> Markdown version of [/jobs/ext/777036-director-of-identity-access-management-iam](https://www.wearedevelopers.com/jobs/ext/777036-director-of-identity-access-management-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director of Identity & Access Management (IAM) - **Company:** UKG Inc. - **Location:** United States - **Experience:** Expert - **Salary:** $207,400.0 - $298,100.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), .NET Framework, Active Directory, Application Programming Interfaces (APIs), Microsoft Azure, Software as a Service, Cloud Computing Security, Cyber Security, Continuous Delivery, Identity and Access Management, Information Technology Operations, Python (Programming Language), Key Management, OAuth, OpenID, Ping (Networking Utility), Public Key Infrastructure, Role-Based Access Control, Reliability Engineering, Azure Active Directory, Site Reliability Engineering Practices, Zero Trust Network Access, Security Assertion Markup Language (SAML), Software Engineering, Systems Integration, Okta, Cyberark, System Availability, Customer Identity Access Management, Information Technology, Data Analytics, Api Design, SailPoint, Devsecops, Microservices - **Published:** June 10, 2026 - **Apply:** https://www.dice.com/job-detail/68d6fa3f-f376-427a-ab9a-56f3bcab93a3 ## About the Role Experience leading IAM organizations within highly regulated industries (financial services experience preferred). - Experience supporting regulatory audits, compliance programs, and governance initiatives. - Experience managing both IAM engineering and IAM operations functions. - Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field - 12+ years of experience in IAM, security, or platform engineering, with 5+ years in senior leadership roles - Strong software engineering background (Java, Python, .NET, or similar) with hands-on IAM solution development - Proven success building and scaling global engineering teams in a SaaS or product organization - Deep expertise in: IAM platforms (SailPoint, Saviynt, Okta, Ping, etc.), PAM solutions (CyberArk, BeyondTrust, etc.), Active Directory & Azure AD / Entra ID, SSO & federation protocols (SAML, OAuth, OIDC), PKI and machine identity management - Experience supporting high-scale, highly available SaaS environments Preferred Qualifications - Industry certifications (CISSP, CISM, etc.) -Experience with cloud platforms (Azure preferred) and microservices architecture - Familiarity with SRE practices, observability, and reliability engineering Key Competencies - Strong platform and product mindset (not just IT operations) - Ability to balance security, scalability, and customer experience - Executive-level communication and stakeholder alignment - Deep technical credibility with engineering teams - Data-driven, outcome-oriented leadership ## Description UKG is seeking a Senior Director of Identity & Access Management (IAM) to lead and evolve our identity security strategy across enterprise and customer-facing platforms. This role is critical in ensuring secure, seamless, and scalable identity experiences for employees, customers, and partners across UKG's SaaS ecosystem. You will oversee IAM, PAM, PKI, Active Directory (AD), and SSO/federation services, while driving a modern, cloud-first identity architecture aligned with Zero Trust principles. This leader will bring strong engineering depth, enabling identity as a platform, and a proven ability to build and scale high-performing global teams. Key Responsibilities: - Lead a global IAM Engineering & Operations organization. - Drive operational excellence, platform reliability, and service maturity. - Lead identity governance across both human and non-human (machine) identities. - Partner with audit, risk, and compliance organizations to support regulatory and governance initiatives. - Build and develop high-performing engineering leaders and teams. Strategy & Product-Aligned Leadership - Define and execute a cloud-first IAM strategy supporting UKG's SaaS products and internal enterprise systems - Partner with Product Engineering, Security, and Platform teams to embed identity into the software development lifecycle - Champion identity as a core platform capability, enabling secure and frictionless user experiences - Align IAM initiatives with customer trust, compliance, and uptime expectations in a SaaS environment Team Building & Engineering Culture - Build, scale, and lead global IAM engineering, platform, and operations teams - Foster a product and platform mindset within IAM (API-first, reusable services, developer enablement) - Drive a culture of automation, reliability engineering (SRE principles), and continuous delivery - Develop leadership bench strength and succession pipelines IAM Platform Engineering & Development - Lead development of scalable IAM services, APIs, and identity orchestration workflows - Oversee integrations with customer-facing applications, SaaS platforms, and internal systems - Enable CIAM (Customer Identity & Access Management) capabilities where applicable - Promote DevSecOps practices, infrastructure-as-code, and automation in identity provisioning and governance Access Governance & Compliance - Implement scalable identity lifecycle management and access governance across a distributed workforce - Mature RBAC/ABAC models and access certification processes - Ensure alignment with SOC 1, SOC 2, ISO 27001, GDPR, and other relevant compliance standards Privileged Access Management (PAM) - Lead PAM strategy to secure privileged access across cloud and production environments - Implement just-in-time (JIT) access, session monitoring, and credential vaulting - Reduce attack surface and enforce least privilege at scale PKI & Cryptographic Services - Oversee PKI and certificate lifecycle management supporting secure communications and services - Enable machine identity management and certificate-based authentication across cloud workloads - Support encryption and key management strategies aligned with SaaS security requirements Active Directory & Cloud Identity - Lead modernization of Active Directory (hybrid) and Azure AD / Entra ID environments - Drive transition toward cloud-native identity and directory services - Ensure high availability, resilience, and security of identity infrastructure Security & Risk Management - Embed IAM within UKG's Zero Trust architecture - Proactively identify and mitigate identity-based threats and vulnerabilities - Support audits, incident response, and continuous compliance efforts ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)