Senior Manager, Identity and Access Management

If youre passionate about building a better future for individuals communities and our countryand youre committed to working hard to play your part in building that futureconsider WGU as the next step in your career.

Driven by a mission to expand access to higher education through online competency-based degree programs WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century one that has received praise from academic industry government and media leaders. Whatever your role working for WGU gives you a part to play in helping students graduate creating a better tomorrow for themselves and their families.

The salary range for this position takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.

At WGU it is not typical for an individual to be hired at or near the top of the range for their position and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is:

Grade: Management Technical 714

Pay Range: $151800.00 - $250500.00

Job Description

As Senior Manager Identity and Access Management you own the strategy architecture governance and daily operation of the enterprise IAM program within Information Security. The scope is the full program: identity governance and administration access management and federation privileged access management identity threat detection and security posture management and enterprise certificate lifecycle services. It spans every population the university serves workforce students and learners external partners and the fast-growing set of non-human identities including service accounts enterprise secrets and AI agents.
You will lead a team of identity engineers and analysts set the technical standards other teams build against and partner with Human Resources Legal Privacy Internal Audit Infrastructure and Application Development. You will also be accountable for the reliability of authentication and other IAM services which the university treats as tier-one dependencies.

What Youll Own

• Program strategy and direction. The IAM strategy capability roadmap and program priorities along with the business case and executive sponsorship behind them.

• Team leadership. Leading coaching and developing a team of identity engineers and analysts including hiring goal setting and performance management.

• Identity governance and lifecycle. Automated joiner mover and leaver processes driven by authoritative human resources student and affiliate systems of record; the enterprise identity data model and registry of record; role and entitlement design; separation-of-duties policy; and access certification through closed-loop remediation.

• Authentication and federation. Single sign-on multi-factor and passwordless authentication federation with partners and peer institutions and accessible authentication and account recovery paths for every population the university serves.

• Privileged and non-human identity. Credential vaulting session control just-in-time elevation break-glass procedures and reduction of standing privilege extended to service accounts enterprise secrets and the authorization boundaries of AI agents and autonomous workloads.

• Identity security operations. Identity threat detection and response identity security posture management remediation of permission drift and orphaned accounts and the identity lead role during security incident response.

• Service reliability. Availability resilience and disaster recovery for authentication and other IAM services including defined service levels and tested failover.

• Policy compliance and audit. Access control policy and standards identity governance and exception adjudication least-privilege access under FERPA GLBA and PCI DSS control mapping against the NIST Cybersecurity Framework and NIST SP 800-53 and audit and assessor response.

• Architecture and standards. IAM reference architecture technical standards and integration patterns including review and approval of new identity designs proposed by project and application teams.

What Youll Bring

• A bachelors degree in a related field and 7 years of information security or identity and access management experience or 10 years of industry experience working in security.

• Hands-on experience in identity and access management including developing or leading an IAM program.

• 3 years of people leadership experience.

• One or more industry security certifications (CISSP CISM or a recognized identity and access management certification).

• Depth in identity governance and administration: lifecycle automation provisioning role and entitlement design access certification and separation of duties.

• Command of identity and access standards including SAML OpenID Connect OAuth 2.0 SCIM and LDAP and of multi-factor and passwordless authentication.

• Experience with privileged access management including credential vaulting session control and privilege reduction.

• Experience governing non-human identities service accounts and enterprise secrets.

• Experience with certificate lifecycle management and the public key infrastructure supporting service device and workload identity.

• Working knowledge of enterprise directory services and how they integrate with identity platforms.

• Knowledge of NIST HIPAA FERPA GLBA ISO PCI DSS and other regulatory and industry standards.

• The ability to explain complex security problems to business partners in terms they can act on.

What Will Set You Apart

• A masters degree in a related field.

• Certification in an identity-focused discipline or an enterprise identity platform.

• Identity and access management experience in higher education or another environment with overlapping workforce student and affiliate populations.

• Experience with identity threat detection and response or identity security posture management.

#LI-Aw2

Position & Application Details

Full-Time Regular Positions (classified as regular and working 40 standard weekly hours): This is a full-time regular position (classified for 40 standard weekly hours) that is eligible for bonuses; medical dental vision telehealth and mental healthcare; health savings account and flexible spending account; basic and voluntary life insurance; disability coverage; accident critical illness and hospital indemnity supplemental coverages; legal and identity theft coverage; retirement savings plan; wellbeing program; discounted WGU tuition; and flexible paid time off for rest and relaxation with no need for accrual flexible paid sick time with no need for accrual 11 paid holidays and other paid leaves including up to 12 weeks of parental leave.

How to Apply: If interested an application will need to be submitted online. Internal WGU employees will need to apply through the internal job board in Workday.

Additional Information

Disclaimer: The job posting highlights the most critical responsibilities and requirements of the job. Its not all-inclusive.

Accommodations: Applicants with disabilities who require assistance or accommodation during the application or interview process should contact our Talent Acquisition team at

Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to any protected characteristic as required by law.