Senior Manager - IAM Engineering

The role is responsible for providing strategic direction, people leadership, operational oversight, and continuous improvement across the organization’s identity and access management capabilities. He/she is overseeing and controlling enterprise access to resources by effectively managing user and system identities, keys, rights, and restrictions. This role involves implementing and maintaining identity and access management (IAM) processes and tools across all critical applications, ensuring that access aligns with established security principles of confidentiality, integrity, and availability. He/she plays will lead IAM professionals, establish clear objectives and performance expectations, develop team capabilities, and ensure the delivery of secure, reliable, and effective identity services aligned with business and cybersecurity objectives.

• Own the strategy, roadmap, and continuous improvement of Identity & Access Management services.
• Lead the implementation and operation of IAM technologies, including Identity Governance and Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
• Manage and optimize enterprise access to resources through technologies such as Active Directory, SAML, ADFS, FIM, Azure, Enterprise Authentication, Single Sign-On (SSO), and provisioning systems.
• Review and validate key lifecycle management workflows and ensure the appropriate assignment and usage of keys.
• Oversee the provisioning and de-provisioning of access to applications, infrastructure, and operating systems in accordance with established policies, standards, and procedures.
• Ensure compliance with relevant security policies, regulatory requirements, and industry standards.
• Monitor IAM risks and implement appropriate mitigation strategies.
• Support internal and external audits and ensure timely remediation of findings.
• Collaborate with cross-functional teams, vendors, and users to troubleshoot and resolve access issues efficiently.
• Manage unique and complex security access requests, including those related to internal and external audits and disaster recovery testing.
• Set team objectives, priorities, and performance expectations aligned with organizational goals.
• Coach and mentor team members and support their professional and career development.
• Perform any other duties assigned to by line manager related to the nature of the work.
• Enforce, incorporate, and comply with all necessary controls and related information security policies, procedures, practices, training, reporting, personal due diligence, and vigilance, within departmental/unit activities and operations.

Preferred Qualifications

• A tertiary-level qualification from an internationally recognized institution
• Industry-recognized certifications in PKI, HSM and Key Management solutions.

Years & Nature of Experience

• 5+ years of equivalent experience where required competencies and experience have been demonstrated user provisioning and de-provisioning
• Requires strong interpersonal and organizational skills, including meeting deadlines, following written policies standards and procedures, and providing consistent and superior customer service.
• Experience with different IAM Technologies such as Active Directory Federation Services (ADFS) and MS Identity Management (FIM/MIM)
• Strong knowledge of the different authentication protocols: Kerberos, LDAP, RADIUS, SAML, and Oauth.
• An experienced professional who can deliver on difficult technical tasks
• Has project implementation experience
• Experienced with Key Protection HSM (Hardware Security Module) design and administration.
• Very Good knowledge in Certificate and Encryption Management solution i.e. PKI, CA, Trusted Certificate Providers Management…etc.

Technical Competencies

• Strong knowledge and experience with different IAM Technologies such as Active Directory Federation Services (ADFS) and MS Identity Management (FIM/MIM)
• Strong knowledge of the different authentication protocols: Kerberos, LDAP, RADIUS, SAML, OAuth

Behavioral Competencies

• Adaptability
• Team Management
• Analytical Thinking
• Trust & Transparency