Job Title: IT Security Identity & Access Technical Lead
Location: Remote Position on East Coast Time Zone otherwise if Close to Shelton CT it will be Hybrid: 4 days onsite in Shelton(Fridays remote)
Type: Full Time Direct Hire
Salary: $150K and up DOE plus Bonus and excellent benefits
Must Have: Active directory, IAM, Entra ID and good communication skills
Need someone who can assess where the IAM program is today, define where it needs to go, build a multi-year strategy and roadmap, determine how to modernize identity, Zero Trust, PAM and lifecycle management, gain leadership buy-in, and then lead that transformation.
1. IAM strategy / future-state roadmap — MUST HAVE
2. Enterprise IAM architecture / transformation leadership — MUST HAVE
3. Ability to present and influence senior leadership — MUST HAVE
4. AD + Entra — still important, but not the entire job
5. Zero Trust / PAM / IGA / SSO / cloud identity modernization —
6. Hands-on technical depth —
Job Summary
The IT Security Identity & Access Technical Lead is responsible for designing, implementing, and governing the enterprise-wide Identity and Access Management (IAM) program. This role partners with Security, Infrastructure, HR, Engineering, and Business teams to develop a secure, scalable identity ecosystem while ensuring seamless access across the organization.
Key Responsibilities
- Develop and maintain the Identity & Access Management (IAM) strategy, roadmap, and governance model.
- Design and oversee security solutions for authentication, authorization, privileged access, Single Sign-On (SSO), Multi-Factor Authentication (MFA), SaaS security, API access controls, conditional access policies, and identity lifecycle management.
- Lead modernization initiatives involving Zero Trust, passwordless authentication, identity automation, Attribute-Based Access Controls, AI-driven threat detection, and identity management for AI agents.
- Establish API security standards, including identity and access controls, API key and token management, least-privilege access, and monitoring.
- Implement secure API authentication and authorization using OAuth, OIDC, and token lifecycle management.
- Lead the design and operation of Privileged Access Management (PAM) solutions, including CyberArk.
- Manage project delivery within established scope, budget, and timelines.
- Lead technical teams responsible for user provisioning, deprovisioning, terminations, and password resets across SaaS and on-premises applications.
- Conduct regular security audits, identify risks, investigate access irregularities, and ensure compliance with privacy laws and regulatory requirements.
- Establish performance metrics, document procedures, test and implement configuration changes, and resolve technical issues.
- Drive continuous improvement, operational consistency, and reliable identity management services.
Qualifications & Experience
- 7–12+ years of professional experience in IT and/or Cybersecurity within an enterprise Identity Management team.
- Deep expertise in IAM frameworks, Zero Trust, and modern identity protocols, including SAML, OAuth, OIDC, and SCIM.
- Experience with enterprise-scale IAM platforms, on-premises systems, cloud platforms, SaaS applications, and APIs.
- Strong understanding of cloud identity platforms, including Microsoft Entra ID, Azure AD, AWS IAM, and GCP IAM.
- Significant knowledge of Active Directory and Entra ID, including synchronization, patching, hardening, configuration, and risk management.
- Experience with identity management tools and enterprise applications, including Intune, Dell OneIdentity, Semperis, CyberArk, SAP, Salesforce, and Workday.
- Knowledge of security architecture, threat modeling, identity attack vectors, and emerging IAM technologies.
- Strong communication, collaboration, problem-solving, and influencing skills, including the ability to manage challenging conversations and work effectively across teams.
Preferred Qualifications
- Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent experience.
- Information security certifications such as CISSP, CRISC, CIMP, and/or CISM.
- Experience with the following technologies and tools:
- Active Directory and Azure AD synchronization
- Microsoft Entra ID, application registration, passwordless authentication, Enterprise Application SSO, and Conditional Access Policies
- Okta, Semperis, CyberArk, and Dell OneIdentity
- Zscaler AppTotal, Illumio, Microsoft Defender, and InfoBlox BloxOne
- PowerShell, Task Scheduler, Microsoft PKI, NPS, and SCCM patching
- JIRA Service Desk
- Artificial Intelligence (AI) applications and emerging technologies
Work Location
- Hybrid position requiring four days per week in the Shelton, CT office for candidates living within one hour of the office.
Work Authorization
- Must be legally authorized to work in the United States.
- Employment visa sponsorship is not available now or in the future.
About Us
Founded in 2010, Top Prospect Group specializes in connecting high-quality candidates with top-tier clients. In 2023, we joined HW Staffing Solutions, expanding our national footprint across manufacturing, engineering, logistics, and technology.
Interested Candidates – Apply Today
Please submit:
- A clean copy of your resume
- Salary expectations
- Availability
#INDTPGSHELTON
