> Markdown version of [/jobs/ext/1762805-mgr-identity-access-mgmt](https://www.wearedevelopers.com/jobs/ext/1762805-mgr-identity-access-mgmt). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Mgr, Identity & Access Mgmt - **Company:** Royal Caribbean International - **Location:** Miramar, FL, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Code Review, Cyber Security, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Ping (Networking Utility), Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Software Engineering, Oracle Fusion Middleware, Systems Architecture, Scripting, Information Technology, Api Design, Restful APIs, Web Api - **Published:** July 8, 2026 - **Apply:** https://www.jobmonkeyjobs.com/career/27832223/Mgr-Identity-Access-Mgmt-Florida-Miramar-Miramar-1889 ## About the Role * Engineering Foundation: 10+ years of progressive experience in Identity & Access Management with a mandatory background in software engineering, scripting, or systems architecture. You must be able to read, write, and review code. * Technical Leadership: 5+ years of experience acting as an engineering lead or technical manager for highly skilled development/engineering teams. Pure people managers will not be considered. * AI Security & Development: Proven experience utilizing AI to accelerate software development, coupled with a deep architectural understanding of securing AI workloads, managing workload identities, and protecting API endpoints for enterprise AI models. * Core IAM Stack: Deep, hands-on architectural expertise with Microsoft Entra ID and the Ping Identity stack (PingAM, PingIDM). * Protocol & Integration Mastery: High proficiency in engineering solutions utilizing federation and provisioning protocols (OIDC, SAML, SCIM, OAuth2, REST APIs). * Automation: Extensive experience writing complex automation, reconciliation, and integration scripts using PowerShell, Python, or similar languages. * Security & Compliance: Demonstrated ability to engineer automated SOX controls and architect Zero Trust principles into workforce IAM, specifically regarding JIT elevation and PAM integrations. * Education: Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or equivalent technical experience. ## Description We are seeking a highly technical Manager of IAM Engineering to lead and mentor a global team of Identity Engineers at Royal Caribbean Group. This is not a traditional people-management role or a standard COTS implementation position. We require an engineering leader who will drive the architecture, development, and execution of complex identity services across a massive global enterprise. You will move us beyond out-of-the-box vendor configurations, architecting custom solutions within environments heavily reliant on Entra ID, PingIDM, and PingAM. Your mandate is to engineer scalable, API-first identity lifecycles, eliminate decentralized provisioning models, and drastically reduce standing privileges through advanced automation., * Technical Leadership & Mentorship: Lead, code alongside, and mentor a distributed team of IAM engineers. You will evaluate architecture, review code (PowerShell, Python, API scripts), and raise the technical baseline of the team. * AI-Augmented Development: Drive the extensive use of AI coding assistants and generative models within the IAM engineering lifecycle to accelerate script development, automate complex policy generation, and optimize reconciliation logic. * Custom Engineering over Configuration: Drive the engineering of custom SCIM endpoints, token exchange mechanisms, and complex reconciliation scripts to integrate disparate systems (including massive ERP environments like Oracle Fusion) into our centralized identity fabric. * Centralized Provisioning & Compliance: Architect and enforce highly consistent, automated, and centralized access provisioning models. You will engineer out the human elements and decentralized processes that typically lead to SOX audit vulnerabilities. * Advanced Privilege Engineering: Lead the technical transition away from static privileged access. You will oversee the engineering of Just-In-Time (JIT) elevation workflows within Entra ID and our PAM environments, targeting a near-zero standing privilege baseline. * Platform Mastery: Manage and extend the technical capabilities of our core IAM platforms (Entra ID, Ping Identity suite). You will design solutions that push the boundaries of these tools rather than settling for standard deployments. * Continuous Automation: Define and execute a strategy for modernizing IAM capabilities, leveraging advanced scripting, self-service workflows, and AI-driven intelligence for access risk analysis. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Web APIs you might not know about](https://www.wearedevelopers.com/videos/281-web-apis-you-might-not-know-about) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this)