iAM Lead
First seen by Alion on Sep 18, 2026.
Role & Responsibilities :
- Lead the design, implementation, and administration of Identity and Access Management (IAM) solutions across the organization.
- Own IAM strategy covering Identity Governance & Administration (IGA), Access Management, Privileged Access Management (PAM), SSO, MFA, and lifecycle management.
- Manage the complete JoinerMoverLeaver (JML) process and ensure timely provisioning, modification, and deprovisioning of user access.
- Define and implement Role-Based Access Control (RBAC), access policies, segregation of duties (SoD), and least-privilege principles.
- Lead access certification, access reviews, entitlement management, and periodic recertification processes.
- Integrate IAM platforms with enterprise applications, directories, databases, cloud platforms, APIs, and third-party systems.
- Work with platforms such as Microsoft Entra ID/Azure AD, Okta, SailPoint, CyberArk, Ping Identity, or equivalent IAM technologies.
- Manage and improve SSO, MFA, federation protocols (SAML/OAuth/OIDC), LDAP/Active Directory, and identity synchronization.
- Partner with Cybersecurity, Infrastructure, Cloud, Application, HR, and Audit teams to establish effective identity controls.
- Lead IAM-related security audits, compliance requirements, risk assessments, and remediation activities.
- Develop IAM architecture, standards, processes, documentation, and operational procedures.
- Monitor IAM environments, troubleshoot access-related incidents, and drive root-cause analysis and permanent resolution.
- Identify opportunities for IAM automation using workflows, APIs, scripts, and integration tools.
Preferred Candidate Profile :
- 7 - 12 years of overall IT/cybersecurity experience, with significant hands-on experience in IAM.
- Proven experience leading IAM implementations, operations, migrations, or transformation projects.
- Good understanding of AWS/Azure/GCP IAM and cloud identity security.
- Experience implementing RBAC, SoD controls, least privilege, privileged access, and access review/certification.
- Familiarity with Zero Trust architecture and modern identity-security practices.
- Strong understanding of cybersecurity frameworks and compliance requirements such as ISO 27001, SOC 2, GDPR, SOX, or applicable regulatory standards.
- Experience with IAM automation, scripting, APIs, workflow tools, and DevOps practices is highly desirable.
- Strong analytical, problem-solving, communication, stakeholder-management, and leadership skills.
- Ability to translate business/security requirements into scalable IAM solutions.
- Experience managing or mentoring IAM team members and working with cross-functional/global teams.
- Relevant certifications such as CISSP, CISM, SailPoint, Okta, CyberArk, Microsoft, or AWS/Azure security certifications would be an advantage.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline preferred.
Skills
Identity Management, SailPoint, CyberArk, Okta, Ping Identity, Active Directory, iAM, SSO Integration, Privilege Access Management, Identity Governance & Administration