{"id":1455952,"url":"https://alion.io/job/gm-financial-manager-iam-engineering-and-integration","title":"Manager - IAM Engineering and Integration","company":{"id":1900050,"name":"GM Financial","domain":"gmfinancial.com","url":"https://alion.io/company/gmfinancial-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":81,"open_postings":12,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":56,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Arlington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":104000,"max_usd":201000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1245},"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Machine Learning","optional":false},{"name":"Okta","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"ServiceNow","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-28T19:58:32Z","employer_posted_date":"2026-08-28","last_verified_at":"2026-10-19T06:11:38Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"Why GMF Technology?\nInnovation isn’t just a talking point at GM Financial, it’s how we operate. From generative AI and cloud-native technologies to peer-led learning and hackathons, our tech teams are building real solutions that make a difference. We’re committed to AI-powered transformation, using advanced machine learning and automation to help us reimagine customer interactions and modernize operations, positioning GM Financial as a leader in digital innovation within a dynamic industry.\nJoin us and discover a workplace where your ideas matter, your development is prioritized, and you can truly make a global impact.\nThis position will be posted until filled.\n About the role:\nThe Manager of Identity & Access Management Engineering and Integration is responsible for leading the design, engineering, integration, and operational excellence of enterprise IAM platforms. This role ensures secure, scalable, and compliant identity services across Active Directory, SailPoint IdentityIQ (IQ), SailPoint Identity Security Cloud (ISC), Okta, CyberArk, and PKI Services, supporting on-premises, cloud, and hybrid environments.\nThe manager leads a team of IAM engineers and analysts, serving as a tower lead for our managed service partner resources and works cross-functionally with cybersecurity, infrastructure, application teams, and audit partners to deliver identity lifecycle automation, privileged access management, authentication services, and certificate services aligned with Zero Trust and least-privilege principles.\nIn this role you will:\nIAM Platform Engineering & Integration\nLead engineering, configuration, and lifecycle management of IAM platforms including Active Directory, SailPoint (IIQ and ISC), Okta, CyberArk, and PKI Services\nOversee platform integrations with HR systems, ServiceNow, enterprise applications, cloud services, and third party vendors\nEnsure resilient, highly available, and scalable IAM architectures across on prem and cloud environments\nEstablish reference architectures, integration patterns, and technical standards for IAM services\nActive Directory\nProvide technical and operational leadership for enterprise Active Directory services, including on premises and hybrid directory environments\nOwn AD architecture, design standards, and operational patterns, ensuring alignment with Zero Trust, least privilege, and identity centric security models\nOversee directory hygiene and lifecycle management, including user objects, service accounts, groups, and delegated administration models\nLead AD group and service account governance, ensuring alignment with SailPoint driven identity lifecycle (Joiner Mover Leaver) processes and access certifications\nPartner with Identity Governance teams to ensure AD entitlements are authoritative, well modeled, and auditable within SailPoint\nEnsure secure integration between Active Directory and Okta, including federation, authentication flows, and directory synchronization\nSupport and enhance privileged access controls for AD in coordination with CyberArk, including protection of domain level and Tier 0 privileged accounts\nLead AD remediation and risk reduction efforts, including cleanup of legacy groups, orphaned accounts, excessive permissions, and insecure configurations\nEstablish and maintain monitoring, alerting, and operational metrics for directory services availability, security posture, and access integrity\nAct as the escalation point for directory related incidents, audits, and compliance inquiries, ensuring timely remediation and root cause resolution\nCollaborate with Infrastructure, Endpoint, Cloud, and Security Architecture teams to ensure AD remains a foundational identity control plane for enterprise services\nIdentity Governance & Lifecycle Management\nOwn Joiner Mover Leaver (JML) automation, role based access control (RBAC), entitlement modeling, and access request workflows using SailPoint\nEnsure consistent execution of access certifications\nPartner with application owners and engineers to onboard applications into IAM governance and provisioning frameworks to ensure completeness and accuracy and entitlement metadata\nAssist in testing of lower environments\nPrivileged Access & Authentication Services\nLead implementation and ongoing enhancement of CyberArk for privileged account management, credential vaulting, and session monitoring\nOversee Okta services including SSO, MFA, and API authentication for workforce and application access\nEnsure authentication services meet enterprise security, user experience, and regulatory requirements\nPKI & Certificate Services\nManage enterprise PKI services, including certificate issuance, automation, renewal, and lifecycle management\nEnsure certificates are properly governed and integrated across applications, infrastructure, and security platforms\nSupport certificate compliance requirements across the enterprise\nSecurity, Risk & Compliance\nEnsure IAM controls meet regulatory and audit requirements (e.g., SOX, internal cybersecurity standards)\nSupport internal and external audits by providing evidence, walkthroughs, and remediation plans\nUnderstanding of look back efforts\nProactively identify IAM risks and lead remediation of control gaps and vulnerabilities\nLead the engineering, maintenance, and modernization of IAM platforms\nIdentify mitigating controls to reduce risk\nEnsure compliance with internal policies, audit requirements, and regulatory frameworks\n Knowledge and Skills\nDeep knowledge of Identity and Access Management technologies across Active Directory, PKI, SailPoint, Okta, CyberArk, and modern authentication standards\nStrong understanding of identity governance frameworks, privileged access controls, certificate-based authentication, and directory services\nAbility to architect and guide the implementation of secure, scalable IAM solutions\nExperience leading complex engineering teams, including roadmapping, prioritization, and resource planning\nSolid understanding of Zero Trust principles, identity security best practices, audit requirements, and regulatory controls\nAbility to embed security-by-design into all IAM engineering processes\nDemonstrated experience managing high-performing technical teams and developing engineering talent\nEffective stakeholder communication and coordination across security, infrastructure, and application teams\nStrong problem-solving skills and ability to lead incident response related to IAM platforms\nVendor relationship and contract management experience (particularly with SailPoint, Okta, CyberArk, and certificate authorities)\nHands on experience with Active Directory/Azure AD, SailPoint IdentityIQ & ISC, Okta (SSO, MFA), CyberArk (PAM), PKI/Certificate Services\nAI Skills Preferred:\nExperience with AI assisted software development or automation\nKnowledge of prompting techniques to improve output quality\nAwareness of emerging GenAI capabilities and limitations \nExperience and Education\n5-7 years in Identity and Access Management or related experience at a medium-to-large company required\n3-5 years of experience in an IT leadership role preferred\nHigh School Diploma or equivalent required\nBachelor’s Degree in related field or equivalent experience required\nWhat We Offer: Generous benefits package available on day one to include: 401K matching, bonding leave for new parents (12 weeks, 100% paid), tuition assistance, training, GM employee auto discount, community service pay and nine company holidays.\nOur Culture: Our team members define and shape our culture - an environment that welcomes innovative ideas, fosters integrity, and creates a sense of community and belonging. Here we do more than work - we thrive.\nCompensation: Competitive pay and bonus eligibility\nWork Life Balance: Flexible hybrid work environment, 2-days a week in office\nLocation: Arlington (AOC1), TX office.\nNOTE: We are unable to consider candidates who require visa sponsorship for this position\nThis position is not open to agency submissions\n#GMFJobs #LI-Hybrid #LI-DW1","description_format":"text","description_chars":8016,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":3,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":true},"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Leasing, Auto & Equipment Finance"],"lifecycle":[{"event":"open","at":"2026-09-29T09:52:53Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.524,"p_room":0.6,"age_days":51,"expected_fill_days":56,"reasons":["conf:11","stale_co","velocity","win:late","crowd:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/gm-financial-manager-iam-engineering-and-integration","json_url":"https://alion.io/job/gm-financial-manager-iam-engineering-and-integration.json","meta":{"generated_at":"2026-10-19T07:38:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4996,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1900050},"rest":"https://alion.io/mcp/rest/get_company?id=1900050"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgm-financial-manager-iam-engineering-and-integration"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgm-financial-manager-iam-engineering-and-integration"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgm-financial-manager-iam-engineering-and-integration"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gm-financial-manager-iam-engineering-and-integration\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgm-financial-manager-iam-engineering-and-integration"}]}