[Hiring] Senior IAM RBAC & ABAC Manager @Otis Elevator Co.

Role Description

Otis is seeking a highly experienced Sr. IAM RBAC & ABAC Manager to join our global Identity and Access Management (IAM) organization and lead the design, implementation, and governance of enterprise Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks. This role partners with business stakeholders and Managed Service Providers to advance identity governance, automate Joiner-Mover-Leaver (JML) processes, strengthen access controls, and improve operational efficiency through analytics, policy-based access management, and scalable automation across a global enterprise.

• Identity Governance & Access Control:
  • Lead the design, implementation, and continuous improvement of enterprise RBAC and ABAC frameworks, including roles, rules, attributes, entitlements, datasets, and access policies.
  • Establish governance processes that support least privilege, risk mitigation, access certification, entitlement reviews, application certification, and audit readiness.
  • Use role mining, entitlement analytics, and risk-based intelligence to identify access patterns, optimize access models, and strengthen enterprise access controls.
• Lifecycle Management & Automation:
  • Own identity lifecycle governance processes, including Joiner-Mover-Leaver, birthright access, application onboarding, access requests, provisioning, and reporting.
  • Enhance automation across onboarding, transfers, terminations, access provisioning, integrations, APIs, and event-driven workflows.
  • Partner with HR, application, and technology teams to improve workforce identity data quality, onboarding experience, and policy-based access decisions.
• Stakeholder Engagement, Reporting & Delivery:
  • Translate business needs into functional and technical requirements through workshops, stakeholder engagement, and collaboration with business, technology, application, and global teams.
  • Partner with managed service providers and implementation teams to deliver IAM solutions aligned to business requirements, compliance standards, testing expectations, and reporting needs.
  • Develop and maintain IAM, RBAC, and ABAC dashboards and metrics that provide visibility into access governance effectiveness, compliance, operational performance, risks, and optimization opportunities.
  • Coordinate testing and delivery activities, including planning, test execution, defect management, user acceptance testing, remediation tracking, and implementation recommendations.
  • Present findings, recommendations, and program status updates to business leaders, application owners, auditors, and executive stakeholders; travel up to 5% as needed.
• Operational Excellence & Continuous Improvement:
  • Develop and maintain IAM policies, procedures, standards, operational documentation, and process controls that support scalable and consistent delivery.
  • Identify opportunities to streamline workflows, improve user experience, reduce manual effort, and strengthen operational resilience.
  • Lead continuous improvement initiatives that increase IAM program maturity, scalability, automation, and service quality.
  • Follow established change management practices, including impact assessment, implementation planning, approvals, communications, post-implementation review, and production support.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or equivalent professional experience.
• Preferred Certifications: Security+ (Sec+), CISSP, CISM, Certified Identity and Access Manager (CIAM), and Saviynt Certification.
• 5+ years of progressive experience in Identity and Access Management (IAM), Identity Governance Administration (IGA), or related cybersecurity disciplines.
• 5+ years designing and implementing RBAC and ABAC solutions within large enterprise environments.
• 3+ years of business and systems analysis experience supporting IAM initiatives.
• Experience operating within highly regulated and audit-driven environments.
• Hands-on experience with Identity Governance Administration (IGA) platforms and identity lifecycle management processes.
• Demonstrated experience supporting SOX, audit, compliance, and access governance programs.
• Experience working within global organizations utilizing managed services and onshore/offshore delivery models.
• Ability to travel up to 5%.

Requirements

• Deep understanding of RBAC and ABAC.
• Applications Onboarding and Certification.
• Identity Governance & Administration.
• Access Management.
• Privileged Access Management.
• Policy-Based Access Control.
• Fine-Grained Authorization.
• Segregation of Duties (SoD).
• Experience with workforce identity lifecycle processes, including onboarding, transfers, terminations, and provisioning.
• Knowledge of cloud and enterprise environments such as Microsoft Entra ID (Azure AD), Active Directory, Oracle, UNIX/Linux, and Mainframe platforms.
• Familiarity with Identity Governance and Administration tools, Privileged Access Management tools, MFA technologies, SSO solutions, and API-based integrations.

Benefits

• 401(k) plan with a generous company match and an automatic retirement contribution.
• Comprehensive medical, prescription drug, dental, and vision coverage.
• Three weeks of paid vacation, along with paid company holidays.
• Paid sick leave, employee assistance, and wellness incentive programs.
• Life insurance and disability coverage.
• Voluntary benefits, including options for legal, pet, home, and auto insurance.
• Generous birth/adoption and parental leave benefits, as well as adoption assistance.
• Tuition reimbursement program.
• Recognition for service anniversaries and performance bonuses.
• Salary range: $138,000 - $175,000, based on various factors.