{"id":3374790,"url":"https://alion.io/job/pitney-bowes-it-security-identity-access-technical-leader","title":"IT Security Identity & Access Technical Leader","company":{"id":1764563,"name":"Pitney Bowes","domain":"pitneybowes.com","url":"https://alion.io/company/pitneybowes-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0.25,"time_to_fill_p50_days":19,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Shelton, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":119000,"max_usd":238000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1231},"experience_years_min":7,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Service Desk","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-08-31T00:00:00Z","employer_posted_date":"2026-08-31","last_verified_at":"2026-11-01T09:42:54Z","board_verified":true,"closed_at":null,"days_open":62,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":62},"description":"We’re hiring at Pitney Bowes, where top talent builds meaningful careers and lasting impact. We Move fast, Deliver excellence, and Win together…that’s The Pitney Bowes way. Here, how we work matters just as much as what we achieve.\nWe’re looking for people who:\nAct with urgency, accountability, and purpose\n\nDeliver high quality work with consistency and pride\n\nCollaborate effectively and elevate those around them\n\nFocus on outcomes that drive impact and growth\n\nJob Description:\nYou Are:\nA Security Identity & Access Technical Leader responsible for designing, implementing, and governing the enterprise-wide Identity and Access Management (IAM) program. You partner across security, infrastructure, HR, engineering, and business teams to build a modern, scalable identity ecosystem, winning together to deliver secure, seamless access experiences across the organization.\nYou Will:\nDevelop and maintain the organization’s Identity & Access Management (IAM) strategy, roadmap, and governance model, driving alignment and shared accountability across teams.\nArchitect and oversee solutions for security, authentication, authorization, privileged access, SSO, MFA, SaaS security posture, API access controls, conditional access policies, and lifecycle management, delivering excellence in secure design and execution.\nTechnically lead modernization efforts such as Zero Trust, passwordless authentication, identity automation, Attribute-Based Access Controls, AI-driven threat detection and response, identity models for AI agents, and continuous AI behavioral authentication, helping the organization move fast while staying secure.\nDefine standards for API security, including API identity and access controls, secure API key and token management, least-privilege access for machine identities, and monitoring and anomaly detection for API usage.\nEstablish secure patterns for API authentication and authorization, including OAuth, OIDC, and token lifecycle management.\nLead the design and operation of Privileged Access Management (PAM) solutions (CyberArk).\nEnsure projects are delivered within scope, budget, and schedule, balancing speed with precision.\nLead a technical team supporting user access provisioning, deprovisioning, terminations, and password resets across multiple SaaS and on-premise applications (Dell OneIdentity, Salesforce, SAP, Workday), fostering collaboration and continuous improvement.\nPerform regular audits to ensure security protocols are followed and risks are proactively addressed.\nEnsure technical solutions comply with privacy laws and regulatory requirements.\nInvestigate and respond to irregularities in system access with urgency and rigor.\nEstablish metrics to ensure IAM solutions meet both security and business objectives.\nPlan, test, and implement configuration changes efficiently and effectively.\nDocument IAM processes and procedures to enable consistency and scalability.\nEscalate and resolve issues in a timely manner, maintaining a high standard of reliability and responsiveness.\nYour background:\nAs a Identity Lead, you have:\n7-12 plus years professional experience in IT and/or Cybersecurity with an Enterprise Identity Management Team\nDeep expertise in IAM frameworks, Zero Trust, and modern identity protocols (SAML, OAuth, OIDC, SCIM).\nExperience with enterprise scale IAM platforms, On Premise, and Cloud Platforms.\nStrong understanding of cloud identity (Azure AD/Entra, AWS IAM, GCP IAM, SaaS and API).\nKnowledge of security architecture, threat modeling, and identity attack vectors.\nSignificant demonstrated knowledge of Active Directory and Entra processes and tools to include patching, hardening, configuration, and risk management\nDemonstrated communication skills to communicate, persuade, influence without authority, and handle challenging conversations\nSignificant demonstrated knowledge of Identity management processes and tools to include Active Directory, Entra ID, Intune, Dell OneIdentity, Semperis, CyberArk, SAP, Salesforce and Workday.\nDemonstrated knowledge in recent advances in IAM technology.\nPreferred\nBachelor’s Degree in Information Security, Computer Science or equivalent\nInformation Security Certifications such as CISSP, CRISC, CIMP and/or CISM\nKnowledgeable and experienced in:\nActive Directory (Including Azure A/D Synchronization)\nEntra ID (Including App Registration, Passwordless Authentication, Enterprise Application SSO and Conditional Access Policies)Intune\nOKTA\nSemperis\nCyberArk\nZscaler AppTotal\nAutomation Tools including Task Scheduler and PowerShell\nInfoBlox BloxOne\nMicrosoft PKI, NPS, SCCM Patching\nIllumio\nMicrosoft Defender\nDell OneIdentity (Configuration, Monitoring, Migration and Implementation)\nMicrosoft NPS\nJIRA Service Desk\nUse of AI\nLocation:\nThis is a hybrid role, with 4 days in the Shelton, CT office required. (No relocation assistance offered.)\nSponsorship:\nMust be legally authorized to work in the US. Employer will not sponsor position for employment visa status now or in the future (ex. H-1B).\nWe will:\nProvide the opportunity to grow and develop your career\nOffer an inclusive environment that encourages diverse perspectives and ideas\nDeliver challenging and unique opportunities to contribute to the success of a transforming organization\nOffer comprehensive benefits globally (PB Benefits and Wellbeing Programs)\nPitney Bowes is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard for race, color, sex, religion, national origin, age, disability (mental or physical), veteran status, sexual orientation, gender identity, or any other consideration made unlawful by applicable federal, state, or local laws.\nAll qualified applicants, including Veterans and Individuals with Disabilities, are encouraged to apply.\nAll interested individuals must apply online. Individuals with disabilities who cannot apply via our online application should refer to the alternate application options via our Individuals with Disabilities link.","description_format":"text","description_chars":6030,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Relocation assistance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Courier Services","Printers & Scanners"],"lifecycle":[{"event":"open","at":"2026-10-28T02:22:21Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 17 · green card filings: 4","filings_12m":17,"filings_prev_12m":21,"green_card_filings_12m":4,"median_offered_wage_usd":141548,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":6}],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.567,"p_room":0.28,"age_days":62,"expected_fill_days":19,"reasons":["conf:8","velocity","win:tail","crowd:"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/pitney-bowes-it-security-identity-access-technical-leader","json_url":"https://alion.io/job/pitney-bowes-it-security-identity-access-technical-leader.json","meta":{"generated_at":"2026-11-01T19:39:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30184,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1764563},"rest":"https://alion.io/mcp/rest/get_company?id=1764563"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpitney-bowes-it-security-identity-access-technical-leader"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpitney-bowes-it-security-identity-access-technical-leader"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpitney-bowes-it-security-identity-access-technical-leader"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pitney-bowes-it-security-identity-access-technical-leader\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpitney-bowes-it-security-identity-access-technical-leader"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3374790}},{"tool":"search_jobs","arguments":{"company":"pitneybowes.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3374790},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}