The Role
Provides technical leadership for enterprise Identity and Access Management architecture, engineering, governance, and strategy across hybrid, multi-cloud, and on-premises environments. Designs workforce, customer, product, privileged, application, cloud, and non-human identity solutions; advances Zero Trust and least privilege; improves lifecycle automation, access governance, monitoring, and policy-as-code. Leads identity-related incident response, communicates security risks, develops enterprise standards, and mentors technical teams.
Summary Generated by Built In
Itron is innovating new ways for utilities and cities to manage energy and water. We create a more resourceful world to protect essential resources for today and tomorrow. Join us.
Itron, Inc. (NASDAQ: ITRI) is a world-leading technology and services company dedicated to the resourceful use of energy and water. With more than 300 million deployed endpoints, Itron is one of the largest IoT companies in the world. Through innovative technology and services, we are helping create more insightful utilities, smarter cities, and a more resourceful world.
As a member of the Information Security team, the Principal, Identity Management will provide technical leadership for the architecture, engineering, governance, and strategic evolution of Itron's enterprise Identity and Access Management (IAM) program. This role serves as the organization's senior technical authority for workforce, customer, product, and non-human identities, ensuring secure, scalable, and customer-centric identity solutions across hybrid, multi-cloud, and on-premises environments.
The ideal candidate combines deep IAM expertise with a collaborative, innovative, and accountable approach to security, enabling business agility while protecting critical systems, products, customers, and data across the utilities and energy industry.
Duties & Responsibilities- Define, maintain, and evolve the enterprise IAM architecture, technical standards, reference patterns, and strategic roadmap aligned with organizational goals and industry best practices.
- Lead the design, implementation, and modernization of secure identity solutions supporting workforce, customer, product, cloud, privileged, application, and non-human identity use cases.
- Advance Zero Trust security principles, including least privilege, separation of duties, continuous verification, risk-based access controls, and reduction of standing administrative privileges.
- Establish and optimize identity governance processes, including identity lifecycle management, access certifications, entitlement analysis, role management, and joiner-mover-leaver automation.
- Partner collaboratively with Cybersecurity, Cloud Engineering, Product Security, Infrastructure, Enterprise Architecture, and business stakeholders to deliver secure and scalable identity solutions.
- Define IAM monitoring, logging, reporting, and metrics programs to measure access risk, identity hygiene, control effectiveness, and identity-related threat activity.
- Provide technical leadership during identity-related incidents, investigations, access-control failures, and major security decisions.
- Drive continuous improvement through automation, policy-as-code, and AI-enabled capabilities that enhance security outcomes, governance, operational efficiency, and user experience.
- Mentor engineers and technical teams by fostering an authentic, accountable, and collaborative culture focused on operational excellence and innovation.
- Produce clear technical documentation, standards, architectural guidance, and implementation patterns supporting enterprise-wide adoption.
- Bachelor's degree in Computer Science, Cybersecurity, Management Information Systems, or a related field; equivalent experience will be considered.
- 7+ years of experience in cybersecurity, identity engineering, cloud security, or a related technical discipline.
- 5+ years of hands-on experience designing, implementing, and operating enterprise IAM solutions.
- Expert knowledge of authentication, authorization, Single Sign-On (SSO), federation, LDAP, identity lifecycle management, privileged access management, and Zero Trust security principles.
- Demonstrated experience designing IAM architectures across hybrid, multi-cloud, SaaS, Windows, Linux, and on-premises environments.
- Strong understanding of access governance, role-based access control, entitlement management, and least-privilege security models.
- Experience troubleshooting complex authentication, authorization, federation, token, and access-policy issues.
- Ability to communicate complex identity and security risks to technical and executive stakeholders in a clear and actionable manner.
- Experience supporting identity capabilities within customer-facing products, commercial technology platforms, or enterprise-scale business environments.
- Working knowledge of artificial intelligence and the ability to responsibly leverage AI-enabled tools to improve IAM automation, governance, threat detection, analytics, and security operations.
- Strong written communication, stakeholder management, documentation, and presentation skills.
- Demonstrated ability to work in an agile, customer-centric, and highly collaborative environment.
- Hands-on experience with Microsoft Entra ID, Active Directory, LDAP directories, Conditional Access, Privileged Identity Management (PIM), federation technologies, and enterprise SSO solutions.
- Experience with Identity Governance and Administration (IGA) platforms such as SailPoint, Saviynt, One Identity, or equivalent solutions.
- Experience with Privileged Access Management (PAM) technologies including CyberArk, PAM360, or similar credential vaulting and privileged governance platforms.
- Knowledge of infrastructure-as-code and automation technologies such as Terraform, AWS CloudFormation, Microsoft Graph, PowerShell, Azure Key Vault, and policy-as-code frameworks.
- Experience securing application identities, workload identities, managed identities, containers, CI/CD pipelines, serverless services, and other non-human identities.
- Familiarity with identity-focused threat detection and defense, including token theft, consent phishing, credential abuse, privilege escalation, and lateral movement techniques.
- Experience supporting regulated environments and compliance frameworks, including ISO 27001, SOC 2, NIST, CMMC, or similar standards.
- Industry certifications such as Microsoft Certified: Identity and Access Administrator Associate, CISSP, CCSP, CIMP, or related security and identity certifications.
- Experience supporting utilities, critical infrastructure, energy, IoT, or operational technology environments is highly desirable.
- Proven track record of driving innovative identity security solutions that improve customer outcomes, operational efficiency, and enterprise resilience.
Benefits Info:
This position also includes a competitive benefit package including; financial, social, health and wellbeing programs, paid vacation, 401k matching, employee stock purchase program, hybrid work schedule, and more!
This position also includes a competitive benefit package including; financial, social, health and wellbeing programs, paid vacation, 401k matching, employee stock purchase program, hybrid work schedule, and more!
The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills and experience and may vary by location. The base salary is $96,000-165,000 annually. This position is eligible for our annual bonus program.
#LI-EP1
Itron is committed to building an inclusive and diverse workforce and providing an authentic workplace experience for all employees. If you are excited about this role but your past experiences don't perfectly align with every requirement, we encourage you to apply anyway. In the end, you may be just who we are looking for!
The successful candidate's starting wage will be determined based on permissible, non-discriminatory factors such as skills and experience.
Itron is proud to be an Equal Opportunity Employer. If you require an accommodation to apply, please contact a recruiting representative at 1-800-635-5461 or email [email protected].
Itron is transforming how the world manages energy, water and city services. Our trusted intelligent infrastructure solutions help utilities and cities improve efficiency, build resilience and deliver safe, reliable and affordable service. With edge intelligence, we connect people, data insights and devices so communities can better manage the essential resources they rely on to live. Join us as we create a more resourceful world: www.itron.com
Skills Required
- Bachelor's degree in Computer Science, Cybersecurity, Management Information Systems, or a related field, or equivalent experience
- 7+ years of experience in cybersecurity, identity engineering, cloud security, or a related technical discipline
- 5+ years of hands-on experience designing, implementing, and operating enterprise IAM solutions
- Expert knowledge of authentication, authorization, SSO, federation, LDAP, identity lifecycle management, privileged access management, and Zero Trust principles
- Experience designing IAM architectures across hybrid, multi-cloud, SaaS, Windows, Linux, and on-premises environments
- Understanding of access governance, RBAC, entitlement management, and least-privilege security models
- Experience troubleshooting complex authentication, authorization, federation, token, and access-policy issues
- Ability to communicate complex identity and security risks to technical and executive stakeholders
- Experience supporting identity capabilities within customer-facing products, commercial technology platforms, or enterprise-scale environments
- Working knowledge of artificial intelligence and responsible use of AI-enabled security tools
- Strong written communication, stakeholder management, documentation, and presentation skills
- Ability to work in an agile, customer-centric, collaborative environment
- Experience with Microsoft Entra ID, Active Directory, LDAP directories, Conditional Access, PIM, federation technologies, and enterprise SSO
- Experience with IGA platforms such as SailPoint, Saviynt, One Identity, or equivalent
- Experience with PAM technologies including CyberArk, PAM360, or similar platforms
- Knowledge of Terraform, AWS CloudFormation, Microsoft Graph, PowerShell, Azure Key Vault, and policy-as-code frameworks
- Experience securing application, workload, managed, container, CI/CD, serverless, and other non-human identities
- Familiarity with identity-focused threat detection and defense techniques
- Experience with regulated environments and ISO 27001, SOC 2, NIST, CMMC, or similar frameworks
- Industry certifications such as Microsoft Certified Identity and Access Administrator Associate, CISSP, CCSP, CIMP, or related certifications
- Experience supporting utilities, critical infrastructure, energy, IoT, or operational technology environments
- Proven track record of delivering innovative identity security solutions
Itron Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Itron and has not been reviewed or approved by Itron.
-
Healthcare Strength — Medical, dental, and vision coverage are complemented by HSA/FSA options, life and disability insurance, an EAP, and mental‑health resources, with plans characterized as strong for U.S. employees.
-
Retirement Support — A 401(k) with company match is standard, and recent company materials describe a comparatively strong matching formula alongside access to an ESPP.
-
Leave & Time Off Breadth — Policies include unlimited PTO for many salaried roles and paid holidays. Hybrid/remote options also appear in recent postings.
Itron Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Itron enables utilities and cities to safely, securely and reliably deliver critical infrastructure services to communities in more than 100 countries. Our proven portfolio of smart networks, software, services, meters and sensors helps our customers better manage energy and water for the people they serve.
