Platform Owner, Identity & Access Management

Job Type:

Plains is an industry-leading transportation and midstream provider specializing in transportation storage processing and marketing solutions for crude oil. We own an extensive network of pipeline transportation terminalling storage and gathering assets in key oil producing basins and transportation corridors and at major market hubs in the United States and Canada. The company is headquartered in Houston Texas.

Were on the lookout for passionate selfstarters who thrive in fastmoving collaborative and innovative environments.

The Platform Owner Identity & Access Management (IAM) is a strategic technical position responsible for the end-to-end architecture development automation and management of the organizations IAM framework with a core focus on Microsoft Entra as the enterprise identity platform. This role is pivotal in aligning IAM initiatives with the organizations business objectives and technology strategy leveraging the TOGAF framework to ensure a robust scalable and compliant identity architecture.

The selected candidate will be eligible for company benefits including Medical Dental Vision Paid Time Off (PTO) and Free Parking.

Key Responsibilities:

• Lead and mentor a geographically distributed team of Access Administrators and managed services provider fostering a culture of excellence automation and continuous improvement.

• Architect implement and optimize the IAM platform using Microsoft Entra ensuring alignment with TOGAF principles for enterprise architecture including Business Application Data and Technology domains.

• Oversee the lifecycle management of user and group accounts within Active Directory Exchange and integrated systems ensuring secure and efficient provisioning and JML processes.

• Collaborate with Information Security IT and business stakeholders to define and enforce access policies ensuring timely and accurate fulfillment of user access requests.

• Develop and report on key performance indicators and metrics related to access management driving data-driven decisions and continuous service improvement.

• Steward the access request process identifying and implementing process automation enhancements to streamline provisioning and strengthen security controls.

• Align IAM mappings and controls to NIST CSF 2.0 standards and other relevant compliance requirements (e.g. PCI SOX).

• Champion security business value operational efficiency and business user experience.

• Track analyze and report on metrics that demonstrate improvements in identity security posture and business productivity.

Qualifications:

• Bachelors degree or higher in Information Systems Computer Science or a related business field.

• Minimum of 7 years experience operating and automating enterprise-scale I&AM services infrastructures with direct expert level experience in Microsoft Entra and related identity platforms (e.g. Ping Okta Delinea CyberArk SailPoint SASE).

• Experience on operationalizing Mergers and Acquisitions in a fast to market approach to create value for the business.

• Expert-Level understanding of legacy and modern applications authentications.

• Expert-Level understanding of Citrix/VDI/Virtual hosted application and authentication mechanisms.

• Demonstrated expertise in designing and implementing IAM solutions based on TOGAF architecture principles.

• Expert experience with supporting Microsoft Identity Manager (MIM)

• Experience with Power Platform Managed Identity

• Experience transitioning from legacy to modern identity platforms.

• Proficiency in Active Directory Exchange and other core identity systems including hands-on experience with automating provisioning group management and access controls.

• Strong analytical problem-solving documentation and critical thinking skills with the ability to troubleshoot and resolve complex system issues.

• Experience with scripting and automation (e.g. PowerShell ) to support IAM operations.

• Deep experience with industry cryptography protocols and standards such as LDAPs Kerberos SAML x.509 TLS/SSL and others.

• Preferred Certifications: Microsoft Certified Identity and Access Administrator Associate Delinea Certified Engineer Certified Information Systems Security Professional (CISSP) Certified Identity and Access Manager (CIAM) and Microsoft Certified Azure Solutions Architect Expert.

• Preferred experience in the Oil & Gas Sector in both IT/OT Domains.

• Proven ability to work collaboratively with technical and business teams across diverse disciplines.

• Cleared criminal history (background) and satisfactory reference checks

• Compliance with the Companys drug and alcohol policy including pre-employment D&A testing.

• This position is not eligible for employment-based visa sponsorship. Applicants must be authorized to work in the U.S. for the duration of their employment

#Plains

At Plains our employees are our most valuable asset. Hard work is rewarded with competitive compensation and a top-tier benefits program designed to keep our employees safe healthy and happy. We work hard to deliver the best results to our stakeholders and we also respect our employees need for personal and family time which is reflected in our benefits program.

We are proud to bean Equal Opportunity Employer. We are committed to providing employment opportunities to all qualified individuals without regard to age race color national or ethnic origin religion sex sexual orientation gender identity or expression veteran status genetic information disability or any other characteristic protected by federal state or local with disabilities can request accessible formats communication supports or other accessibility assistance by contacting .

Salary details estimated by job boards such as Indeed Glassdoor and LinkedIn do not represent Plains compensation structure. We thank all candidates for their interest; however only those selected for an interview will be contacted.

By submitting your resume you consent to the collection use and necessary disclosure of the personal information provided during the application and selection process. Learn more.