Principal Cybersecurity Engineer – Identity & Access Management

Responsibilities • Own the enterprise IAM governance and architecture strategy • Define multi-year IAM roadmap aligned to Zero Trust and business priorities • Influence funding, prioritization, and sequencing of IAM initiatives • Represent identity risk and posture to senior leadership and governance forums • Establish enterprise identity reference architectures and guardrails • Act as final design authority for identity integrations and access models • Define authentication, authorization, and privilege models across platforms • Ensure consistency across workforce, application, and privileged identities • Guide adoption of password‑less, JIT access, and adaptive authentication • Define enterprise IAM policies, standards, and control frameworks • Oversee access governance methodologies (reviews, certifications, exceptions) • Establish IAM risk metrics and maturity assessments • Drive remediation of systemic identity risks • Provide executive‑level support for audits and regulatory inquiries • Partner with IT, HR, Legal, Compliance, and Engineering teams • Influence identity operating models without direct operational ownership • Lead working groups and design councils related to identity • Evaluate IAM, IGA, and PAM technologies from a strategic perspective • Define success criteria for IAM tooling and integrations • Stay current with identity threat trends and evolving best practices Requirements • Bachelor’s degree in information technology, Information Security/Assurance, Computer Science, Engineering, or related field or equivalent combination of education and experience • 6-8 years of experience in cybersecurity, identity security, or security engineering • Deep expertise in IAM governance, architecture, and risk management • Proven experience leading enterprise‑scale IAM initiatives • Strong understanding of zero trust identity architectures, RBAC / ABAC and role governance, privileged access governance and admin models, and Identity lifecycle / access assurance • Experience influencing architecture and security outcomes across large organizations • Excellent executive communication and stakeholder management skills. • Identity platform experience across multiple vendors (Entra ID, Okta, SailPoint, CyberArk, etc.) • Experience in regulated or complex enterprise environments • Certifications such as CISSP, CCSP, SABSA, or identity‑focused credentials.