Sr Manager, Identity & Access Management (IAM)

Sr Manager, Identity & Access Management (IAM)

The Senior Manager of Identity & Access Management (IAM) is responsible for leading IAM engineering, operations, and modernization initiatives supporting Mattel's enterprise identity security program. This leadership role helps drive the evolution of identity services and security capabilities across workforce identity, privileged access, cloud authentication, identity governance, and identity threat protection.

The role provides technical leadership, operational oversight, and team management for IAM architects, engineers, analysts, and cross-functional technology teams to ensure identity platforms and services are secure, scalable, resilient, compliant, and aligned with enterprise business objectives. The role supports a globally distributed IAM organization responsible for workforce identity, privileged access, and cloud identity services across hybrid environments.

This position partners closely with Cybersecurity, Infrastructure, Enterprise Architecture, Cloud Engineering, HR Technology, Application Development, Compliance, and business stakeholders to support secure digital transformation initiatives across a global enterprise environment.

Join a globally recognized brand undergoing significant digital and cybersecurity transformation, where identity security plays an important role in supporting secure workforce access, operational resilience, and enterprise modernization initiatives.

IAM Program Delivery & Operational Leadership

• Support development and execution of IAM roadmaps, operational maturity initiatives, and modernization efforts aligned with cybersecurity strategy, business priorities, and regulatory requirements.
• Lead implementation of IAM modernization initiatives involving single sign-on (SSO), multifactor authentication (MFA), passwordless authentication, identity governance, adaptive authentication, privileged access management (PAM), and Zero Trust security principles.
• Support IAM governance processes, operational standards, KPIs, SLAs, and metrics to measure service effectiveness, operational health, and risk reduction.
• Develop operational dashboards, reporting, metrics, and documentation to support program visibility, operational maturity, and decision-making.
• Drive continuous improvement initiatives focused on automation, operational scalability, resiliency, and user experience optimization.
• Support vendor management, licensing activities, and evaluation of emerging IAM and identity security technologies.

IAM Architecture, Engineering & Operations

• Lead IAM architecture, engineering, and operations functions supporting workforce identity, privileged access, cloud identity, and hybrid identity environments.
• Oversee identity lifecycle automation initiatives, including Joiner-Mover-Leaver (JML) processes integrating Workday, Okta, Active Directory, Entra ID, and downstream enterprise applications.
• Ensure operational excellence across IAM platforms and services, including monitoring, resiliency, disaster recovery readiness, incident management, escalation handling, and business continuity planning.
• Oversee implementation and integration of identity technologies leveraging platforms such as Okta Identity Cloud, CyberArk, Okta Privileged Access, Microsoft Entra ID, and related IAM solutions.
• Partner with Cloud Engineering, DevOps, and Application teams to embed secure authentication, authorization, and identity governance capabilities into enterprise and cloud-native architectures.
• Promote engineering excellence through automation, scripting, infrastructure-as-code, workflow orchestration, and API-driven integrations.

Identity Security & Threat Protection

• Lead privileged access management (PAM) operational governance initiatives supporting least privilege access, Just-in-Time (JIT) access, and Zero Trust security models.
• Drive adoption of modern identity security practices, including passwordless authentication, adaptive access controls, continuous verification, and risk-based authentication.
• Support identity-related incident response, threat detection, and remediation activities leveraging identity threat detection and response (ITDR) platforms, analytics, and security monitoring capabilities.
• Collaborate with Security Operations, Infrastructure, and Engineering teams to improve identity visibility, telemetry, analytics, and threat detection capabilities across the enterprise.
• Evaluate and support adoption of emerging identity security capabilities including machine identity governance, cloud entitlement management, and intelligent identity analytics.

Governance, Risk & Compliance

• Support enterprise-wide User Access Reviews (UAR), compliance reporting, audit readiness, evidence collection, and remediation activities supporting SOX, NIST CSF, GDPR, and related regulatory frameworks.
• Translate security requirements and operational risks into scalable IAM controls, governance processes, and operational procedures.
• Ensure IAM controls, processes, and documentation remain compliant, auditable, and aligned with enterprise security standards and policies.
• Partner with Internal Audit, Risk Management, Legal, and Compliance stakeholders to support governance initiatives and remediation efforts.

Leadership & Organizational Development

• Lead, mentor, and develop IAM Architects, Engineers, Operations Tech Leads, PAM Engineers, and Identity Security Analysts across global environments.
• Support team development, staffing planning, and technical capability growth to align with evolving identity security needs.
• Foster a culture of accountability, collaboration, innovation, operational discipline, and continuous improvement across IAM teams.
• Partner with cross-functional stakeholders to support alignment on identity security priorities, architecture decisions, and operational initiatives.
• Act as a senior escalation point for critical IAM operational issues, security incidents, and strategic initiatives.

Qualifications

What We're Looking For:

• 10+ years of experience in Identity & Access Management, cybersecurity, or enterprise security engineering within large, complex enterprise environments.
• 5+ years of leadership experience managing IAM architecture, engineering, operations, PAM, or cybersecurity teams in global organizations.
• Deep expertise in enterprise IAM platforms and technologies, including identity federation, SSO, MFA, lifecycle management, privileged access management, and hybrid identity architectures.
• Strong experience with Okta Identity Cloud capabilities including SSO, MFA, Workflows, Identity Governance, and enterprise identity integrations.
• Strong experience designing and supporting enterprise identity lifecycle management solutions integrating HR systems, cloud identity providers, Active Directory/Entra ID, and downstream enterprise applications.
• Strong understanding of authentication, federation, authorization, and identity protocols including SAML, OAuth, OIDC, SCIM, FIDO2, and passwordless authentication.
• Strong expertise with Privileged Access Management (PAM) platforms such as CyberArk, Okta Privileged Access or equivalent technologies.
• Hands-on knowledge of Active Directory, LDAP, Microsoft Entra ID (Azure AD), AWS, Azure, GCP, and hybrid cloud identity architectures.
• Strong understanding of Zero Trust architecture, adaptive authentication, identity governance, Just-in-Time access, and least privilege principles.
• Experience supporting identity threat detection, incident response, and remediation initiatives leveraging ITDR, SIEM, analytics, and monitoring platforms.
• Strong experience with automation, scripting, and engineering practices using PowerShell, Python, REST APIs, Terraform, CI/CD pipelines, and cloud automation technologies.
• Experience supporting IAM governance programs, operational dashboards, audit readiness frameworks, and compliance reporting processes.
• Strong communication, stakeholder management, organizational leadership, and decision-making skills.
• Demonstrated ability to build trusted cross-functional relationships, lead technical teams, manage competing priorities, and drive operational improvements within fast-paced enterprise environments.

Preferred Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or related discipline, or equivalent practical experience.
• Industry certifications such as CISSP, CISM, CCSP, Okta Certified Consultant, or equivalent.
• Experience supporting global IAM programs within large enterprise or regulated environments.
• Experience with identity threat detection and response (ITDR) platforms such as CrowdStrike Identity Threat Protection, Semperis DSP, or similar technologies.
• Knowledge of endpoint privilege management and server privilege management across Windows, macOS, Linux, and cloud-native platforms.
• Experience supporting large-scale identity security modernization initiatives.
• Experience developing operational dashboards, reporting metrics, and cybersecurity maturity measurements.
• Familiarity with emerging identity security capabilities including machine identity governance, cloud entitlement management (CIEM), and intelligent identity analytics

*The pay range is indicative of projected hiring range, however base pay will be determined based on a candidate's work location, skills and experience. Mattel offers competitive total pay programs, comprehensive benefits, and resources to help empower a culture where every employee can reach their full potential.

Additional Information

Don't meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you're excited about this role but your past experience doesn't align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles. Join Mattel's Talent Community and start receiving exciting updates about our company, our employees, and our