IAM Operations and Support Lead

The IAM Operations & Support Leader is responsible for the reliability, security, and compliance of enterprise identity services across on-prem and cloud environments. This role leads 24x7 service delivery for identity governance, administration, and privileged access management (PAM), ensuring resilient operations, excellent user experience, and audit-ready controls. The leader manages a multidisciplinary team and vendor partners, drives automation and continuous improvement, and aligns service outcomes to business, SOX, and NERC-CIP requirements.

This individual will be responsible for:
Service Ownership & Strategy
• Define IAM operations strategy, SLAs/SLOs, and service roadmaps.
• Implement SRE practices for availability, performance, and resilience.
• Maintain service architecture and dependency maps.
Operations & Service Delivery
• Lead daily operations for AD/Azure AD, SailPoint, SSO/MFA, PAM, and identity pipelines.
• Manage tiered support model, runbooks, and self-service tools.
• Drive proactive monitoring and alerting via SIEM/observability platforms.
Incident, Problem & Change Management
• Act as Major Incident Commander; reduce MTTR through automation.
• Conduct RCAs, post-incident reviews, and corrective actions.
• Govern changes via CAB/ECAB and release calendars.
Platform Administration & Reliability
• Ensure healthy operations of SailPoint, Azure AD/AD, and One Identity Safeguard.
• Oversee upgrades, patching, HA/DR, and configuration baselines.
• Manage API integrations with HRIS, ITSM, SIEM/SOAR, and apps.
Identity Lifecycle & Provisioning
• Operate joiner–mover–leaver processes via SAP SuccessFactors/Fieldglass.
• Ensure accurate provisioning/deprovisioning and access hygiene.
• Govern AD group and entitlement management at scale.
Privileged Access & Unix/macOS Controls
• Enforce vaulting, rotation, and JIT elevation via Safeguard.
• Standardize sudoers policies and Safeguard Authentication Services.
• Integrate PAM telemetry with SIEM and enforce least privilege.
Security, Risk & Compliance
• Maintain SOX, NERC-CIP, and NIST-aligned controls.
• Support access certifications and policy attestations.
• Partner with audit teams on risk assessments and remediation.
Automation & Continuous Improvement
• Implement policy-as-code and CI/CD for IAM platforms.
• Automate workflows, monitoring, and evidence collection.
• Lead UAT, regression testing, and performance baselining.
Stakeholder Engagement & Communication
• Publish service health dashboards and executive briefings.
• Coordinate with Security, HR, IT Ops, and app owners.
• Manage service intake and escalate risks with clarity.
Business Continuity & Resilience
• Maintain DR/MCBP plans and cyber recovery posture.
• Conduct tabletop exercises and failover drills.
• Ensure privileged recovery capabilities are tested and documented.

Hourly Pay Range: $65-70

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience.
• 8+ years in IAM, including 3+ years in leadership roles.
• Expertise in SSO/MFA, LDAP/Kerberos, SAML/OIDC/OAuth2, SCIM, PKI.
• Experience with ITIL/SRE practices and incident/change management.
• Proven success in audit readiness and compliance.

• Certifications: CISSP, CISM, ITIL v4, Microsoft Entra/Azure, SailPoint, One Identity Safeguard, SAFe.
• Cloud IAM experience (AWS, Azure, GCP).
• Familiarity with SIEM/SOAR tools, observability platforms, and ServiceNow.
• Experience with Agile delivery and UAT/regression testing.

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.