Senior Manager, Identity and Access Management

Delinea•Redwood City, CA

1d•$190,000 - $225,000•Remote

About The Position

Delinea’s Cybersecurity organization is seeking an experienced Senior Manager, Identity and Access Management to build, implement, and mature its enterprise IAM program and architecture. The role partners with Security Engineering and Operations, IT, and Product Engineering to define how identities are governed, provisioned, and secured across diverse platforms and tools, including Entra ID, Active Directory, AWS IAM, Okta, and StrongDM. The position leads a small team of IAM engineers and balances appropriate access with business objectives while solving complex problems and communicating with technical and non-technical stakeholders. The Senior Manager leads Delinea’s IAM design and implementation across workforce identity, application access, privileged access, and cloud entitlements. The role owns identity lifecycle processes and core identity platforms, as well as privileged and infrastructure access. It serves as an IAM subject matter expert, builds relationships to remediate access risks, and ensures the program meets compliance and customer commitments, including SOC 2, ISO 27001, PCI DSS, and FedRAMP. The position also defines program-effectiveness metrics with Cybersecurity Program Management and reports them regularly to executive leadership. This US-based role is fully remote and reports to the Sr. Director of Enterprise Security.

Requirements

Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field, or equivalent practical experience.
At least 8 years of hands-on IAM experience across directory services, authentication, and access governance.
At least 4 years building and leading IAM or security engineering teams and developing junior talent.
Deep hands-on experience administering Entra ID and Active Directory, including hybrid identity and directory synchronization, conditional access, group policy, and domain services.
Hands-on experience with Okta or a comparable IDaaS platform, including SSO and MFA policy design, lifecycle management, and application integrations.
Experience with AWS IAM at scale, including roles, policies, permission boundaries, IAM Identity Center, and least-privilege review of cloud entitlements.
Experience with modern privileged and infrastructure access tooling such as StrongDM, including brokered and audited access to servers, databases, and Kubernetes.
Working knowledge of federation and provisioning standards, including SAML, OIDC, OAuth 2.0, and SCIM, and of identity governance and access certification processes.
Proficiency in at least one scripting or programming language, such as Python, Go, or PowerShell, for identity automation, integration, and reporting.
Strong verbal and written communication, analytical, and people skills.

Nice To Haves

One or more certifications: CISSP, SC-300 (Microsoft Identity and Access Administrator), Okta Certified Professional or Administrator, AWS Certified Security – Specialty, IDPro CIDPRO, or equivalent.
Experience working with high-security environments subject to regulations such as FedRAMP or ITAR.
Experience deploying or operating privileged access management and secrets management solutions, including Delinea products or comparable platforms.
Experience using AI and LLM-based agents and tooling in an identity context to enhance access review, entitlement analysis, and identity reporting.

Responsibilities

Lead the design and implementation of Delinea’s IAM program and reference architecture across workforce identity, application access, privileged access, and cloud entitlements.
Build and lead a team of IAM engineers; set performance expectations, goals, and objectives, and provide mentorship and guidance.
Own the joiner-mover-leaver lifecycle, including automated provisioning and deprovisioning, role-based access design, and integration between HR, directory, and application systems.
Own core identity platforms and directories, including Entra ID, Active Directory, and Okta, covering SSO, MFA, conditional access, federation, and provisioning standards.
Own privileged and infrastructure access, including AWS IAM roles, policies, permission boundaries, cloud entitlement management, and StrongDM-brokered access to production servers, databases, and Kubernetes environments.
Serve as a subject matter expert on IAM best practices, standards, and emerging approaches such as Zero Trust, passwordless authentication, and identity threat detection and response.
Build relationships across organizational boundaries to ensure access risks are remediated and lessons learned are captured.
Ensure the IAM program meets compliance and customer commitments, including SOC 2, ISO 27001, PCI DSS, and FedRAMP; provide access-control evidence and periodic access certifications and serve as the identity point of contact for auditors and assessors.
Communicate technical findings as actionable insights and recommendations for technical and non-technical stakeholders at all levels.
Work with Cybersecurity Program Management to define and report program metrics, including provisioning and deprovisioning timeliness, MFA and SSO coverage, privileged account inventory, orphaned and stale account counts, and access certification completion.