Senior Manager, IAM Security Operations (Hybrid - Seattle)

Nordstrom•Seattle, WA

4d•$191,000 - $297,000•Hybrid

About The Position

The Senior Manager, Identity Security Operations owns the health, reliability, security posture, and service delivery of Nordstrom’s enterprise identity platforms, including Microsoft Entra ID, Active Directory, Okta, SailPoint, and BeyondTrust. The role leads the Identity Security Operations function through a major identity modernization, including workforce identity provider consolidation onto Entra ID, on-premises Active Directory retirement, adoption of passwordless and phishing-resistant MFA, and modernization of identity governance. The position leads a multi-layered organization of leads, engineers, and analysts across onshore, offshore, and contingent staff. It sets the operating model, multi-year roadmap, staffing plan, budget, and maturity agenda, and partners with Identity Engineering & Build to ensure new capabilities are observable, documented, and supportable. The role is hybrid in Seattle, Washington, and requires working at Nordstrom’s corporate headquarters at least four days per week.

Requirements

10+ years in identity and access management or information security operations.
7+ years leading teams and at least 5 years leading leaders or owning a function.
Significant senior leadership experience in identity security operations, including leading teams and other leaders and owning a function or major operational portfolio.
Operational ownership of enterprise identity platforms at scale, including an enterprise IdP (Microsoft Entra ID and/or Okta), directory services (Active Directory), IGA (SailPoint), and PAM (BeyondTrust); depth in several platforms and leadership accountability across the stack.
Technical command sufficient to lead decisions involving SSO, MFA, SAML, OIDC, OAuth, Conditional Access, and identity lifecycle management.
Track record running operations at enterprise scale, including SLA ownership, major incident command, and ITIL-aligned problem and change management.
Experience owning budget, headcount planning, and vendor or managed-service relationships.
Ability to build and retain high-performing teams and communicate credibly with engineers and executive leadership.
Bachelor’s degree in a related field, or equivalent experience.

Nice To Haves

Experience leading identity operations through a major platform migration or consolidation, such as an IdP migration or directory retirement.
Retail experience or experience in another large, distributed, high-transaction-volume enterprise.
Experience as an accountable owner in audit and compliance programs, including SOX and PCI-DSS.
Experience leading globally distributed and managed-service delivery teams.
Depth in passwordless/FIDO2, Zero Trust operational patterns, and identity threat detection and response (ITDR).
Relevant certifications such as CISSP, CISM, SC-300, or ITIL.

Responsibilities

Lead and develop the organization through senior individual contributors, building bench strength, succession, and a durable leadership layer.
Own strategy, operating model, staffing plan, and budget for the Identity Security Operations & Maintenance function.
Build and retain a high-performing team across onshore, offshore, and managed-service delivery.
Own the multi-year operational roadmap and drive automation and toil reduction by converting repeatable work into engineered, self-service, and automated capabilities.
Maintain excellent operations with minimal business disruption while major platforms migrate and consolidate.
Partner with Identity Engineering & Build to define transition-to-operations standards so new capabilities are observable, documented, and supportable.
Set operational excellence standards, including SLAs, KPIs, service health, and executive-level operational reporting for identity services.
Own major incident command, problem management, and change governance for identity, including post-incident reviews and durable remediation.
Own access lifecycle operations at scale, including joiner-mover-leaver processes, provisioning and deprovisioning, MFA operations, access certification campaigns, and privileged access operations.
Own vendor, managed-service, and licensing relationships for identity platforms, including contract and renewal cycles with Sourcing and Finance.
Serve as the senior escalation point and accountable owner for identity operations in audit, regulatory, and compliance engagements, including SOX and PCI-DSS.
Represent identity operations with clear, decision-ready communication to peers and executive leadership.