Senior Manager, Identity Security Operations (Hybrid - Seattle)

Nordstrom•Seattle, WA

15d•$191,000 - $297,000•Hybrid

About The Position

This role is offered as hybrid in Seattle, WA. Candidates must be available to work in office at the Nordstrom corporate headquarters a minimum of 4 days/week to be considered for this position. We're a fast-moving retailer with a lot going on, and our customers and employees count on us to keep their experience seamless and secure. Behind that experience is a team obsessed with getting identity right — making sure the right people, and the right non-human identities, have the right access to the right things, at the right time, and nothing more. The Identity Security team sits at the center of Nordstrom's security program, and we're looking for a senior leader to own the operational engine that keeps it running.

Requirements

10+ years in identity and access management, information security, or IT operations, including 7+ years leading teams and at least 5 years leading leaders or owning a function
Deep operational ownership of enterprise identity platforms at scale — an enterprise IdP (Microsoft Entra ID and/or Okta), directory services (Active Directory), IGA (SailPoint), and PAM (BeyondTrust)
Strong command of authentication and authorization fundamentals — SSO, MFA, SAML, OIDC, OAuth, Conditional Access, and identity lifecycle management — with enough depth to lead technical decisions credibly
Proven track record running ITIL-aligned operations at enterprise scale: SLA ownership, major incident command, problem and change management, on-call models
Experience owning budget, headcount planning, and vendor or managed-service relationships
Experience as an accountable owner in audit and compliance programs (SOX, PCI-DSS)
Demonstrated ability to build and retain high-performing teams, and to communicate credibly with both engineers and executive leadership
Bachelor's degree in a related field or equivalent experience

Nice To Haves

Retail, or another large, distributed, high-transaction-volume enterprise
Experience operating identity through a major platform migration or consolidation
Depth in passwordless/FIDO2, Zero Trust operational patterns, and identity threat detection and response (ITDR)
Experience leading globally distributed and managed-service delivery teams
Relevant certifications (CISSP, CISM, SC-300, ITIL)

Responsibilities

Own the Identity Security Operations & Maintenance function: strategy, operating model, staffing plan, budget, and multi-year operational roadmap
Lead through managers and senior individual contributors; build bench strength, succession, and a durable leadership layer beneath you
Set and hold the bar for operational excellence — SLAs, KPIs, service health, and executive-level operational reporting for identity services
Own major incident command, problem management, and change governance for identity; drive rigorous post-incident review and durable remediation
Own access lifecycle operations at scale: joiner-mover-leaver, provisioning and deprovisioning, MFA operations, access certification campaigns, and privileged access operations
Drive the automation and toil-reduction agenda, converting repeatable operational work into engineered, self-service, and automated capability
Partner with Identity Engineering & Build to define transition-to-operations standards, ensuring new capability is observable, documented, and supportable before production
Own vendor, managed-service, and licensing relationships for identity platforms; manage contract and renewal cycles alongside Sourcing and Finance
Serve as the senior escalation point and accountable owner for identity operations in audit, regulatory, and compliance engagements (PCI-DSS)
Represent identity operations with clear, decision-ready communication