Information Security Manager - Identity and Access Management (IAM)

The role

Lead and grow the enterprise Identity and Access Management (IAM) program and a team of IAM engineers and analysts. Own identity governance, access lifecycle, privileged access and authentication architecture across enterprise apps, cloud and hybrid environments.

What you will do

• Lead the enterprise IAM roadmap aligned with Zero Trust principles.
• Develop and enforce identity policies including RBAC, ABAC, Least Privilege and Separation of Duties.
• Lead, mentor and build a high-performing IAM team.
• Oversee joiner, mover and leaver processes to automate provisioning and de-provisioning.
• Architect and oversee SSO, MFA, SAML 2.0, OIDC and passwordless authentication.
• Manage privileged access management (PAM) implementation, session monitoring and just-in-time access.
• Direct access reviews, entitlement certification and automated access request workflows.
• Act as primary IAM lead for internal and external audits and remediation of findings.
• Escalate and investigate identity-focused security incidents and credential compromise.
• Evaluate, select and manage third-party IAM vendors, tools and services partners.

Required qualifications

• 8+ years of total experience in IT and Cybersecurity.
• At least 3+ years in a leadership or management role focused on Identity & Access Management.
• Hands-on experience with IAM tools such as Microsoft Entra ID, Okta, Ping Identity or Active Directory.
• Hands-on experience with IGA platforms such as SailPoint, Saviynt or Microsoft Entra ID Governance.
• Hands-on experience with PAM solutions such as CyberArk, BeyondTrust, Delinea or HashiCorp Vault.
• Deep understanding of OAuth 2.0, SAML, OIDC, SCIM, Kerberos and LDAP.
• Strong familiarity with regulatory compliance frameworks.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.

Nice to have

• CISSP, CISM, CISA, or vendor-specific certifications such as Okta Certified Professional, Microsoft Certified: Identity and Access Administrator Associate, or SailPoint Certified.
• Hands-on experience managing identity across AWS, Azure or GCP.
• Proficiency in scripting and automation (PowerShell, Python, REST APIs).

Before you apply

• You do not need to match every listed expectation to apply.

About the company

Zoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem to bring it to market. It aims to provide next-generation mobility-as-a-service in urban environments.