IAM/UAM Lead

Overview

Allied Consultants, Inc is a proudly Austin based firm with over 34 years of experience delivering top-tier technical and business professionals within Texas State Agencies. We are currently seeking an experience Job Title to play a key role within a high-impact technical services team.

At Allied Consultants, we value our consultants and are committed to providing an exceptional experience including:

• Highly competitive pay rates
• Local support staff for responsive, personal service
• Comprehensive benefits package, including:
  • Medical insurance (with employer cost sharing)
  • Life insurance
  • A 401(K) plan with company match
  • Flexible spending through a cafeteria plan

Candidates selected for interviews will be subject to a criminal background check and may be required to pass a drug screening, in compliance with federal and state regulations. All offers of employment are contingent upon successful completion of these checks.

Allied Consultants is a proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Responsibilities

Position Overview

We are seeking an experienced Identity and User Access Management (IAM/UAM) Lead to provide operational, technical, and service-delivery leadership for enterprise identity services. This role is accountable for ensuring access to systems, applications, infrastructure, and data is granted, changed, reviewed, and removed securely, consistently, and in accordance with established policies and control requirements. The IAM/UAM Lead will oversee identity lifecycle operations, access governance, application onboarding, authentication services, service performance, audit readiness, and continuous improvement while leading staff and coordinating across security, infrastructure, application, business, audit, and vendor teams.

Key Responsibilities

Identity Service Leadership and Governance

• Lead IAM/UAM operations, projects, service improvements, and modernization initiatives across the enterprise.
• Help define the IAM/UAM operating model, service ownership, roles and responsibilities, escalation paths, standards, procedures, and control requirements.
• Translate security, business, audit, and compliance requirements into practical identity and access-management processes.
• Identify service risks, control gaps, resource constraints, and operational dependencies; develop remediation plans and communicate recommended actions to leadership.

Identity Lifecycle and Access Administration

• Oversee end-to-end identity lifecycle processes for onboarding, transfers, job or role changes, temporary access, access recertification, separation, and offboarding.
• Ensure access requests are based on approved business need, least privilege, role-based access, separation-of-duties requirements, and established authorization paths.
• Establish standards for access provisioning, deprovisioning, exception handling, emergency access, privileged access, and periodic access reviews.
• Coordinate with HR, application owners, managers, security teams, and service teams to improve the accuracy and timeliness of identity changes.

IAM Platforms and Application Integration

• Provide service and operational oversight for capabilities such as Active Directory, Microsoft Entra ID, SSO, MFA, conditional access, passwordless authentication, identity governance, directory services, role-based access control, and privileged access.
• Coordinate application onboarding into enterprise identity platforms, including authentication design, user population, role mapping, approval requirements, provisioning and deprovisioning procedures, testing, and support transition.
• Partner with platform and engineering teams to prioritize enhancements, resolve complex identity issues, reduce manual work, and strengthen integrations among IAM technologies and business applications.
• Support technologies such as SailPoint, Ping Identity, Microsoft Entra ID, Active Directory, ServiceNow, or comparable enterprise platforms.

Operations and Service Management

• Manage access-request queues, incidents, service requests, escalations, backlogs, aging work, priority conflicts, and customer communications.
• Define and monitor service levels, operating-level expectations, workload volumes, fulfillment times, quality measures, backlog trends, and repeat issues.
• Use incident, problem, change, and request-management practices to improve service reliability and reduce recurring access failures.
• Develop and maintain operational procedures, runbooks, knowledge articles, escalation guidance, support documentation, and service continuity expectations.

Security, Compliance, and Audit Readiness

• Ensure access decisions, approvals, provisioning activities, exceptions, and removals are authorized, traceable, documented, and audit ready.
• Support internal and external audits, security assessments, access reviews, control testing, evidence collection, and remediation of findings.
• Track identity-related risks, exceptions, overdue access reviews, orphaned or stale accounts, excessive privileges, and remediation commitments.
• Collaborate with cybersecurity, risk, compliance, and audit teams to maintain appropriate controls and demonstrate control effectiveness.

Team Leadership, Stakeholder Management, and Continuous Improvement

• Lead, coach, and mentor IAM/UAM staff; establish priorities, clarify responsibilities, balance workloads, and support staff development.
• Coordinate across cybersecurity, infrastructure, application teams, service desk, HR, business stakeholders, auditors, and vendors to resolve issues and deliver identity services.
• Develop dashboards and executive reporting for service performance, access-review completion, backlog health, aging requests, incidents, quality, risks, and improvement work.
• Identify opportunities for workflow automation, self-service, role engineering, standardization, data-quality improvement, and reduction of manual provisioning.
• Communicate project status, service performance, risks, resource needs, control issues, and recommended actions to technical and executive leadership.

Required Knowledge and Skills

• Strong knowledge of identity lifecycle management, authentication, authorization, SSO, MFA, identity governance, directory services, privileged access, least privilege, role-based access control, and access-review practices.
• Ability to evaluate complex access issues, distinguish operational problems from control risks, and coordinate the appropriate technical and business response.
• Strong service-management skills, including prioritization, escalation management, metrics, root-cause analysis, continuous improvement, and customer communication.
• Ability to write and maintain clear procedures, control documentation, operational standards, executive updates, and audit evidence.
• Strong leadership, analytical, communication, customer-service, collaboration, and problem-solving skills.

Qualifications

Minimum (Required):

Years

Skills/Experience

8

Progressively responsible experience in information technology, cybersecurity, enterprise infrastructure, technology service delivery, or security programs.

5

Direct experience in IAM, UAM, identity governance, cybersecurity access administration, or enterprise access-management operations.

3

Experience leading technical or operational teams, serving as a technical lead, supervising staff, or directing cross-functional IAM workstreams.

3

Hands-on or service-owner experience with enterprise identity technologies such as Active Directory, Microsoft Entra ID, SSO, MFA, directory services, role-based access control, or privileged access.

2

Experience with identity governance and administration processes such as provisioning, deprovisioning, access certification, role management, entitlement management, or application onboarding.

2

Experience supporting audit, compliance, security-control testing, access reviews, risk remediation, or evidence collection for identity and access controls.

Preferred (Optional):

Years

Skills/Experience

Bachelor’s degree in information technology, cybersecurity, computer science, information systems, or a related field. Equivalent relevant experience may be considered where permitted.

2

Experience in a public-sector, regulated, transportation, financial, healthcare, utilities, or critical-infrastructure environment.

2

Experience with SailPoint, Ping Identity, Microsoft Entra ID, ServiceNow, or comparable identity-governance, federation, directory, or workflow platforms.

Experience with identity automation, workflow orchestration, APIs, scripting, reporting, or data-quality improvement.

Professional certification in IAM, cybersecurity, audit, project management, or IT service management. Examples may include CISSP, CISM, Security+, Microsoft identity certifications, SailPoint certifications, ITIL, PMP, or comparable credentials.