Identity and Access Management Specialist

Insight Global is seeking an IAM Specialist (Cryptography Platform Owner) to join a leading organization in a highly regulated, payments‑focused environment. This is a senior, hands‑on individual contributor role responsible for owning and operating cryptography platforms that support payment security, identity protection, and privileged access ecosystems.

The successful candidate will act as the technical authority and long‑term owner of cryptographic tooling, including HSM infrastructure, encryption services, key lifecycle management, PKI, and secrets management. The role focuses on platform stability, operational rigor, and controlled evolution in a compliance‑driven environment.

Responsibilities include owning cryptographic platforms end‑to‑end, managing configuration, lifecycle, and change control for HSMs (digital and payment), encryption tooling, key management systems, PKI, and secrets management platforms. The role is responsible for defining and maintaining cryptographic standards, key lifecycle processes, and operational procedures, including key ceremonies and dual‑control workflows. The IAM Specialist will support secure integrations across cloud and on‑prem environments, provide cryptography guidance during security design reviews, and ensure platforms remain audit‑ready through strong documentation and evidence collection. This role also supports IAM and PAM integrations where required, working with platforms such as CyberArk and cloud IAM services to enable secure access and secrets workflows.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

-5–7+ years of experience in cryptography, security engineering, or IAM, with a strong hands‑on cryptography background
-Proven experience owning and operating cryptographic platforms in an enterprise environment
-Hands‑on expertise with:
HSMs (digital and/or payment cryptography)
Encryption technologies and key management
Key lifecycle processes and key ceremonies
Secrets management platforms
-Experience acting as a dedicated platform owner, responsible for stability, configuration, and operational controls
-Strong documentation and operational discipline

-Experience with CyberArk, Venafi, HashiCorp Vault, or similar tooling
-Exposure to PCI or payments environments (certification not required)
-Cloud IAM or CI/CD secrets integration experience
Security or cryptography certifications

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.