Lead the implementation, automation, and operational engineering of enterprise identity platforms, modernizing identity services across IGA, PAM, cloud identity, machine identities, and AI-agent identities while advancing Zero Trust and identity security capabilities.
Locations (7)
Hoboken, New Jersey, United States
New York City, New York, United States
Boston, Massachusetts, United States
Washington, District of Columbia, United States
California, California, United States
Sacramento, California, United States
Dallas, Texas, United States
Compensation
The base salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $173,900 to $290,100
Bay Area California offices – $181,200 to $302,100
All other offices locations in the US, including Sacramento – $144,900 to $265,800
Responsibilities
Implement and support IAM capabilities including IGA, PAM, SSO, MFA, directory services, federation, and identity lifecycle management
Design and integrate IAM and PAM platforms with cloud, SaaS, and enterprise applications
The IAM Assurance & Enablement Analyst III role is responsible for supporting enterprise-wide identity and access management (IAM) standards through proactive enablement, exception oversight, and operational alignment.
Compensation
Competitive pay and bonus eligibility
Responsibilities
Support efforts to monitor Joiner, Mover, Leaver (JML) processes and develop dashboards that provide visibility into IAM posture and risk indicators
Perform IAM control oversight, evidence collection, and continuous monitoring to support regulatory, audit, and governance requirements
Manage IT risk and control exception (ITRE/CRE) governance, including visibility, tracking, reporting, and timely escalation of risks
Provide first-line IAM risk and governance support by promoting proactive identification and management of control gaps
Establish and maintain clear ownership of IAM entitlements and related governance activities to strengthen long-term IAM maturity
Requirements
High School Diploma or equivalent
Bachelor’s Degree in related field or equivalent experience
Nice to have: Data analytics
Nice to have: Dashboard creation and data visualization tools
Design, develop, and support automation solutions for Identity and Access Management (IAM) operations, governance, compliance, and security of both human and non-human identities, integrating AI-enabled capabilities.
Responsibilities
Design and automate IAM processes including onboarding, offboarding, access requests, provisioning, deprovisioning, access reviews, and privileged access management
Architect, design, and develop IAM technical solutions that meet business needs; evaluate system capacity and performance issues; document technical solutions; support production applications and environments 24/7; collaborate with the broader IAM team; serve as a technical expert and mentor; work hands‑on with technologies such as LDAP, SSO, Active Directory, and cloud IAM platforms.
Compensation
The expected salary range for this position is $130-150k per year, depending on experience and qualifications.
Responsibilities
Architect, design, and develop IAM technical solutions that meet business needs
Evaluate system capacity and performance issues, diagnosing and repairing failures as they arise
Document technical solutions including specifications, models, diagrams, and other required documentation
Support production applications and environments 24/7, including on‑call problem resolution
Collaborate with the broader IAM team to ensure quality and timely delivery of solutions
Requirements
BS or BA in Computer Science, Engineering, or equivalent work experience; Master's degree preferred
Lead the team that protects how every employee, contractor, partner, application, and machine across Donaldson’s global business gains and uses access, owning the strategy, operations, and continuous improvement of identity platforms like SailPoint Identity Security Cloud and Microsoft Entra ID.
Compensation
Annual Salary Range: $148,880 - $186,100.
Responsibilities
Lead, coach, and grow a high-performing team of IAM engineers and analysts
Own the IAM strategy and multi-year roadmap aligned with Donaldson’s cybersecurity program, Zero Trust architecture, business priorities, and regulatory and customer requirements
Lead the operation and evolution of SailPoint Identity Security Cloud for identity governance and administration
Lead Microsoft Entra ID and the broader Microsoft identity stack
Strengthen privileged access management, least privilege, and just-in-time access for administrators, service accounts, cloud environments, and operational technology in manufacturing plants
Requirements
Bachelor’s degree in cybersecurity, computer science, information systems, or a related field
Nice to have: IAM leadership within global manufacturing
Nice to have: Privileged access management platforms (CyberArk, BeyondTrust, Delinea)
Nice to have: Securing identities for cloud and SaaS platforms (Azure, AWS, Microsoft 365)
Nice to have: Identity threat detection and response (Microsoft Defender for Identity)
The Sr. Manager, Network & Infrastructure Security is accountable for the security-by-design, operational resiliency, and lifecycle governance of Avangrid’s network security and enterprise infrastructure security platforms.
Locations (2)
Orange, Connecticut, United States
Boston, Massachusetts, United States
Compensation
$155,600 - $203,300: depending on experience and location
Responsibilities
Leads and integrates Network Security and Infrastructure Security capabilities
Defines technology strategy, target-state architecture, and multi-year roadmaps
Establishes lifecycle management programs
Provides leadership over current and future enterprise security technologies and services
Defines and governs engineering standards, reference architectures, and technology guardrails
Requirements
Bachelor’s degree in computer science, cybersecurity, information systems, engineering, or a related field
The Networking Technical Services Specialist designs, implements and supports enterprise networking and security solutions for clients, combining hands-on technical delivery with customer engagement, complex troubleshooting and leadership across infrastructure transformation projects.
Responsibilities
Design, deploy and support LAN, WAN, wireless, SD-WAN, data centre, cloud connectivity and security solutions.
Lead customer implementations, migrations, upgrades and optimisation projects, minimising business disruption.
Configure and troubleshoot Cisco, Palo Alto, Fortinet, Aruba and F5 technologies; support privileged access management (PAM) solutions where required.
Conduct infrastructure assessments, health checks and gap analyses, and recommend practical improvements.
Investigate critical incidents, perform root cause analysis and coordinate vendor escalations.
Requirements
Bachelor’s degree in Computer Science, Information Technology, Telecommunications, Electronics Engineering or a related field
The Senior IDAM Services Engineer will be responsible to support AIDA / ReAI and enterprise workloads that require secure machine-to-machine identity, secrets, certificates and automated access controls. The role will engineer secure integration patterns across applications, CI/CD pipelines, vaults, certificate lifecycle services and identity governance platforms.
Responsibilities
Engineer and operate enterprise secrets-management patterns for AIDA / ReAI applications, AI agents, workloads, service identities and automation accounts.
Integrate applications and CI/CD pipelines with approved vault and secrets-management services so credentials are retrieved at runtime and are not hard-coded in source code, scripts or configuration files.
Implement automated secret rotation, credential expiry, revocation and recovery patterns, including application validation after rotation.
Design vault integration patterns using APIs, workload identity, just-in-time retrieval and least-privilege access, with clear separation between human and non-human identities.
Engineer certificate lifecycle automation covering request, issuance, deployment, renewal, replacement, revocation and expiry monitoring for supported application and workload certificates.
The base salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $185,800 to $385,700 Bay Area California offices – $193,500 to $401,600 All other offices locations in the US, including Sacramento – $154,700 to $353,500
Responsibilities
Define and execute enterprise IAM strategy, target-state architecture, roadmaps, standards, and transformation programs.
Architect and lead implementations spanning Identity Governance & Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Customer IAM (CIAM), and directory services.
Design governance and access controls for non-human identities, including service accounts, APIs, workloads, bots, autonomous AI agents, and agent-to-agent interactions.
Establish identity patterns for AI agents covering registration, authentication, authorization, least privilege, delegated authority, credential and secret management, monitoring, revocation, and lifecycle governance.
Embed Identity Threat Detection and Response (ITDR), Cloud Infrastructure Entitlement Management (CIEM), passwordless authentication, adaptive access, and identity analytics into the architecture.
Requirements
Nice to have: IAM platforms: SailPoint, Saviynt, Microsoft Entra ID, Okta, Ping Identity, ForgeRock, CyberArk, Delinea, and BeyondTrust
Nice to have: Cloud and standards: Microsoft Azure, AWS, Google Cloud, SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, PKI, and policy-based authorization
Nice to have: Innovative identity capabilities: AI security, agentic AI governance, AI-agent identity management, non-human identity management, machine identity, secrets management, ITDR, CIEM, identity analytics, and access intelligence
Nice to have: Engineering and automation: REST APIs, Infrastructure as Code, Terraform, CI/CD integration, and policy-as-code