Identity and Access Management (IAM) Architect

IT accelerates the success of IDEXX employees and customers by providing scalable and innovative solutions and leadership. We are a global organization that supports all technology needed to deliver products and solutions to customers enabling them to focus on delivering high quality patient care.  We strive to provide exceptional customer service and experience in the most efficient means possible, requiring alignment and cross-functional communication. The Identity and Access Management (IAM) Architect will be responsible for designing, implementing, and overseeing the organization's IAM strategy. This role focuses on ensuring secure, efficient, and compliant access to various systems and applications. Leveraging Microsoft Active Directory (on-premises and Azure), the IAM Architect will develop and enforce policies related to Application Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC). The architect will also ensure adherence to audit requirements and collaborate with cross-functional teams to align IAM initiatives with business objectives. As the IAM Architect, you will play a critical role in shaping the security posture of our organization. This position offers the opportunity to work with cutting-edge technologies and to lead initiatives that have a significant impact on our business operations and security. If you are passionate about IAM and looking for a challenging role where you can make a difference, we encourage you to apply. In this role, you will be responsible for: Direct leadership: leading 3 systems administrators and the day-to-day management of network access tasks. This newly formed role will have the opportunity to assess IDEXX’s existing domain structure and user policies and lead the effort to enhance, as well as design, and implement Role-Based Access Control (RBAC) policies with a focus on Zero Trust.  Strategic Planning and Design: Develop and implement an enterprise-wide IAM strategy that aligns with business goals and security requirements.  Design and architect IAM solutions, including SSO, MFA, and identity federation. Policy Development and Enforcement:  Create and enforce IAM policies, procedures, and standards, particularly focusing on RBAC frameworks.  Ensure compliance with regulatory requirements and internal security policies. Technology Implementation:  Lead the deployment and integration of IAM technologies, leveraging Microsoft Active Directory (on-premises and Azure).  Evaluate and select appropriate IAM tools and solutions to enhance security and user experience. Collaboration and Leadership:  Work closely with IT, security, and business teams to understand access requirements and implement appropriate controls.  Provide expert guidance and mentorship to IAM team members and other IT staff. Automation and Optimization:  Develop automation scripts and workflows (e.g., using PowerShell) to streamline provisioning and de-provisioning processes.  Optimize existing IAM processes for efficiency and effectiveness. Incident Management and Support:  Act as the highest escalation point for complex access issues not resolved by the IT Help Desk.  Oversee the resolution of IAM-related incidents and problems. Audit and Compliance:  Ensure that IAM practices meet audit requirements and assist in audit activities.  Continuously monitor and improve IAM controls to mitigate risks. What You Will Need to Succeed: Technical Expertise:  Extensive experience in IAM architecture and strategy development.  Deep understanding of IAM principles and technologies, including MFA, OAuth, SSO, SAML, and OpenID Connect.  Proficient with Microsoft Active Directory (on-premises and Azure) and Azure AD Connect. Scripting and Automation:  Advanced proficiency in scripting tools, such as Microsoft PowerShell, for automation and management tasks.  Experience with automation tools and frameworks relevant to IAM. Platform Knowledge:  Desired experience with ServiceNow ITSM platform and its integration with IAM processes. Soft Skills:  Excellent leadership and communication skills, with the ability to articulate complex IAM concepts to non-technical stakeholders.  Strong analytical and problem-solving abilities.  Proven track record of working collaboratively across departments. Compliance and Security:  Familiarity with compliance standards such as ISO 27001, NIST, GDPR, and SOX.  Experience in conducting IAM audits and implementing controls to meet regulatory requirements. Why IDEXX? We’re proud of the work we do, because our work matters. An innovation leader in every industry we serve, we follow our Purpose and Guiding Principles to help pet owners worldwide keep their companion animals healthy and happy, to ensure safe drinking water for billions, and to help farmers protect livestock and poultry from diseases. We have customers in over 175 countries and a global workforce of over 10,000 talented people.   So, what does that mean for you? We enrich the livelihoods of our employees with a positive and respectful work culture that embraces challenges and encourages learning and discovery.   At IDEXX, you will be supported by competitive compensation, incentives, and benefits while enjoying purposeful work that drives improvement.    Let’s pursue what matters together. IDEXX values a diverse workforce and workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply.  IDEXX is an equal opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited by local, state, or federal laws.  SummaryLocation: Virtual Maine; Virtual New Jersey; Virtual New Hampshire; Virtual Nebraska; Virtual North Dakota; Virtual North Carolina; Virtual Mississippi; Virtual Missouri; Virtual Michigan; Virtual Massachusetts; Virtual Louisiana; Virtual Kentucky; Virtual Kansas; US-WV-Virtual; Virtual Indiana; US-VA-Virtual; Virtual Iowa; US-TX-Virtual; Virtual Georgia; US-TN-Virtual; US-SD-Virtual; US-SC-Virtual; Virtual Florida; Virtual Delaware; Virtual Arkansas; Virtual Alabama; US-WI-Virtual; US-PA-Virtual; US-OK-Virtual; US-OH-Virtual; US-NJ-Virtual; US-NH-Virtual; US-NE-Virtual; US-ND-Virtual; US-NC-Virtual; US-MS-Virtual; Virtual West Virginia; US-MO-Virtual; Virtual, Wisconsin; US-MI-Virtual; US-MA-Virtual; US-LA-Virtual; Virtual Virginia; US-KY-Virtual; US-KS-Virtual; US-IN-Virtual; Virtual Texas; US-IA-Virtual; Virtual Tennessee; US-GA-Virtual; US-FL-Virtual; Virtual South Dakota; Virtual South Carolina; US-AR-Virtual; Virtual Pennsylvania; US-AL-Virtual; Virtual Oklahoma; Virtual OhioType: Full time