk, Audit, application teams, and business leaders. It also manages vendor and partner strategy, technology evaluation, audit readiness, and remediation of identity-related risks and control gaps. A bachelor's degree in a relevant field is required, though equivalent relevant experience may be considered; a master's degree is preferred. The stated pay range is $251,700 to $297,000. Actual compensation depends on factors including skills, experience, qualifications, credentials, work arrangements, and geographic location. Baker Tilly offers eligible employees a comprehensive compensation and benefits package.

Requirements

Bachelor's degree in information technology, cybersecurity, computer science, engineering, business, or a related field; equivalent relevant experience may be considered.
12 or more years of progressive experience in identity and access management, cybersecurity, enterprise infrastructure/platform engineering, or closely related technology roles.
5 or more years leading managers and/or senior technical teams, with accountability for architecture, engineering, and operations.
Proven IAM leadership in a large enterprise environment supporting more than 15,000 users and complex employee, contractor, partner, customer, and application ecosystems.
Demonstrated implementation and modernization experience with Microsoft Entra ID, Active Directory, and SailPoint, including identity governance, SSO/federation, MFA/passwordless, conditional access, lifecycle management, and privileged access patterns.
Hands-on leadership integrating IAM with Workday as a workforce identity source and with Salesforce, Azure, AWS, Databricks, and other enterprise/cloud applications.
Proven implementation of Infrastructure as Code and CI/CD for identity/security platforms using tools such as Terraform, Bicep, PowerShell, Python, GitHub Actions, Azure DevOps, or equivalent.
Experience building and executing multi-year IAM roadmaps, improving IAM maturity, and leading enterprise-wide process and technology change.
Experience operating IAM as a product/capability with measurable outcomes, roadmaps, backlogs, lifecycle plans, service metrics, and stakeholder governance.
Experience designing and supporting B2B and B2C identity solutions, external identity/federation, and secure partner/customer access at scale.
Proven operational leadership across incident/problem management, reliability, service management, audit/control evidence, disaster recovery, and security remediation.

Nice To Haves

Master's degree.
Microsoft identity/security certification, such as Identity and Access Administrator or Cybersecurity Architect Expert.
SailPoint certification or equivalent identity governance certification.
Cloud architecture/security certification in Microsoft Azure and/or AWS.
CISSP, CISM, or comparable security/technology leadership certification.
Prior experience with mergers and acquisitions, tenant/domain consolidation, identity migration, and complex hybrid/cloud transformation.
Experience with Zero Trust architecture, phishing-resistant authentication, non-human identity, secrets management, and cloud entitlement management.
Experience in regulated or audit-intensive environments with strong controls over access certification, segregation of duties, privileged access, and evidence management.
Experience using AI/ML, automation, or intelligent operations to improve identity risk detection, access decisions, service experience, and operational efficiency.

Responsibilities

Define enterprise IAM strategy, target-state architecture, reference patterns, standards, and a multi-year capability roadmap aligned with business, security, cloud, data, and application strategies.
Provide executive ownership for workforce identity, privileged access, identity governance, authentication, authorization, federation, external identity, machine and non-human identity, and directory services.
Translate business and regulatory requirements into sequenced investments, measurable maturity outcomes, and capability roadmaps with clear dependencies and benefits.
Lead IAM engineering across Microsoft Entra ID, Active Directory, SailPoint, Azure, AWS, Databricks, Salesforce, Workday, and supporting integration platforms.
Establish and scale Infrastructure as Code, policy-as-code, automated testing, CI/CD, reusable modules, version control, and environment promotion practices for identity platforms.
Modernize identity administration toward API-first, event-driven, automated, resilient, and observable services.
Ensure engineering patterns support high availability, disaster recovery, zero trust, least privilege, and secure-by-default implementation.
Own operational performance and service health for enterprise IAM services, including incident and problem management, monitoring, alerting, capacity, resilience, lifecycle management, and vendor support.
Establish service levels, operational KPIs and KRIs, runbooks, on-call and escalation models, and continuous-improvement mechanisms.
Reduce operational toil and access-related risk through automation, self-service, proactive detection, root-cause elimination, and disciplined problem management.
Oversee joiner/mover/leaver execution and access lifecycle controls across Workday, SailPoint, Entra ID/Active Directory, SaaS applications, and cloud platforms.
Operate IAM as an enterprise product/capability with defined customers, outcomes, roadmap, backlog, architecture guardrails, adoption measures, and lifecycle plans.
Assess current IAM maturity, establish target maturity levels, and lead sustained improvement in governance, technology, process, data quality, operating model, and user experience.
Lead organizational and process change associated with MFA, passwordless authentication, access governance, privileged access, application onboarding, and modern identity standards.
Partner with Security, Enterprise Architecture, HR, Legal, Risk, Audit, application teams, and business leaders to drive adoption and resolve cross-functional ownership decisions.
Design and govern scalable identity patterns for employees, contingent workers, partners, clients, customers, service accounts, and non-human identities.
Lead B2B and B2C identity capabilities, federation, single sign-on, lifecycle integration, conditional access, and delegated administration across internal and external ecosystems.
Ensure identity is consistently integrated into Salesforce, Workday, Databricks, cloud platforms, enterprise applications, data platforms, and acquired or merged environments.
Build, lead, coach, and develop architecture, engineering, and operations teams; establish clear accountabilities and succession and capability plans.
Use AI and machine learning responsibly to improve IAM operations, access intelligence, anomaly detection, request fulfillment, support, access reviews, and decision quality while maintaining human oversight and control.
Own vendor and partner strategy, technology evaluation, commercial outcomes, audit readiness, and remediation of identity-related risks and control gaps.
Communicate IAM strategy, investment needs, risk posture, maturity progress, and operational health to executives and governance forums.