{"id":1387532,"url":"https://alion.io/job/ecolab-director-identity-security","title":"Director, Identity Security","company":{"id":1754712,"name":"Ecolab","domain":"ecolab.com","url":"https://alion.io/company/ecolab-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":138,"ghost_share":0,"stale_share":0.913,"repost_share":0,"time_to_fill_p50_days":15,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Saint Paul, United States","Naperville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":137400,"max":206200,"currency":"USD","period":"year","gross":null,"usd_annual":206200},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BeyondTrust","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"GCP","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Vault","optional":false},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-07-17T00:00:00Z","employer_posted_date":"2026-07-17","last_verified_at":"2026-10-17T01:03:00Z","board_verified":true,"closed_at":null,"days_open":92,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":92},"description":"Job Summary: The Director of Identity is responsible for maturing the enterprise Identity and Access Management (IAM) program across strategy, engineering, operations, architecture, and emerging identity security capabilities. This role provides leadership for a global IAM function supporting a large-scale internal and external identity environment and is accountable for advancing identity governance, privileged access, authentication, lifecycle management, and secrets and cryptography capabilities in alignment with business, risk, and compliance requirements.\nThe role combines strategic direction, operational accountability, organizational leadership, and program execution. The Director of Identity will lead mature identity services while driving transformation initiatives such as IAM governance maturation, role-based access control, PAM modernization, passwordless authentication, certificate lifecycle automation, and enterprise secrets management.\nWhat You Will Do:\nStrategy, Governance, and Leadership\nDefine and own the enterprise IAM strategy, roadmap, and operating model aligned to cybersecurity, compliance, and business objectives.\n\nMature the IAM program through formal governance, policies, standards, controls, metrics, and leadership reporting.\n\nPresent IAM program status, risks, priorities, and investment needs to security leadership and executive stakeholders.\n\nLead prioritization decisions across operations, platform engineering, architecture, and project-based identity initiatives.\n\nEstablish and monitor KPIs, service performance, maturity goals, and program outcomes.\n\nIAM Program Delivery\nLead delivery of enterprise IAM capabilities including identity lifecycle management, joiner/mover/leaver processes, access provisioning, access requests, access reviews, privileged access, authentication, federation, and directory services.\n\nOversee transformation initiatives such as IGA expansion, RBAC governance, PAM modernization, passwordless authentication, and identity security posture improvements.\n\nEnsure IAM services meet operational expectations for reliability, resilience, scalability, and user support.\n\nPartner with application, infrastructure, cloud, HR, audit, and security teams to implement identity controls and integration patterns across the enterprise.\n\nCompliance, Risk, and Control Effectiveness\nEnsure IAM processes and controls support audit, regulatory, and internal compliance requirements, including SOX-related controls where applicable.\n\nOversee audit readiness, remediation activities, control evidence, and policy enforcement across identity-related processes.\n\nAlign identity capabilities to recognized frameworks and standards such as NIST CSF 2.0, NIST 800-63, and enterprise security policies.\n\nReduce identity-related risk by strengthening governance, control automation, privileged access protections, and secrets management practices.\n\nArchitecture and Emerging Identity Security Capabilities\nProvide leadership across identity architecture, platform standards, and integration patterns for workforce, privileged, and customer identity environments.\n\nLead the development of enterprise secrets and cryptography capabilities, including certificate lifecycle management, PKI modernization, vault strategy, and operational controls.\n\nSupport modern identity approaches across hybrid and cloud environments, including federation, conditional access, and non-human/service identity considerations.\n\nDrive decisions on tooling, architectural direction, and strategic vendor partnerships that improve security, scalability, and operational efficiency.\n\nOrganizational and People Leadership\nLead and develop a distributed IAM organization consisting of managers, architects, engineers, and operations personnel.\n\nBuild organizational clarity across operations, engineering, architecture, and new capability areas.\n\nProvide leadership in talent development, succession planning, coaching, performance management, and team engagement.\n\nManage staffing strategy across full-time employees, partners, and contingent resources to meet delivery needs.\n\nOversee third-party vendors and consulting partners supporting IAM programs and services.\n\nMinimum Qualifications:\nBachelor's degree in Information Technology, Information Security, Computer Science, Engineering, or a related discipline; equivalent experience may be considered.\n\n12+ years of progressive experience in Identity and Access Management, cybersecurity, or security engineering.\n\n5+ years of leadership experience managing multi-team IAM functions at the Senior Manager or Director level.\n\nDemonstrated success leading enterprise IAM programs across strategy, operations, engineering, governance, and transformation initiatives.\n\nExperience owning IAM governance, policy development, audit response, executive reporting, and control maturity efforts.\n\nExperience building or standing up new security capabilities, teams, or services.\n\nTechnical and Functional Qualifications:\nStrong knowledge of Identity Governance and Administration platforms; Saviynt preferred. Experience with SailPoint or One Identity is also relevant.\n\nStrong knowledge of Privileged Access Management concepts and platforms; BeyondTrust preferred, with CyberArk or Delinea also relevant.\n\nExperience with Microsoft identity services including Active Directory, Entra ID, B2C, federation, and conditional access.\n\nKnowledge of authentication and federation standards such as SAML, OAuth 2.0, and OpenID Connect.\n\nUnderstanding of hybrid and cloud IAM patterns across Azure, AWS, and GCP environments.\n\nKnowledge of secrets management, PKI, certificate lifecycle management, and key management technologies such as HashiCorp Vault or Azure Key Vault.\n\nFamiliarity with IAM maturity frameworks, security governance models, and regulatory or control expectations.\n\nPreferred Qualifications\nExperience in a Fortune 500, global, manufacturing, or industrial environment.\n\nExperience with SOX-related IAM controls and certification processes.\n\nExperience with ServiceNow-based access workflows and Workday-driven provisioning processes.\n\nRelevant certifications such as CISSP, CISM, or identity-platform specific certifications.\n\nLeadership Competencies\nStrategic thinker with the ability to set direction and translate strategy into execution.\n\nStrong decision-maker who operates effectively in complex, matrixed environments.\n\nDelivery-oriented leader with a strong focus on accountability, outcomes, and service quality.\n\nEffective communicator able to translate complex identity and security topics for executives, audit stakeholders, and technical teams.\n\nStrong collaborator with the ability to influence across cybersecurity, infrastructure, cloud, HR, audit, and application teams.\n\nProven people leader with the ability to coach talent, build teams, and develop future leaders.\n\nAdditional Information\nThe role may require coordination across global teams, including off-hours support for key initiatives, escalations, or major incidents.\nAnnual or Hourly Compensation Range\nThe base salary range for this position is $137,400.00 - $206,200.00. This position is eligible for annual bonus and long-term incentives based on performance, per plan terms. Many factors are taken into consideration when determining compensation, such as experience, education, training, geography, etc. We comply with all minimum wage and overtime laws.Benefits\nEcolab strives to provide comprehensive and market-competitive benefits to meet the needs of our associates and their families. Click here to see our benefits.\nIf you are viewing this posting on a site other than our Ecolab Career website, view our benefits at jobs.ecolab.com/working-here.\nPotential Customer Requirements Notice\nTo meet customer requirements and comply with local or state regulations, applicants for certain customer-facing roles may need to:\n- Undergo additional background screens and/or drug/alcohol testing for customer credentialing.\nAmericans with Disabilities Act (ADA)\nEcolab will provide reasonable accommodation (such as a qualified sign language interpreter or other personal assistance) with our application process upon request as required to comply with applicable laws. If you have a disability and require accommodation assistance in this application process, please visit the Recruiting Support link in the footer of each page of our career website.","description_format":"text","description_chars":8425,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Water Utilities","Chemical Manufacturing","Sterilization & Infection Control"],"lifecycle":[{"event":"open","at":"2026-09-28T10:49:38Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 20 · green card filings: 6","filings_12m":20,"filings_prev_12m":36,"green_card_filings_12m":6,"median_offered_wage_usd":142885,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.261,"p_room":0.28,"age_days":92,"expected_fill_days":15,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":206200,"is_top_pay":false},"html_url":"https://alion.io/job/ecolab-director-identity-security","json_url":"https://alion.io/job/ecolab-director-identity-security.json","meta":{"generated_at":"2026-10-17T19:12:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2405,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1754712},"rest":"https://alion.io/mcp/rest/get_company?id=1754712"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fecolab-director-identity-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fecolab-director-identity-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fecolab-director-identity-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ecolab-director-identity-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fecolab-director-identity-security"}]}