Remote Position
Identity and Access Management Technical Lead
🌍 Remote · United States
💼 Full-time
Job Title: Identity and Access Management Technical Lead
Department: Technology and Transformation
Reports to: IT Manager
Who We Are:
For over 30 years, CAF America has been a leader in enabling cross-border giving to validated charities and charitable projects across the world totaling more than $1 billion. We enable our donors to make strategic, cost-effective, and tax-advantaged gifts through our vetted network of more than 1.9 million charitable organizations in 135 countries, all while reducing the risk, reputation exposure, and administrative burden associated with cross-border giving.
At CAF America, we pride ourselves on creating a positive working environment and culture that values all team members’ experience and voices and represents the society we serve. We want to attract, retain, and develop the best of talent at all levels, and provide a leading and great place to work, where every voice matters.
Summary:
The Identity and Access Management (IAM) Technical Lead is a key member of the Technology Operations team, responsible for managing and leading identity and access governance across enterprise systems and SaaS platforms within CAF America operates within the technical design authority of the IT Manager. This role ensures secure provisioning, authentication, and compliance while collaborating with Cyber Security, Enterprise Systems, and Data Solutions team members in day-to-day operations. The IAM Lead will also drive governance and process improvements for identity lifecycle management, including periodic audits and reporting. This position also has a significant role in collaborating with our CAF counterpart in the UK.
Primary Duties and Responsibilities
Partner with Vendors, Managed Service Providers, and internal IT Teams to successfully conduct the following:
- Identity Lifecycle Leadership
- Define identity governance policies, access control standards, and compliance requirements to ensure security, regulatory compliance, and risk reduction across all enterprise systems.
- Define and govern authentication strategy, including SSO, MFA, and identity federation configurations, ensuring security and compliance. Provide standards and oversight for identity provider configurations.
- Define policies and standards for provisioning and deprovisioning user and group accounts across M365, Azure Entra ID, CRM, and integrated SaaS platforms, and monitor adherence to these standards
- Maintain RBAC structures and enforce least privilege principles.
- Access Governance
- Define and implement access control policies and standards.
- Own and Conduct periodic access audits and ensure compliance with SOC2, PCI, GDPR. Partner and collaborate with Cybersecurity and other internal teams (Risk & Compliance, and Privacy) to conduct these audits.
- Authentication Infrastructure
- Manage SSO, MFA, and identity federation configurations.
- Optimize authentication flows for security and usability.
- Compliance & Risk Alignment
- Partner with Cyber Security and Risk teams to meet regulatory requirements.
- Prepare audit reports and support compliance reviews.
- Integration & Automation
- Integrate identity solutions with enterprise applications and SaaS platforms.
- Enable and consult on automation initiatives for onboarding/offboarding workflows.
- Incident Response
- Act as identity SME during security incidents.
- Implement corrective actions and strengthen identity posture.
Secondary Responsibilities
In addition to the primary duties and responsibilities this role is required to facilitate, enable, and back-up vendors, Managed Service Providers, and internal IT Teams in the following areas:- Collaborate with Cyber Security and Enterprise Apps personnel on security posture and access strategies.
- Coordinate with MSPs and SaaS vendors for identity integrations and compliance validation.
- Own and lead audit preparation and reporting for identity and access controls across all enterprise systems.
- Maintain detailed IAM documentation and evidence logs for SOC2, PCI, GDPR compliance. Coordinate with Risk & Compliance, Privacy, and Cyber Security team members to ensure timely completion of annual and periodic access reviews. Deliver audit reports to leadership and regulatory bodies as required.
- Support end-user training on MFA, SSO, and secure access practices.
- Provide technical input during security incidents and remediation efforts.
- Research emerging IAM technologies and recommend improvements for automation and efficiency.
- Strong knowledge of IAM principles, RBAC, and identity governance frameworks.
- Experience defining IAM policies and governance standards.
- Bachelor’s degree (B.A./B.S.) in IT or related field; or equivalent combination of education and experience.
- 2–4 years of experience in IAM or IT security roles, with hands-on expertise in identity lifecycle management, authentication protocols, and compliance support.
- Must be eligible to work legally in the United States.
- Experience with Azure Entra ID, Okta, M365, and SaaS integrations.
- Experience with compliance frameworks (SOC2, PCI, GDPR) and audit related audits.
- Familiarity with authentication protocols (SAML, OAuth, OpenID Connect).
- Hands-on expertise in identity and access management, including federation, SSO (SAML/OIDC), MFA
- Strong familiarity with enterprise CRM and productivity platforms, including user provisioning and password management.
- Hands-on experience with identity and access management tools such as Microsoft Entra ID, including configuring SSO and MFA for third-party SaaS applications.
- Proficiency in administering collaboration and file-sharing platforms (e.g., Dropbox, Google Shared Drives) with a focus on secure access.
- Advanced knowledge of Microsoft 365 and Azure Entra ID environments.
- Experience using compliance and audit tools or processes for SOC2, PCI, GDPR evidence collection.
- Experience managing internal ticketing systems and support workflows, including triage and resolution of identity-related issues.
- Exposure to cloud and web hosting environments (e.g., AWS) and IAM systems, with the ability to assist in maintenance and monitoring tasks.
- Knowledge of security frameworks and IAM governance best practices. (NIST/ISO)
- Exposure to automation tools and scripting (PowerShell, MS Power Automate) preferred.
- Work with multiple entities (internal teams, vendors, users, etc.) simultaneously while resolving complex system issues
- Maintain resilience, positive attitude, and supportive disposition while resolving difficult technical problems with complex decentralized SaaS and Cloud solutions
- Return and report to supervisor and peers, and demonstrate accountability for tasks
- Excellent documentation and communication skills, with experience maintaining IT knowledge bases and delivering user training.
Bachelor's degree in IT or related field; 2-4 years IAM or IT security experience; eligibility to work legally in the US; experience with Azure Entra ID, Okta, M365, SaaS integrations, compliance frameworks (SOC2, PCI, GDPR), and authentication protocols (SAML, OAuth, OpenID Connect).
Key Responsibilities
- managing identity lifecycle
- conducting access audits
- integrating identity solutions
Skills & Tools
Microsoft Entra ID, Okta, Microsoft 365, SAML, OAuth, OpenID Connect, Dropbox, Google Shared Drives, AWS, PowerShell, Microsoft Power Automate
Job Details
- Category: Information Technology
- Seniority: Mid Level
- Commitment: Full Time
- Workplace: Remote — United States
- Salary: USD 100,000 – 100,000 / year
- Languages: English
Benefits
- 401k matching
- Generous paid time off
- Retirement plan
About CAF America
A leader in enabling cross-border giving to validated charities and charitable projects worldwide. — Industry: Non-Profit Organizations and NGOs