> Markdown version of [/jobs/ext/2189206-manager-identity-and-access-management-iam](https://www.wearedevelopers.com/jobs/ext/2189206-manager-identity-and-access-management-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Manager, Identity and Access Management (IAM) - **Company:** American Sugar Refining, Inc. - **Location:** West Palm Beach, FL, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Software as a Service, Cyber Security, Information Systems, Human Resources Information System (HRIS), Identity and Access Management, IT Management, SAP ERP, Role-Based Access Control, Azure Active Directory, SuccessFactors, Zero Trust Network Access, SAP (Applications), SAP NetWeaver Business Warehouse, SAP Project System, SAP Security, User Provisioning Software, IT General Controls (ITGC), RISE with SAP, Sap Fiori, Information Technology, SAP S/4HANA - **Published:** August 22, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/18041402?backUrl=%2Fcareer%2F18041402%2FManager-Identity-Access-Management-Iam-Florida-West-Palm-Beach ## About the Role * 10+ years of progressive IAM experience in large, multi-entity enterprises, withat least 6 years of hands-on SAP Security at an expert level(ECC and S/4HANArequired). * 3+ years leading teams, includingdemonstratedexperience managing outsourced or offshore administration teams under formal SLAs. * Significant experiencedesigning and operating IAM and identity governance controls at scale, including Microsoft Entra ID, Entra ID Governance, Active Directory, and privileged access management. * Proven experience leading IAM and SAP Security audits (ITGC, SOX-style, NIS 2, or equivalent) from planning through remediation. * Direct experience integrating authoritative HR sources (such as SAP SuccessFactors) into IAM lifecycle automation for joiner/mover/leaver processes., * Bachelor's Degree in Information Systems, Computer Science, Engineering, or equivalent experience. * In lieu of aBachelor's Degree, 10+ years of relevant field experience will be considered. * Relevant certifications preferred, such as SAP Certified Technology Associate - SAP System Security and Authorizations, CISSP, CISM, CISA, or Microsoft Identity and Access Administrator (SC-300). Essential Capabilities * Expert-level SAP Securityexpertise, including role design,SoD, GRC Access Control (ARA, ARM, BRM, EAM), firefighter access, and SAP audit support across ECC and S/4HANA. * Strong working knowledge of Microsoft Entra ID and Entra ID Governance, including entitlement management, access reviews, lifecycle workflows, PIM, and conditional access. * Solid understanding of identity and access management, identity governance, privileged access, and zero-trust-alignedarchitecturesacross on-prem and cloud environments. * Demonstrated ability to lead outsourced administration teams under formal SLAs whilemaintainingquality, security, and audit-readiness. * Strongorganization andplanning discipline, including roadmaps, capacity plans, RACIs, runbooks, and executive status reporting. * Excellent written and verbal executive communication, with the ability to influence CISO, CIO, CFO, Internal Audit, and business leadership. * Ability to set and defend priorities across competing operational, audit, and project demands with clear, risk-based rationale. * Ability to create clear, concise documentation targeted at IT leadership, business stakeholders, auditors, and technical teams. * Strong collaboration and leadership skills, with the ability to drive alignment on identity, access, and SAP Security decisions across cross-functional teams. Location of Role USA Remote, able to work from 8AM to 5PM Eastern Time Zone (USA, Florida), with occasional off-hourssupport for P1/P2 incidents, audit deadlines, and major project cutovers. West Palm Beach, FL area preferred. ## Description The Identity and Access Management (IAM) Manager reports to the Sr. Director, Information Security (CISO) and serves as the enterprise leader for the IAM program across Florida Crystals / ASR Group. The role owns the strategy, roadmap, and day-to-day execution of Identity and Access Management, includingMicrosoft Entra ID and Entra ID Governance, SAP Security across ECC,S/4HANA, and SAP RISE, privileged access, joiner/mover/leaver processes, access certifications, and audit readiness. The primary focus is to mature and operate the IAM program with a strong emphasis on expert-level SAP Security, identity governance, and audit-defensible controls. This role leads a hybrid team consisting of an in-house Senior SAP Security Administrator, an in-house Senior IAM Engineer focused on Entra ID Governance, and an outsourced team of SAP Security administrators executing SAP permissions changes under tight SLAs. The IAM Manager partners closely with SAP BASIS and functional teams, Enterprise Architecture, HRIS, Internal Audit, and business leadership to advance the IAM architecture and execute the multi-year identity, governance, and SAP Security roadmap. Detailed Roles & Responsibilities * Lead, coach, and develop a hybrid IAM team, including in-house engineers and an outsourced SAP Security administration team of seven, with clear SLAs, quality standards, and escalation paths. * Own the multi-year IAM roadmap aligned to the Zero Trust and enterprise security strategy, covering SAP Security, Entra ID Governance, privileged access, and access certification modernization. * Serve as the enterpriseSAP Security subject-matter expertacross ECC, S/4HANA, BW/BI,RISE,Fiori,CIS, IAS,SolMan, and GRC Access Control (ARA, ARM, BRM, EAM), including role designmethodology,SoDruleset, mitigation controls, and derivation strategy. * Direct the outsourced SAP admin team on day-to-day security operations, including role creation and change, user provisioning, license type assignment,FUE tracking,SU53/ST01 tracing, transport strategy, and emergency (firefighter) access. * OverseeSoDanalysis and remediation, critical authorization reviews, EWA security findings, and SAP Security Notes patching cadence in partnership with SAP Basis. * Lead SAP Security work streams for upgrades, S/4HANA transformations, greenfield and brownfield conversions, Fiori rollouts, and M&A integrations or divestiture carve-outs. * Own the Microsoft Entra ID Governance platform, including entitlement management, access packages, access reviews, lifecycle workflows, and Privileged Identity Management (PIM), and drive the broader IGA strategy. * Drive automation of joiner/mover/leaver processes across HRIS (SuccessFactors), Entra, Active Directory, SAP, and downstream SaaS applications, applying least-privilege and zero-trust principles. * Define and enforce access certification cadences for privileged, sensitive, and regulated application access, and mature RBAC/ABAC models, conditional access, and least-privilege enforcement enterprise-wide. * Lead the IAM response to internal audit, external audit (ITGC), SOX-style controls, NIS 2, GDPR, and cyber insurance requirements, including control design, evidence collection, and remediation. * Set priorities across competing operational, audit, and project demands with clear risk-based rationale, and defend those priorities to executive stakeholders. * Serve as the escalation point for P1/P2 IAM and SAP Security incidents, including access outages, privilege misuse, and identity-relatedbreachresponse, in coordination with SOC/MDR and IR partners. * Deliver executive-ready updates, business cases, and steering committee materials for the CISO, CIO,CTO,CFO, Internal Audit, and business leadership. * Manage vendor and MSP relationships supporting the IAM function, including SOW scoping, performance reviews, and commercial negotiations. * Maintain IAM policies, standards, work instructions, RACIs, and reference architectures; ensure they are current, enforced, andaudit-defensible. * Provide mentorship and technical guidance to IAM, SAP, infrastructure, and application teams on identity, access, and SAPSecuritybest practices. * Stay current on threats, regulatory trends, and technologies affecting IAM, IGA, and SAP Security, and evaluatenew solutionsthat support the program'sobjectives. ## Related Videos - [Headless by Design: Building Enterprise Systems That Agents Can Actually Use](https://www.wearedevelopers.com/videos/100092-headless-by-design-building-enterprise-systems-that-agents-can-actually-use) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation) - [When AI Runs the Business: The Reality of Enterprise-Wide Automation](https://www.wearedevelopers.com/videos/100124-when-ai-runs-the-business-the-reality-of-enterprise-wide-automation) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Top HR Tech Conferences in 2024](https://www.wearedevelopers.com/magazine/303-top-hr-tech-conferences-in-2024) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)