{"id":3303924,"url":"https://alion.io/job/corteva-iam-lead-authentication-services","title":"IAM Lead – Authentication Services","company":{"id":678,"name":"Corteva","domain":"corteva.com","url":"https://alion.io/company/corteva-agri-science","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"A","score":85,"open_postings":15,"ghost_share":0,"stale_share":0.533,"repost_share":0.133,"time_to_fill_p50_days":35,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Des Moines, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":112000,"max_usd":230000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":453},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-06T00:00:00Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-03T12:22:22Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":28},"description":"Position Overview\nWe are seeking an experienced Lead - IAM Authentication Services to provide technical leadership and architectural direction for enterprise identity and authentication services. This role will be responsible for the design, implementation, administration, security, and ongoing evolution of our Identity and Access Management (IAM) authentication platforms.\nThe ideal candidate brings extensive hands-on expertise with Microsoft Active Directory, Microsoft Entra ID (Azure AD), enterprise Single Sign-On (SSO), federation, and modern authentication protocols. This individual will serve as a technical subject matter expert and will work closely with infrastructure, cybersecurity, application, cloud, and engineering teams to deliver secure, scalable, and highly available identity services.\nKey Responsibilities\nLead the architecture, engineering, administration, and operational support of enterprise IAM authentication services.\nProvide technical leadership for Active Directory architecture, including domain services, forests, domains, trusts, Group Policy, replication, DNS integration, authentication, and directory security.\nDesign, implement, and maintain Microsoft Entra ID (Azure AD) environments, including tenant architecture, identity synchronization, authentication, Conditional Access, application integrations, and hybrid identity.\nLead the design and implementation of enterprise Single Sign-On (SSO) solutions using technologies and protocols such as:SAML 2.0\nOAuth 2.0\nOpenID Connect (OIDC)\nWS-Federation\nKerberos\nLDAP\n\nArchitect and support integrations between on-premises Active Directory, Entra ID, SaaS applications, cloud platforms, and enterprise applications.\nEstablish and maintain authentication patterns and standards for workforce, application, and service identities.\nDesign and support highly available and resilient authentication infrastructure, including disaster recovery and business continuity capabilities.\nProvide technical leadership for identity modernization initiatives, including hybrid identity, cloud migration, passwordless authentication, and Zero Trust architectures.\nTroubleshoot complex authentication, federation, directory, and SSO issues across enterprise environments.\nDevelop and maintain IAM architecture documentation, standards, technical procedures, and operational runbooks.\nEstablish and enforce security best practices for identity infrastructure, privileged access, authentication, and directory services.\nPartner with cybersecurity teams to identify and remediate identity-related vulnerabilities and risks.\nCollaborate with application and engineering teams to onboard applications to enterprise authentication and SSO platforms.\nProvide technical guidance and mentorship to IAM engineers and administrators.\nParticipate in architecture reviews, technology evaluations, and strategic IAM roadmaps.\nSupport incident response and root-cause analysis for critical identity and authentication incidents.\nEvaluate emerging identity technologies and recommend solutions that improve security, resiliency, user experience, and operational efficiency.\nRequired Qualifications\n8+ years of experience in Identity and Access Management, authentication, directory services, infrastructure engineering, or a related discipline.\nExtensive hands-on experience designing and administering Microsoft Active Directory in large enterprise environments.\nStrong understanding of Active Directory architecture, including:Forests and domains\nDomain controllers\nAD replication\nDNS\nGroup Policy\nTrust relationships\nKerberos authentication\nLDAP\nActive Directory security and hardening\n\nExtensive experience with Microsoft Entra ID (Azure AD) and hybrid identity architectures.\nStrong experience implementing and troubleshooting SSO and federation technologies, including SAML, OAuth 2.0, and OpenID Connect.\nExperience integrating enterprise applications with Active Directory and/or Entra ID.\nStrong understanding of authentication, authorization, federation, identity lifecycle, and access control concepts.\nExperience with Microsoft Entra Connect / Azure AD Connect and hybrid identity synchronization.\nExperience with Conditional Access, MFA, identity protection, and modern authentication.\nStrong troubleshooting and root-cause analysis skills across complex identity environments.\nExperience working with security, infrastructure, cloud, and application engineering teams in large enterprise environments.\nDemonstrated ability to lead technical initiatives and provide direction to engineers and administrators.\nPreferred Qualifications\nExperience with Privileged Identity Management (PIM) and privileged access management concepts.\nBenefits - How We’ll Support You:\nNumerous development opportunities offered to build your skills\n\nBe part of a company with a higher purpose and contribute to making the world a better place\n\nHealth benefits for you and your family on your first day of employment\n\nFour weeks of paid time off and two weeks of well-being pay per year, plus paid holidays\n\nExcellent parental leave which includes a minimum of 16 weeks for mother and father\n\nFuture planning with our competitive retirement savings plan and tuition reimbursement program\n\nLearn more about our total rewards package here - Corteva Benefits\n\nCheck out life at Corteva! www.linkedin.com/company/corteva/life\n\nAre you a good match? Apply today! We seek applicants from all backgrounds to ensure we get the best, most creative talent on our team.\nCorteva Agriscience is an equal opportunity employer. We are committed to embracing our differences to enrich lives, advance innovation, and boost company performance. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, military or veteran status, pregnancy related conditions (including pregnancy, childbirth, or related medical conditions), disability or any other protected status in accordance with federal, state, or local laws.","description_format":"text","description_chars":6057,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Agricultural Biotechnology","Crop Protection","Seeds"],"lifecycle":[{"event":"open","at":"2026-10-27T00:36:07Z"}],"visa":[],"liveness":{"score":44,"band":"fade","label":"Fading","p_open":1,"p_active":0.586,"p_room":0.75,"age_days":28,"expected_fill_days":35,"reasons":["conf:2","stale_co","win:late"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/corteva-iam-lead-authentication-services","json_url":"https://alion.io/job/corteva-iam-lead-authentication-services.json","meta":{"generated_at":"2026-11-03T12:46:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17676,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678},"rest":"https://alion.io/mcp/rest/get_company?id=678"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcorteva-iam-lead-authentication-services"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcorteva-iam-lead-authentication-services"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcorteva-iam-lead-authentication-services"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/corteva-iam-lead-authentication-services\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcorteva-iam-lead-authentication-services"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3303924}},{"tool":"search_jobs","arguments":{"company":"corteva.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3303924},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}