Manager, Identity and Access Management (IAM)

Responsibilities:

• Develop and implement the IAM strategy and roadmap
• Identify the latest IAM trends and technologies, then determine what will be applied at Included Health
• Manage strategic programs to mature our IAM capabilities
• Lead a high-performing team of IAM Systems Engineers, promoting a culture of continuous learning, accountability, and progress
• Manage team performance, set clear goals, and ensure effective resource allocation to meet project deadlines and operational demands
• Champion team collaboration, knowledge sharing, and best practices within the IAM function and across the Digital Workplace team
• Oversee the daily operations, maintenance, and optimization of all core IAM systems and tools, including our identity provider, Okta, access management solutions, and privileged access management (PAM) systems
• Ensure the stability, availability, and performance of critical IAM infrastructure
• Manage automation projects within IAM processes to improve efficiency, accuracy, and scalability
• Implement robust IAM policies, standards, and procedures, including access control models (e.g., RBAC, ABAC), least privilege principles, and identity lifecycle management
• Oversee critical processes around application management to ensure compliance with internal controls and external regulations (e.g., HIPAA, HITRUST, SOC 2)
• Develop strategies and lead the improvement of app implementation and integrations
• Partner with IT Solutions Architects, Application Owners, IT Systems Engineers, and Departments to understand their needs and propose secure and scalable IAM solutions
• Be an important partner in managing and responding to IAM-related security incidents, performing root cause analysis, and implementing preventative measures
• Find and address IAM risks, vulnerabilities, and potential unauthorized access points
• Be the primary contact for IAM-related inquiries, projects, and escalations across the organization
• Develop and deliver clear, concise communications, presentations, and training programs on IAM policies, best practices, and system usage to all kinds of audiences
• Manage vendor relationships for IAM solutions, including technical evaluations, contract negotiations, and ongoing support

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 8+ years of progressive experience in IT, with at least 5 years of hands-on experience focused on Identity and Access Management.
• 3+ years of direct people management experience leading an IAM Systems Engineering team.
• Experience with IAM principles, concepts, and best practices
• Extensive hands-on experience with Okta.
• Extensive experience with Cloud Identity Management, specifically within Google Cloud Platform (GCP) and Amazon Web Services (AWS) environments.
• Proven experience with RBAC and PAM implementation and governance.
• Familiarity with security and compliance frameworks (e.g., NIST, ISO 27001, HIPAA, SOC 2).
• Strong familiarity with Infrastructure as Code (IaC) principles and hands-on experience with Terraform.
• Coaching and team development skills, with a proven ability to motivate and guide technical professionals.
• Experience writing documentation, proposals, notifications, policies and messages to diverse audiences, including senior leadership, with a high rate of understanding.
• Experience building strong relationships and working with other departments, promoting collaboration and understanding.
• Experience managing multiple work streams and keeping them all on course, while maintaining task tracking and informing tools.
• High degree of integrity and a strong commitment to security best practices.

Physical/Cognitive Requirements:

• Prompt and regular attendance at assigned work location.
• Capability to remain seated in a stationary position for prolonged periods.