> Markdown version of [/jobs/ext/1974943-lead-director-identity-and-access-management](https://www.wearedevelopers.com/jobs/ext/1974943-lead-director-identity-and-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Director, Identity and Access Management - **Company:** CVS Health - **Location:** New York, NY, United States - **Experience:** Expert - **Salary:** $144,200.0 - $288,400.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Disaster Recovery, Identity and Access Management, Google Cloud, Cyberark, Amazon Virtual Private Cloud (VPC), Hashicorp - **Published:** August 7, 2026 - **Apply:** https://www.juju.com/job/00000000glxq8o ## About the Role + 10+ years of IAM experience, including senior leadership ownership of enterprise identity platforms. + 7+ years of hands on experience in: + Active Directory (cloud and on-prem), including security hardening and forest-level controls + Entra ID federation and hybrid identity + GCP IAM architecture and governance + Privileged Access Management + 7+ years of experience in people management including but not limited to hiring, training and mentorship, team building, etc. + 5+ years of experience in regulated environments, including HIPAA and SOX impact on identity controls. Preferred Qualifications + Demonstrated autonomy, tolerance for ambiguity, and success building identity platforms from zero. + Demonstrated experience running IAM as a program, with accountability for outcomes. + Experience with KCC (Config Connector) IAM Policy Member and IAM Service Account resources. + Familiarity with Wiz IAM analysis and Security Command Center findings. + Experience with CyberArk, HashiCorp Vault, or similar PAM platforms. + CISSP, CISM, or GCP Security Engineer certification. + Healthcare or highly regulated industry experience. Education + Bachelor's degree or equivalent experience (High School Diploma and 4 years relevant experience). ## Description The Director of Identity & Access Management (IAM) is a senior security and engineering leader responsible for building, leading, and sustaining the IAM function for a new CVS Health Venture. This role owns the end-to-end IAM program, including strategy, governance, engineering, and operations across a complex hybrid environment spanning Active Directory, Entra ID, GCP IAM, and Privileged Access Management. Operating in a greenfield environment, the Director will establish foundational identity models, access controls, and operating frameworks to deliver a secure, scalable, and audit-ready IAM capability aligned with HIPAA, SOX, and enterprise security standards. This leader is accountable for IAM as a business-critical enterprise program, driving outcomes across security, compliance, and operational performance. The Director will lead and scale a high-performing organization, establish clear governance and accountability across first and second lines of defense, and influence senior stakeholders on identity related risk and priorities. This role will define the IAM roadmap, advance automation and lifecycle capabilities, and drive continuous improvement as the function matures into a critical enabler of growth and compliance. Role Responsibilities: IAM Strategy, Governance & Execution + Own and execute the enterprise IAM program strategy across the hybrid environment (Active Directory, Entra ID, GCP IAM, PAM). + Define and enforce identity governance frameworks, including tiering models, access controls, and federation across AD, Entra, and GCP. + Ensure IAM controls meet HIPAA, SOX, and enterprise security standards, partnering with audit, compliance, and legal teams. + Serve as the primary IAM authority, guiding cross-functional decisions on identity risk, access governance, and control enforcement. Engineering Leadership & Identity Architecture Oversight + Provide leadership oversight of identity platform design and configuration, including AD structure, group policy, and permission models. + Ensure identity access is structured to prevent privilege creep through effective role design, inheritance control, and policy enforcement. + Oversee Privileged Access Management (PAM), enforcing least privilege and eliminating persistent administrative access. + Guide implementation of secure identity patterns (e.g., federation, service accounts, VPC Service Controls, emergency access). Operations, Risk & Service Delivery + Own IAM operational performance, including KPIs, reporting, audit readiness, and service reliability. + Establish and maintain runbooks, SOPs, and access lifecycle processes (joiner/mover/leaver). + Oversee incident response, access escalations, and high-risk revocations, ensuring timely resolution and SLA adherence. + Lead access reviews, remediation efforts, and continuous improvement of IAM maturity and control effectiveness. + Ensure disaster recovery, business continuity, and resilience of identity platforms. Organizational Leadership & Program Build + Build and lead a high-performing IAM organization, including hiring, structure, and capability development across engineering and operations. + Establish clear operating models, accountability, and governance across first and second lines of defense. + Provide executive-level reporting and communication on IAM risks, performance, and maturity. Innovation, Automation & Continuous Improvement + Drive automation of identity lifecycle management, provisioning, certification, and compliance reporting. + Own the IAM roadmap, aligning technology investments with business growth and regulatory requirements. + Evaluate and implement emerging IAM and PAM technologies to enhance scalability, efficiency, and security posture. ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) - [Securing Secrets in the GitOps era](https://www.wearedevelopers.com/videos/546-securing-secrets-in-the-gitops-era) - [My journey into DevOps world - How it all started!](https://www.wearedevelopers.com/videos/545-my-journey-into-devops-world-how-it-all-started) - [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)