Lead IAM Engineer

Covetrus

. Own the strategy, operations, and roadmap for enterprise IAM .

Posted 10/16/2026full-timeRemote • Pennsylvania • United StatesSenior💰 $107,500 - $153,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in enterprise Identity and Access Management (IAM) strategy, operations, and automation, with a strong focus on integrating IAM solutions across various platforms and ensuring compliance with industry standards. Proven ability to lead IAM initiatives, manage vendor relationships, and mentor technical teams while driving data-driven decision-making.

Highest-signal resume keywords

IAM Strategy DevelopmentAutomation of Identity WorkflowsPAM Program ManagementCompliance with SOX and ISO 27001Vendor Relationship Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IAM IntegrationAccess ProvisioningWorkflow AutomationSCIM and REST/API ConnectorsScripting with PowerShell and PythonZero Trust ArchitectureAccess Certification AutomationData-Driven Business Case DevelopmentRole EngineeringKPI Definition and Tracking

Soft Skills

MentoringCollaborationLeadershipCommunicationProblem-Solving

Tools & Technologies

CyberArkBeyondTrustDelineaWorkdaySAP SuccessFactorsIdentity Governance Administration (IGA)Single Sign-On (SSO)Multi-Factor Authentication (MFA)Directory ServicesTicketing Systems

Certifications & Qualifications

CISSPCIAMSC-300Okta Certified Professional

Industry Keywords

NISTCISISO 27001SOXSOC 2HIPAAAccess HygienePrivilege SprawlCredential Theft PreventionIdentity-Centric Network Access

Tech Stack

Tools & technologies

CloudCyber SecurityPythonVault

About the role

Key responsibilities & impact

Own the strategy, operations, and roadmap for enterprise IAM
Serve as the North American IAM Center of Excellence lead and partner with global COE counterparts
Lead IAM integration for mergers, acquisitions, and divestitures
Lead design, implementation, and operations of SSO, MFA, PAM, IGA, and directory services
Lead product evaluations, tool consolidations, and IAM initiatives supported by data-driven financial business cases
Enforce IAM policies and standards and create procedures aligned to NIST, CIS, ISO 27001, SOX, and other frameworks
Own joiner/mover/leaver execution, access provisioning, role engineering, and automated de-provisioning
Drive automation and self-service capabilities for access requests, approvals, provisioning, and entitlement reviews
Partner with End User Services and the Service Desk to automate ticket-based access requests
Mature PAM adoption, including vault adoption, session monitoring, and just-in-time access
Partner with Cyber and Network Operations on Zero Trust, SSO group management, identity-centric network access controls, and conditional access policies
Build and maintain integrations among IAM platforms, HR systems, ticketing systems, and downstream applications
Define KPIs and metrics for access hygiene, orphaned accounts, privilege sprawl, and SLA performance; report program health quarterly
Manage IAM vendor relationships, licensing, and contract renewals with Cyber and Procurement
Mentor IAM engineers and analysts
Support SOX, SOC 2, and ISO 27001 audits with evidence, control narratives, and remediation tracking
Drive IAM roadmap planning over a 12–18 month horizon

Requirements

What you’ll need

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent professional experience will be considered in lieu of a degree
8+ years of progressive experience in information security or information technology, including 4+ years focused specifically on IAM
3+ years serving as a senior or lead technical contributor on an IAM function or program within a mid-to-large enterprise environment (5,000+ employees)
Hands-on engineering experience designing, building, and operating enterprise IAM automation, including workflow engines, API/SCIM-based provisioning pipelines, and self-service access solutions
Experience integrating JML automation with an HRIS platform such as Workday or SAP SuccessFactors
Experience automating access certification/recertification campaigns at enterprise scale
Experience supporting SOX, SOC 2, ISO 27001, HIPAA, or equivalent audits
Experience managing PAM programs and vault platforms such as CyberArk, BeyondTrust, or Delinea in production
Demonstrated success building data-driven business cases for measurable cost savings and licensing efficiencies
Strong engineering mindset and ability to design, script, and deploy automated identity workflows using SCIM, LDAP, and REST/API connectors
Ability to build automated provisioning, de-provisioning, and entitlement review pipelines across SaaS, cloud, and on-premises systems
Scripting/automation experience with PowerShell, Python, or workflow orchestration platforms
Deep knowledge of SAML 2.0, OAuth 2.0, OIDC, Kerberos, and LDAP/LDAPS
Strong understanding of Zero Trust architecture, conditional access, and least-privilege enforcement
Ability to harden IAM/PAM environments against credential theft, privilege escalation, and lateral movement
Ability to define and track security KPIs
Ability to design scalable and resilient automated processes
Ability to build dashboards and metrics for program health and operational throughput
Ability to build and present financial business cases for tooling consolidation and license optimization
Strong vendor and contract management acumen
Relevant industry certifications preferred, including CISSP, CIAM, SC-300, or Okta Certified Professional
Travel as required to remote locations
On-call and on-demand extended work hours may include nights and weekends

Benefits

Comp & perks

401k savings & company match
Paid time off
Paid holidays
Maternity leave
Parental leave
Military leave
Other leaves of absence
Health, dental, and vision benefits
Health savings accounts
Flexible spending accounts
Life & disability benefits
Identity theft protection
Pet insurance
Certain positions may include eligibility for a short-term incentive plan