Principal, Identity Management

As a member of the Information Security team, the Principal, Identity Management will provide technical leadership for the architecture, engineering, governance, and strategic evolution of Itron’s enterprise Identity and Access Management (IAM) program. This role serves as the organization’s senior technical authority for workforce, customer, product, and non-human identities, ensuring secure, scalable, and customer-centric identity solutions across hybrid, multi-cloud, and on-premises environments. The ideal candidate combines deep IAM expertise with a collaborative, innovative, and accountable approach to security, enabling business agility while protecting critical systems, products, customers, and data across the utilities and energy industry. Duties & Responsibilities

• Define, maintain, and evolve the enterprise IAM architecture, technical standards, reference patterns, and strategic roadmap aligned with organizational goals and industry best practices.
• Lead the design, implementation, and modernization of secure identity solutions supporting workforce, customer, product, cloud, privileged, application, and non-human identity use cases.
• Advance Zero Trust security principles, including least privilege, separation of duties, continuous verification, risk-based access controls, and reduction of standing administrative privileges.
• Establish and optimize identity governance processes, including identity lifecycle management, access certifications, entitlement analysis, role management, and joiner-mover-leaver automation.
• Partner collaboratively with Cybersecurity, Cloud Engineering, Product Security, Infrastructure, Enterprise Architecture, and business stakeholders to deliver secure and scalable identity solutions.
• Define IAM monitoring, logging, reporting, and metrics programs to measure access risk, identity hygiene, control effectiveness, and identity-related threat activity.
• Provide technical leadership during identity-related incidents, investigations, access-control failures, and major security decisions.
• Drive continuous improvement through automation, policy-as-code, and AI-enabled capabilities that enhance security outcomes, governance, operational efficiency, and user experience.
• Mentor engineers and technical teams by fostering an authentic, accountable, and collaborative culture focused on operational excellence and innovation.
• Produce clear technical documentation, standards, architectural guidance, and implementation patterns supporting enterprise-wide adoption.

• Bachelor’s degree in Computer Science, Cybersecurity, Management Information Systems, or a related field; equivalent experience will be considered.
• 7+ years of experience in cybersecurity, identity engineering, cloud security, or a related technical discipline.
• 5+ years of hands-on experience designing, implementing, and operating enterprise IAM solutions.
• Expert knowledge of authentication, authorization, Single Sign-On (SSO), federation, LDAP, identity lifecycle management, privileged access management, and Zero Trust security principles.
• Demonstrated experience designing IAM architectures across hybrid, multi-cloud, SaaS, Windows, Linux, and on-premises environments.
• Strong understanding of access governance, role-based access control, entitlement management, and least-privilege security models.
• Experience troubleshooting complex authentication, authorization, federation, token, and access-policy issues.
• Ability to communicate complex identity and security risks to technical and executive stakeholders in a clear and actionable manner.
• Experience supporting identity capabilities within customer-facing products, commercial technology platforms, or enterprise-scale business environments.
• Working knowledge of artificial intelligence and the ability to responsibly leverage AI-enabled tools to improve IAM automation, governance, threat detection, analytics, and security operations.
• Strong written communication, stakeholder management, documentation, and presentation skills.
• Demonstrated ability to work in an agile, customer-centric, and highly collaborative environment.

Preferred Skills & Experience

• Hands-on experience with Microsoft Entra ID, Active Directory, LDAP directories, Conditional Access, Privileged Identity Management (PIM), federation technologies, and enterprise SSO solutions.
• Experience with Identity Governance and Administration (IGA) platforms such as SailPoint, Saviynt, One Identity, or equivalent solutions.
• Experience with Privileged Access Management (PAM) technologies including CyberArk, PAM360, or similar credential vaulting and privileged governance platforms.
• Knowledge of infrastructure-as-code and automation technologies such as Terraform, AWS CloudFormation, Microsoft Graph, PowerShell, Azure Key Vault, and policy-as-code frameworks.
• Experience securing application identities, workload identities, managed identities, containers, CI/CD pipelines, serverless services, and other non-human identities.
• Familiarity with identity-focused threat detection and defense, including token theft, consent phishing, credential abuse, privilege escalation, and lateral movement techniques.
• Experience supporting regulated environments and compliance frameworks, including ISO 27001, SOC 2, NIST, CMMC, or similar standards.
• Industry certifications such as Microsoft Certified: Identity and Access Administrator Associate, CISSP, CCSP, CIMP, or related security and identity certifications.
• Experience supporting utilities, critical infrastructure, energy, IoT, or operational technology environments is highly desirable.
• Proven track record of driving innovative identity security solutions that improve customer outcomes, operational efficiency, and enterprise resilience., The successful candidate’s starting wage will be determined based on permissible, non-discriminatory factors such as skills and experience.

This position also includes a competitive benefit package including; financial, social, health and wellbeing programs, paid vacation, 401k matching, employee stock purchase program, hybrid work schedule, and more!

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills and experience and may vary by location. The base salary is $96,000-165,000 annually. This position is eligible for our annual bonus program.

Itron is innovating new ways for utilities and cities to manage energy and water. We create a more resourceful world to protect essential resources for today and tomorrow. Join us. Itron, Inc. (NASDAQ: ITRI) is a world-leading technology and services company dedicated to the resourceful use of energy and water. With more than 300 million deployed endpoints, Itron is one of the largest IoT companies in the world. Through innovative technology and services, we are helping create more insightful utilities, smarter cities, and a more resourceful world., Itron is transforming how the world manages energy, water and city services. Our trusted intelligent infrastructure solutions help utilities and cities improve efficiency, build resilience and deliver safe, reliable and affordable service. With edge intelligence, we connect people, data insights and devices so communities can better manage the essential resources they rely on to live. Join us as we create a more resourceful world: www.itron.com