Director, Identity Platforms & Operations
Job Description Summary:
Director, Identity Platforms & Operations
Overview
The Director, Identity Platforms & Operations is The Coca-Cola Company’s senior leader for enterprise identity platforms, privileged access management, and identity operations. This role owns the engineering, operations, and continuous improvement of the Company’s identity technology stack-including Microsoft Entra ID, Entra B2B, CyberArk, and identity defense tools-ensuring that identity services are secure, resilient, and aligned with the Company’s zero-trust strategy. The Director drives the enterprise account lifecycle, service account management, and identity protection capabilities that safeguard the Company’s workforce, partners, and digital assets.
Reporting to the Senior Director, Security Engineering & Identity, this is a people-leadership role responsible for a team of identity engineers and the oversight of a managed services partner that supports identity operations. The Director partners closely with Cyber Solutions, Cybersecurity Operations, IT Infrastructure, and business technology teams to ensure identity platforms meet evolving security, compliance, and business requirements whilemaintainingoperational excellence across provisioning, de-provisioning, and access lifecycle processes.
Key Responsibilities
Identity Platform Engineering & Operations
Own the engineering, configuration, and operational health of the Company’s core identity platforms, including Microsoft Entra ID, Entra B2B,identitygovernanceand identity defense tools.
Define and execute platform roadmaps that align with the Company’s zero-trust strategy and evolving business requirements.
Ensure platform reliability, scalability, and performance through proactive monitoring, capacity planning, and incident management.
Drive automation of identity operations to improve efficiency, reduce manual effort, and minimize errors across the identity lifecycle.
Privileged Access Management
Oversee the Company’s CyberArk privileged access management environment, ensuring secure vaulting, session management, and credential rotation for privileged accounts.
Define and enforce policies for privileged access that align with the Company’s security standards and regulatory requirements.
Partner with application and infrastructure teams to expand PAM coverage and integrate privileged access controls into new platforms and workflows.
Identity Lifecycle & Account Operations
Lead enterprise account provisioning, de-provisioning, and joiner/mover/leaver lifecycle processes to ensuretimelyandaccurateaccessmanagement across the workforce.
Oversee service account management practices, including inventory, ownership assignment, credential hygiene, and lifecycle governance.
Ensure identity operations processes support SOX control requirements and partner with compliance teams tomaintainaudit readiness.
Continuously improve operational processes to reduce access-related risk and improve the end-user experience.
Identity Protection & Zero-Trust Execution
Operationalize identity protection capabilities, including identity threat detection, conditional access policies, and risk-based authentication.
Execute onthe Company’s zero-trust identity strategy, driving adoption of modern authentication methods such aspasswordless, phishing-resistant MFA, and adaptive access controls.
Maintainidentityverificationandresettechnology platformssuch as Microsoft Verified ID and competitive solutions, as well as their associated processes.
Monitor identity security posture and drive remediation of vulnerabilities, misconfigurations, and policy gaps across the identity estate.
People Leadership & Managed Services Oversight
Lead and develop a team of identity engineers, fostering a culture of operational excellence, continuous learning, and accountability.
Manage the relationship with the managed services partner, including performance management against SLAs, quality oversight, and capacity planning.
Provide regular reporting to leadership on identity platform health, operational metrics, and risk posture.
Partner with security architecture teams to translate architectural direction into operational reality.
Qualifications
Minimum8-12years of progressive experience in cybersecurity, identity and access management, or IT infrastructure, with at least 5 years in a leadership role.
Deepexpertisein Microsoft Entra ID, including Entra B2B, conditional access, and identity protection capabilities.
Solid foundation in on-premises Active Directory including forest and domain topology, trust relationships, Group Policy, and directory services.
Proven experience managing enterprise CyberArk deployments, including privileged session management, credential vaulting, and policy configuration.
Strong understanding of identity lifecycle management, including joiner/mover/leaver processes, service account governance, and directory services.
Experience executing zero-trust identity strategies, including modern authentication methods (passwordless, phishing-resistant MFA, adaptive access).
Demonstrated ability to manage managed services providers, including SLA governance, quality assurance, and performance optimization.
Working knowledge of SOX compliance requirements as they relate to identity and access controls.
Familiarity with identity security frameworks and standards such as NIST 800-63, NIST CSF, and ISO 27001.
Exceptional communication skills with the ability to translate technical identity concepts into business-relevant language for executive audiences.
Relevant certifications such as CISSP, CISM, Microsoft SC-300, or CyberArk Defender/Sentry are highly desirable.
Education
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field isrequired.
Master’s degree or advanced certifications (e.g., CISSP, CISM) are desirable.
Reporting Relationship
Reports to the Senior Director, Security Engineering & Identity, within the Chief Information Security Office (CISO) organization. Leads a team of identity engineers and oversees a managed services partner supporting identity operations.
Location
Atlanta, GA (Global Headquarters)
Travel
Estimated up to 10%travel, primarily domestic, with occasional travel for vendor engagements and cross-functional workshops.
The Coca-Cola Company will not offer sponsorship for employment status (including, but not limited to, H1-B visa status and other employment-based nonimmigrant visas) for this position. Accordingly, all applicants must be currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States.Skills:
Pay Range:
United States: 171,000 - 198,000 USDBase pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered.
Annual Incentive Reference Value Percentage:
30Annual Incentive reference value is a market-based competitive value for your role. It falls in the middle of the range for your role, indicating performance at target.
Location(s):
United States of AmericaCity/Cities:
AtlantaTravel Required:
00% - 25%Relocation Provided:
NoJob Posting End Date:
October 1, 2026Our Purpose and Growth Culture:
We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what’s possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors - curious, empowered, inclusive and agile - and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola.
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.