Information Security M19

ob Description: Endpoint Technology & Identity Manager

Title: Manager Endpoint & IAM Services

The Endpoint Technology & Identity Manager is a strategic leadership role responsible for defining delivering and governing the organizations integrated approach to endpoint management identity services.

This role expands beyond the traditional IAM Manager scope to also include endpoint engineering device governance and security integration while also ensuring effective delivery through managed service partners. The role is critical in enabling a Zero Trust security model strengthening cybersecurity posture and advancing the organizations modern workplace strategy.

Key Responsibilities

Strategic Leadership & Governance

• Define and execute the enterprise strategy for Endpoint Technology Identity and Security services
• Drive adoption of Zero Trust architecture Conditional Access and identity-driven security controls
• Establish governance models for endpoint identity and access lifecycle management
• Align technology capabilities with evolving cybersecurity and business priorities

Endpoint Technology Service & Engineering

• Lead endpoint engineering deployment and management across platforms including:
  • Microsoft SCCM / Endpoint Configuration Manager
  • Microsoft Intune / Endpoint Manager
  • Jamf (Apple ecosystem)
• Oversee device configuration standards patching and compliance enforcement
• Manage lifecycle of corporate endpoints: provisioning maintenance and decommissioning
• Enable modern workplace capabilities including cloud-managed and hybrid endpoints

Identity & Access Management (IAM)

• Run enterprise identity governance and administration (IGA) operations
• Oversee access provisioning role-based access controls and identity lifecycle management
• Manage authentication services including SSO MFA federation technologies and Entra ID
• Ensure alignment with compliance audit and regulatory requirements
• Oversee operational delivery of endpoint and identity services through EPAM-managed services
• Define/maintain SLAs KPIs and service delivery metrics for IAM & EPAM support functions
• Govern day-to-day operations incident management and service requests
• Ensure adherence to security compliance and operational standards across vendor-managed environments
• Drive continuous service improvement automation and optimization

Device & Access Governance

• Establish policies for device trust compliance posture and conditional access enforcement
• Govern device identity integration with enterprise identity systems
• Ensure seamless user access across devices while maintaining strong security controls

Modern Workplace & Cloud Governance

• Lead initiatives supporting cloud-based endpoint management and hybrid workforce models
• Enable secure access to enterprise resources from any device location or network
• Support digital transformation and mobility strategies

Cross-Functional Collaboration

• Partner with Infrastructure Security and Application teams to ensure integrated service delivery
• Act as a key liaison between endpoint IAM and cybersecurity functions
• Lead and mentor cross-functional technical teams

Operational Excellence & Delivery

• Ensure high availability and performance of endpoint and identity services
• Drive continuous improvement across operational processes and tools
• Manage vendors technologies and project delivery related to endpoint and identity ecosystems

Qualifications & Experience Required

• 10 years of experience in IT cybersecurity endpoint management IAM with at least 5 years in leadership roles
• Strong experience across:
  • Endpoint technologies (SCCM Intune Jamf)
  • IAM solutions (Azure AD / Entra ID identity governance tools)
  • Security frameworks (Zero Trust Conditional Access MFA)
• Excellent PowerShellscripting knowledge (must)
• Solid understanding of endpoint security device compliance and identity-driven access models
• Experience managing enterprise-scale environments and complex cross-functional initiatives

Preferred Certifications:

• CISSP CISM or equivalent security certifications
• Microsoft certifications (e.g. SC-300 MD-102)
• AWS Certified Security specialty