Principal Cybersecurity Engineer – Identity & Access Management

Responsibilities

• Own the enterprise IAM governance and architecture strategy
• Define multi-year IAM roadmap aligned to Zero Trust and business priorities
• Influence funding, prioritization, and sequencing of IAM initiatives
• Represent identity risk and posture to senior leadership and governance forums
• Establish enterprise identity reference architectures and guardrails
• Act as final design authority for identity integrations and access models
• Define authentication, authorization, and privilege models across platforms
• Ensure consistency across workforce, application, and privileged identities
• Guide adoption of password‑less, JIT access, and adaptive authentication
• Define enterprise IAM policies, standards, and control frameworks
• Oversee access governance methodologies (reviews, certifications, exceptions)
• Establish IAM risk metrics and maturity assessments
• Drive remediation of systemic identity risks
• Provide executive‑level support for audits and regulatory inquiries
• Partner with IT, HR, Legal, Compliance, and Engineering teams
• Influence identity operating models without direct operational ownership
• Lead working groups and design councils related to identity
• Evaluate IAM, IGA, and PAM technologies from a strategic perspective
• Define success criteria for IAM tooling and integrations
• Stay current with identity threat trends and evolving best practices

Requirements

• Bachelor’s degree in information technology, Information Security/Assurance, Computer Science, Engineering, or related field or equivalent combination of education and experience
• 6-8 years of experience in cybersecurity, identity security, or security engineering
• Deep expertise in IAM governance, architecture, and risk management
• Proven experience leading enterprise‑scale IAM initiatives
• Strong understanding of zero trust identity architectures, RBAC / ABAC and role governance, privileged access governance and admin models, and Identity lifecycle / access assurance
• Experience influencing architecture and security outcomes across large organizations
• Excellent executive communication and stakeholder management skills.
• Identity platform experience across multiple vendors (Entra ID, Okta, SailPoint, CyberArk, etc.)
• Experience in regulated or complex enterprise environments
• Certifications such as CISSP, CCSP, SABSA, or identity‑focused credentials.