IAM Manager

RESPONSIBILITIES:
Kforce's client in San Francisco, CA is looking for a Identity & Access Management Manager for the (IAM) team responsible for creating, managing, and ensuring the business has access to all of the systems necessary to provide all essential services to our customers. Using Active-Directory, SailPoint IIQ and Delinia, the IAM team works with our partners in the business to streamline access to all systems and applications.

Project Description:
The IAM Manager will be a lead to the Identity & Access Management (IAM) responsible for analyzing and translating business requirements and developing our Identity & Access Management team. The IAM Manager will help create process improvements to the account management lifecycle. This role will help drive assurance with IAM-related security and compliance requirements across all areas of IAM.

Duties:
* Help drive innovation to improve processes and streamline the customer experience
* Drive automation of manual processes through enhancing API integration and SailPoint IIQ development
* Develop and execute on a plan that ensures least privilege for account access using just in time, just enough provisioning
* Lead the IAM team and work with service leads throughout the organization to educate on IAM and engage to facilitate an optimal IAM implementation
* Audit current users and groups and drive cleanup for legacy or stale accounts
* Implement role based access for most common account types
* Centrally manages user security and entitlement reviews and certifications, as well as interfacing with internal clients and external vendors
* Acts as champion and educates the enterprise on all aspects of IAM

REQUIREMENTS:
* 5+ years of experience in Information Security including Identity & Access Management
* Experience in large scale, dynamic enterprise environments with multiple authentication methods and large variety of user types
* Extensive knowledge and experience with privileged identity management, access governance and other IAM solutions such as Active Directory, Ping, Delenia, SailPoint Identity IIQ, etc.
* Ability to work with authentication and authorization protocols (OAuth, Kerberos, SAML, OpenID)
* Ability to train, manage and assist co-workers and direct reports on all aspects of the program build and evolution
* Strong communications skills (written and verbal) to be able to work with technical and non-technical team members
* Highly motivated, strong sense of urgency and track record of getting results
* Excellent written and verbal communication skills

Bonus:
* Ecommerce experience is a strong plus, retail also helpful
* Background in a large multi-national organization is a strong plus.

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.