Sr IAM Specialist

Amica Insurance•Lincoln, RI

1d•$94,748 - $145,985•Remote

About The Position

Amica Mutual Insurance Company is seeking a Senior/Lead Identity and Access Management (IAM) Specialist to support identity and access management operations, including application onboarding, user access provisioning for both birthright and requestable roles, access certification campaigns, and privileged access management controls. The role handles implementation, configuration, upgrades, maintenance, and health management of IAM platforms, with particular focus on deploying and managing CyberArk components across development, test, and production environments. The specialist works with application owners, business stakeholders, and security teams to gather requirements, design and implement access controls, maintain role-based access control models, administer provisioning and deprovisioning, coordinate recertification campaigns, and manage privileged access processes. The role also maintains IAM documentation and audit evidence, manages request queues and service-level commitments, troubleshoots access and platform issues, identifies risks and process improvements, and contributes to enterprise security and governance initiatives. The position is open to senior experience levels; entry-level candidates are not eligible. This is a full-time position with a 37.5-hour work week. It may be performed fully remotely or in a hybrid arrangement at Amica’s Lincoln, Rhode Island office. Normal business hours are Monday through Friday, 8 a.m. to 5 p.m. Eastern Time. The starting annual salary is $94,748–$145,985, based on prior experience, with eligibility for an annual variable incentive based on company performance. Employment visa sponsorship is not offered.

Requirements

Bachelor’s degree, six or more years of experience, or an equivalent combination of education and experience sufficient to perform the essential functions of the job.
Deep expertise in IAM, including access provisioning, RBAC, identity governance, and privileged access management.
Experience in object-oriented programming and scripting using Java, Python, SQL, or PowerShell.
Experience in PAM; CyberArk experience is preferred.
Hands-on experience using AI and large language models (LLMs) to automate processes, enhance decision-making, or improve operational efficiency.
Strong communication and interpersonal skills across organizational levels; ability to listen attentively and ask relevant questions to understand and restate others’ views.
Ability to focus on customers and their needs while maintaining effective relationships.
Excellent problem-solving skills and ability to troubleshoot complex platform and pipeline issues.
Ability to take control of difficult situations and handle them effectively across IT and business units.
Perseverance through resistance and setbacks until tasks are complete.
Ability to manage large, complex assignments and resolve problems with a focus on successful outcomes.
Commitment to continuous improvement in innovation, quality, productivity, and documentation.
Commitment to increasing functional and technical knowledge through self-teaching, training, seminars, and learning about leadership and emerging technologies.
Ability to keep abreast of new systems and their impacts.

Nice To Haves

Experience with CyberArk PAM.

Responsibilities

Implement, configure, upgrade, and maintain IAM platforms for access provisioning, access recertification, and privileged credential vaulting.
Lead installation, deployment, and upgrades of CyberArk Vault (EPV), CPM (Central Policy Manager), PVWA, and PSM across development, test, and production environments.
Manage CyberArk service and component health, troubleshooting CPM jobs, platform failures, and password reconciliation.
Gather and document requirements for onboarding applications into IAM platforms.
Map access models and support integration activities for application onboarding.
Administer user access provisioning and deprovisioning according to IAM policies and procedures.
Coordinate and execute access recertification campaigns, track completion, resolve issues, and validate results for audit readiness.
Define, document, and maintain RBAC models, including roles, entitlements, and inheritance structures.
Administer PAM processes, including provisioning, credential management, and validation of elevated access.
Create, maintain, and validate IAM documentation, including application onboarding artifacts, entitlement definitions, and audit evidence.
Monitor and manage IAM request queues and ensure SLA adherence and timely resolution.
Identify and escalate access control issues or risks.
Collaborate with application owners, business stakeholders, and security teams to gather requirements and implement access controls.
Communicate access decisions, risks, and IAM processes clearly to technical and non-technical stakeholders.
Share knowledge, document processes, and guide team members to promote consistency and operational excellence.
Support cross-functional IAM initiatives aligned with enterprise security and governance objectives.
Continuously develop IAM tool, technology, and best-practice knowledge and apply it to daily work.
Diagnose and resolve access-related issues, including provisioning errors, entitlement conflicts, and policy violations.
Identify opportunities to improve IAM processes, workflows, and automation to increase efficiency and reduce risk.
Apply risk-based analysis to access decisions in alignment with security policies and regulatory requirements.
Foster a culture of learning and creativity individually and as a team.
Handle other duties as required.

Benefits

Medical, dental, and vision coverage for single or family.
Short- and long-term disability insurance and life insurance.
At least 13 paid vacation days in the first 12 months, with amounts potentially varying by role; vacation accrues monthly and may be used before accrual.
14 paid holidays.
Six sick days at hire and six additional sick days after 90 days of employment.
401(k) with company match and immediate vesting, plus an annual 3% non-elective employer contribution.
Annual Success Sharing Plan for eligible employees if company performance goals are met or exceeded.
Paid parental bonding leave and other leave programs.
Student loan repayment and tuition reimbursement programs.
Fitness and wellness reimbursement.
Employee community involvement.
Opportunities for advancement.