Job Description & Summary
Job description & summary
As a Manager within the Identity & Access Management technical operations team, you will play a pivotal role in supporting and advancing PwC’s internal identity services, specifically focusing on SailPoint platforms - both legacy IdentityIQ (IIQ) and the evolving Identity Security Cloud (ISC).
You will lead operational delivery, ensure platform stability, security, and availability, and drive modernization efforts aligned with enterprise identity governance goals. This hands-on leadership role requires deep technical expertise, strong stakeholder collaboration, and proven people management skills.
Leadership & Strategy:
- Lead, mentor, and develop a high-performing technical operations team supporting IAM services, fostering a culture of ownership, continuous improvement, and technical rigor
- Lead modernization initiatives including the migration of SailPoint IIQ capabilities to SailPoint ISC as part of an enterprise-wide identity roadmap
- Act as a leader and coach, supporting both individual and team growth.
- Collaborate with cross-functional teams including IAM Engineering, Network, Compute, Cybersecurity, Cloud Services, Vendors, and Change/Problem Management.
- Serve as the technical thought leader for internal identity services, providing guidance on architecture, standards, and long‑term platform evolution.
Platform Ownership & Execution:
- Manage application onboarding to SailPoint platforms, including connectors, identity attributes, workflows, and governance logic.
- Drive modernization initiatives, including transitioning functionalities from SailPoint IIQ to SailPoint ISC, and enable scalable governance across cloud and on-premises environments.
- Leverage advanced IGA capabilities such as machine identity governance, cloud entitlement management (CIEM), and unified auditing and reporting
- Serve as a technical thought leader guiding architecture standards and platform evolution aligned to PwC’s identity roadmap
Operational Excellence:
- Manage day-to-day IAM service delivery including identity provisioning, lifecycle management, access certifications, group management, and governance workflows
- Own and execute Level 3/Level 4 incident and problem management processes, applying deep technical troubleshooting and root cause analysis to remediate issues proactively and reactively.
- Coordinate and lead change management efforts and conduct thorough testing (functional, load, performance) across Development, Staging, and Production environments before deploying changes
- Identify and resolve capacity bottlenecks through proactive monitoring and alerting, optimize platform performance, and enforce preventive measures to improve availability and stability
- Oversee timely inspection and remediation of vulnerabilities, ensuring strict compliance with identity security policies and standards
Collaboration & Governance
- Collaborate closely with security teams and external vendors to meet governance and audit requirements.
- Support identity governance activities such as annual risk and access reviews, certifications, and compliance reporting.
- Maintain accurate, up-to-date IAM documentation to ensure operational transparency and knowledge continuity.
Requirements of the role
- 8+ years of IAM experience with significant depth in SailPoint IdentityIQ and SailPoint ISC.
- Demonstrated experience leading engineering or operations teams within an enterprise IAM environment.
- Expertise in identity lifecycle management, access certification, application onboarding, governance workflows, and connectors.
- Strong understanding of cloud identity patterns and integrations across AD/Entra ID, ServiceNow, and cloud platforms.
- Proficiency with automation and scripting (Shell, PowerShell, Bash) and database queries.
- Excellent communication, stakeholder management, and mentoring capabilities.
Preferred
- Experience leading SailPoint IIQ → ISC migration programs.
- Familiarity with SIEM integrations such as Splunk and Datadog for identity monitoring and auditing.
- Knowledge of advanced cloud entitlement governance (CIEM) and machine identity controls.
