Senior Director, Identity and Access Management

Baker Tilly•Tampa, FL

2d•$251,700 - $297,000

About The Position

Baker Tilly is hiring a Senior Director, Identity and Access Management (IAM) for its Enterprise IT team. This leader will define and execute a modern identity strategy for an enterprise of more than 15,000 users, improve IAM maturity, reliability, automation, and user experience, and ensure identity services securely support workforce, privileged, B2B, and B2C use cases across cloud and SaaS platforms. The role leads people, platforms, partners, and operational outcomes across a range of identity and security technologies. The Senior Director will set IAM strategy, architecture, standards, and a multi-year capability roadmap; lead engineering and platform modernization; and own operational performance and service health. The role will operate IAM as an enterprise product, oversee identity integration across internal and external ecosystems, develop teams, guide responsible AI-enabled improvements, manage vendors and risks, and communicate strategy and results to executives and governance forums. The role requires a bachelor's degree or equivalent relevant experience, at least 12 years of progressive experience in IAM or a related technology field, and at least five years leading managers or senior technical teams. The position's pay range is $251,700 to $297,000. Actual compensation depends on factors including skills, experience, qualifications, degrees, certifications, work arrangements, and geographic location. Baker Tilly offers eligible employees a comprehensive compensation and benefits package. Work location status should be discussed with a Baker Tilly talent acquisition professional.

Requirements

Bachelor's degree in information technology, cybersecurity, computer science, engineering, business, or a related field; equivalent relevant experience may be considered.
12 or more years of progressive experience in identity and access management, cybersecurity, enterprise infrastructure/platform engineering, or closely related technology roles.
5 or more years leading managers and/or senior technical teams with accountability for architecture, engineering, and operations.
Proven leadership of IAM in a large enterprise environment supporting more than 15,000 users and complex employee, contractor, partner, customer, and application ecosystems.
Demonstrated implementation and modernization experience with Microsoft Entra ID, Active Directory, and SailPoint, including identity governance, SSO/federation, MFA/passwordless, conditional access, lifecycle management, and privileged access patterns.
Hands-on leadership experience integrating IAM with Workday as a workforce identity source and with Salesforce, Azure, AWS, Databricks, and other enterprise/cloud applications.
Proven implementation of Infrastructure as Code and CI/CD for identity/security platforms using tools such as Terraform, Bicep, PowerShell, Python, GitHub Actions, Azure DevOps, or equivalent.
Experience building and executing multi-year IAM roadmaps, improving IAM maturity, and leading enterprise-wide process and technology change.
Experience operating IAM as a product/capability with measurable outcomes, roadmaps, backlogs, lifecycle plans, service metrics, and stakeholder governance.
Experience designing and supporting B2B and B2C identity solutions, external identity/federation, and secure partner/customer access at scale.
Proven operational leadership across incident/problem management, reliability, service management, audit/control evidence, disaster recovery, and security remediation.

Nice To Haves

Master's degree.
Microsoft identity/security certification, such as Identity and Access Administrator or Cybersecurity Architect Expert.
SailPoint certification or equivalent identity governance certification.
Cloud architecture/security certification in Microsoft Azure and/or AWS.
CISSP, CISM, or comparable security/technology leadership certification.
Prior experience with mergers and acquisitions, tenant/domain consolidation, identity migration, and complex hybrid/cloud transformation.
Experience with Zero Trust architecture, phishing-resistant authentication, non-human identity, secrets management, and cloud entitlement management.
Experience in regulated or audit-intensive environments with strong controls over access certification, segregation of duties, privileged access, and evidence management.
Use of AI/ML, automation, or intelligent operations to improve identity risk detection, access decisions, service experience, and operational efficiency.

Responsibilities

Define the enterprise IAM strategy, target-state architecture, reference patterns, standards, and multi-year capability roadmap, aligned with business, security, cloud, data, and application strategies.
Provide executive ownership for workforce identity, privileged access, identity governance, authentication, authorization, federation, external identity, machine/non-human identity, and directory services.
Translate business and regulatory requirements into sequenced investments, measurable maturity outcomes, and product or capability roadmaps with clear dependencies and benefits.
Lead IAM engineering across Microsoft Entra ID, Active Directory, SailPoint, Azure, AWS, Databricks, Salesforce, Workday, and supporting integration platforms.
Establish and scale Infrastructure as Code, policy-as-code, automated testing, CI/CD, reusable modules, version control, and environment promotion practices for identity platforms.
Modernize identity services from manual, one-off administration toward API-first, event-driven, automated, resilient, and observable operations.
Ensure architecture and engineering patterns support high availability, disaster recovery, zero trust, least privilege, and secure-by-default implementation.
Own operational performance and service health for enterprise IAM services, including incident and problem management, monitoring, alerting, capacity, resilience, lifecycle management, and vendor support.
Establish service levels, operational KPIs and KRIs, runbooks, on-call and escalation models, and continuous-improvement mechanisms.
Reduce operational toil and access-related risk through automation, self-service, proactive detection, root-cause elimination, and disciplined problem management.
Oversee joiner, mover, and leaver execution and access lifecycle controls across Workday, SailPoint, Entra ID/Active Directory, SaaS applications, and cloud platforms.
Operate IAM as an enterprise product or capability with defined customers, outcomes, roadmap, backlog, architecture guardrails, adoption measures, and lifecycle plans.
Assess current IAM maturity, establish target maturity levels, and lead sustained improvement across governance, technology, process, data quality, operating model, and user experience.
Lead organizational and process change associated with MFA, passwordless authentication, access governance, privileged access, application onboarding, and modern identity standards.
Partner with Security, Enterprise Architecture, HR, Legal, Risk, Audit, application teams, and business leaders to drive adoption and resolve cross-functional ownership decisions.
Design and govern scalable identity patterns for employees, contingent workers, partners, clients, customers, service accounts, and non-human identities across an enterprise of more than 15,000 users.
Lead B2B and B2C identity capabilities, federation, single sign-on, lifecycle integration, conditional access, and delegated administration across internal and external ecosystems.
Ensure identity is consistently integrated into Salesforce, Workday, Databricks, cloud platforms, enterprise applications, data platforms, and acquired or merged environments.
Build, lead, coach, and develop architecture, engineering, and operations teams; establish clear accountabilities and succession and capability plans.
Use AI and machine learning responsibly to improve IAM operations, access intelligence, anomaly detection, request fulfillment, support, access reviews, and decision quality while maintaining human oversight and control.
Own vendor and partner strategy, technology evaluation, commercial outcomes, audit readiness, and remediation of identity-related risks and control gaps.
Communicate IAM strategy, investment needs, risk posture, maturity progress, and operational health to executives and governance forums.