Identity Governance & Administration (IGA) Leader

Job Family:IT Cyber SecurityTravel Required:Up to 10%Clearance Required:NoneWhat You Wil Do:We are seeking an experienced Identity & Access Management (IAM) Leader to build and lead our enterprise IAM function. Reporting to the Chief Information Security Officer (CISO), this role is responsible for IAM strategy, architecture, delivery, and operations across workforce, customer, and non-human identities. This leader will define the IAM vision and roadmap, oversee key identity transformation initiatives, manage vendors and delivery partners, and lead a globally distributed team in a complex, matrixed environment. Strategy, Vision & Organizational Leadership Define and lead the enterprise IAM strategy, operating model, and roadmap aligned to business, risk, and regulatory priorities. Build and scale the IAM organization to include team structure and hiring plans. Partner across Cybersecurity, IT, HR, Legal, Privacy, Risk, Internal Audit, and business teams to deliver consistent identity outcomes. Oversee major IAM transformation initiatives, including program execution and budget accountability. Establish metrics and reporting to demonstrate program maturity, business value, and risk reduction. Identity Governance & Administration (IGA) Lead the design and maturity of Identity Governance and Administration capabilities, including lifecycle management, access requests, certifications, role management, and separation of duties. Drive the strategy, implementation, and maturation of enterprise IGA capabilities using platforms such as SailPoint, Microsoft Entra ID Governance, or similar solutions. Advance least-privilege and Zero Trust principles across enterprise applications, platforms, and cloud environments. Oversee identity lifecycle management for workforce, contractors, partners, and non-human identities. Privileged Access Management (PAM) Lead the strategy and maturity of the firm’s Privileged Access Management program, including vaulting, credential management, session controls, and privileged access governance. Provide strategic leadership for PAM capabilities and related tooling, including platforms such as Delinea, CyberArk, or similar solutions. Establish standards for privileged access, secrets management, and just-in-time elevation across human and machine identities. Reduce standing privilege across hybrid environments and track progress through measurable controls. Authentication, SSO & Federation Lead enterprise authentication and access capabilities, including SSO, MFA, conditional access, federation, and modern authentication methods. Support modern identity and access patterns through technologies such as Microsoft Entra ID and related federation and access governance capabilities. Support secure identity patterns for employees, clients, partners, and external platforms as needed. Cloud & Workload Identity Drive identity standards for cloud and workload access across Guidehouse’s hybrid and multi-cloud environments. Partner with infrastructure, cloud, and engineering teams to embed identity and access controls into platforms and delivery processes. Establish guardrails and monitoring for entitlements and permissions across enterprise technology environments. Risk, Compliance & Audit Align IAM capabilities to security, compliance, and audit requirements across applicable regulatory and control frameworks.Partner with compliance and audit stakeholders to support control evidence, remediation, and sustainable governance processes. Support identity requirements for both internal operations and client-serving environments as needed. People Leadership Lead, coach, and develop a team spanning IAM architecture, engineering, operations, and governance. Build a culture of accountability, service excellence, and continuous improvement.Represent the IAM function with senior leadership and key stakeholders across the enterprise. What You Will Need:Bachelor’s degree and minimum 12 years of progressive experience in cybersecurity with at least 8+ years focused on Identity & Access Management, and 7+ years in a people-leadership capacity or 16 years of equivalent professional experience in lieu of degree.Proven experience building or maturing an enterprise IAM function in a complex, global organization.Demonstrated success leading in a matrixed environment and partnering across technology, security, and business teams. Strong experience with modern IAM technologies and concepts, including IGA, PAM, SSO, MFA, federation, and lifecycle management, with hands-on experience leading or supporting platforms such as SailPoint, Microsoft Entra ID Governance, Delinea, CyberArk, and similar tools. Experience leading complex, multi-year IAM transformation programs with cross-functional teams and external partners. Familiarity with security and compliance frameworks relevant to IAM programs. Experience supporting identity requirements in regulated environments, including public sector or highly governed industries. Strong executive communication and stakeholder management skills. U.S. Citizenship required. Must reside in the United States. What Would Be Nice to Have:Degree in Computer Science, Information Systems, Cybersecurity, or a related field.Experience in a professional services or other complex enterprise environment. Relevant industry certifications such as CISSP, CISM, or IAM-related certifications. The annual salary range for this position is $171,000.00-$285,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.What We Offer:Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.Benefits include:Medical, Rx, Dental & Vision InsurancePersonal and Family Sick Time & Company Paid HolidaysPosition may be eligible for a discretionary variable incentive bonusParental Leave and Adoption Assistance401(k) Retirement PlanBasic Life & Supplemental LifeHealth Savings Account, Dental/Vision & Dependent Care Flexible Spending AccountsShort-Term & Long-Term DisabilityStudent Loan PayDownTuition Reimbursement, Personal Development & Learning OpportunitiesSkills Development & CertificationsEmployee Referral ProgramCorporate Sponsored Events & Community OutreachEmergency Back-Up Childcare ProgramMobility StipendAbout GuidehouseGuidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at View phone number on click.appcast.io or via email at View email address on click.appcast.io. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or View email address on click.appcast.io. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact View email address on click.appcast.io. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.SummaryLocation: US - VA, McLean; US - Remote (Any location); US - GA, AtlantaType: Full time