Manager Identity Access Management (IAM)

We are the leading provider of professional services to the middle market globally our purpose is to instill confidence in a world of change empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled inclusive culture and talent experience and our ability to be compelling to our clients. Youll find an environment that inspires and empowers you to thrive both personally and professionally. Theres no one like you and thats why theres nowhere like RSM.

Job Description: Digital Identity IAM Manager (AM PAM & IGA)

Position Overview

We are seeking a skilled and motivated IAM Engineering Manager to join our Digital Identity team. This role focuses on designing implementing and enhancing Identity and Access Management solutions across Access Management (AM) Privileged Access Management (PAM) and Identity Governance & Administration (IGA) platforms.

The ideal candidate will possess strong technical expertise in IAM technologies automation skills and experience integrating identity solutions across enterprise environments (cloud and on-premises).

Key Responsibilities

Access Management (AM)

• Design and implement Single Sign-On (SSO) Multi-Factor Authentication (MFA) and federation solutions using SAML OAuth 2.0 OIDC and WS-Fed protocols.
• Integrate enterprise and third-party applications with IAM platforms such as Microsoft Entra ID Okta or Ping Identity.
• Configure Conditional Access policies and authentication flows based on security best practices.
• Troubleshoot authentication federation and token-related issues.
• Configure custom user journeys and custom policies (Trust Framework) for sign-up sign-in password reset and profile management.
• Design and implement Customer Identity and Access Management (CIAM) solutions using Microsoft Entra ID B2C (Entra External ID) or equivalent CIAM platforms.

Privileged Access Management (PAM)

• Implement and manage privileged access solutions such as CyberArk BeyondTrust or Delinea.
• Configure vaulting session management privileged account onboarding and password rotation policies.
• Develop automation for privileged account lifecycle management and access approvals.
• Implement least privilege and Zero Trust principles for administrative access.

Identity Governance & Administration (IGA)

• Deploy and manage IGA platforms such as SailPoint Saviynt or Microsoft Entra ID Governance. Design and maintain access request workflows approval processes and certification campaigns.
• Implement automated Joiner-Mover-Leaver (JML) processes.
• Perform access reviews entitlement analysis and SoD (Segregation of Duties) monitoring.

Automation & Integration

• Develop scripts using PowerShell Python or REST APIs to automate IAM processes and integrations.
• Integrate IAM solutions with HR systems ITSM tools and enterprise applications.
• Build connectors and workflows for automated provisioning/de-provisioning.
• Support CI/CD pipelines for IAM configuration deployment.
• Implement Zero Trust architecture principles and identity-first security models.
• Conduct architecture reviews and recommend improvements aligned with industry best practices.
• Conduct periodic risk assessments related to identity and privileged access.
• Support audit activities and provide documentation for compliance requirements.
• Develop and execute test cases for IAM workflows integrations and policy configurations.
• Validate access controls and authentication flows to ensure secure deployment.
• Conduct penetration testing support and remediation for identity-related vulnerabilities.

Leadership & Team Management

• Lead mentor and manage a team of IAM engineers and analysts.
• Define team goals KPIs and performance objectives aligned with security strategy.
• Conduct performance reviews coaching sessions and skill development planning.
• Manage resource allocation capacity planning and project prioritization.
• Drive a culture of automation innovation and continuous improvement.

Qualifications

• Bachelors degree in Computer Science Cybersecurity or related field (or equivalent experience).
• 12 years of hands-on experience in IAM (AM PAM IGA).
• Strong understanding of authentication protocols (OAuth 2.0 OIDC SAML LDAP Kerberos).
• Experience with directory services (Active Directory Azure AD/Entra ID)
• Proficiency in scripting/automation (PowerShell XML Python).
• Experience integrating enterprise applications with IAM platforms.
• Strong troubleshooting and analytical skills.
• Excellent communication and documentation abilities.

Preferred Qualifications

• Vendor-specific certifications (CyberArk SailPoint Entra ID).
• Familiarity with Zero Trust architecture frameworks.
• Experience working in MSSP or large enterprise environments.

At RSM we offer a competitive benefits and compensation package for all our offer flexibility in your schedule empowering you to balance lifes demands while also maintaining your ability to serve more about our total rewards at

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past current or prospective service in the Indian Armed Forces; Indian Armed Forces Veterans and Indian Armed Forces Personnel status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/ is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application interview or otherwise participate in the recruiting process please send us an email at .