[Hiring] IAM / Automation Lead @Covetrus

Role Description

As the IAM / Automation Lead, you will own the strategy, operations, and roadmap for enterprise Identity & Access Management (IAM) — protecting our workforce, applications, and data by ensuring the right people have the right access at the right time.

This is a high-impact, senior level role reporting to the Senior Director of IT. You will serve as the organization’s subject-matter expert and technical lead for enterprise IAM, partnering closely with IT, HR, Legal, and Compliance, and driving continuous maturity of our identity posture across cloud and on-premises environments. The role carries a heavy focus on automation and self-service — reducing manual operations, improving the end-user experience, and strengthening our cybersecurity posture while delivering cost savings.

Key Responsibilities

• Serve as the North American Center of Excellence (COE) lead for IAM, partnering with global COE counterparts to align standards, tooling, and best practices.
• Serve as the technical lead for IAM integration on current and future mergers, acquisitions, and divestitures (M&A).
• Lead the design, implementation, and operations of IAM programs including SSO, MFA, PAM, IGA, and directory services.
• Deliver measurable cost savings and operational efficiencies by leading product evaluations, tools consolidations, and IAM initiatives backed by data-driven financial business cases.
• Enforce compliance with IAM policies and standards; Create procedures aligned to NIST, CIS, ISO 27001, SOX, and other applicable frameworks.
• Own user lifecycle management: joiner/mover/leaver (JML) execution, access provisioning, role engineering, and automated de-provisioning.
• Drive automation and self-service capabilities across the IAM function.
• Partner with End User Services and the Service Desk to identify and automate away manual, ticket-based access requests.
• Deliver automated entitlement and permission reviews across SaaS, cloud, and on-prem applications.
• Mature Privileged Access Management (PAM) adoption.
• Partner with Cyber and Network Operations on global user controls.
• Build and maintain integrations between IAM platforms, HR systems (HCM), ticketing systems, and downstream applications.
• Define KPIs and metrics for access hygiene, orphaned accounts, and privilege sprawl.
• Partner across teams to advance the IAM roadmap, and support IAM vendor relationships, licensing, and contract renewals.
• Serve as a technical mentor to IAM engineers and analysts.
• Support audits (SOX, SOC 2, ISO 27001) with evidence of quarterly access reviews.
• Drive IAM roadmap planning with a 12–18 month horizon.

Technologies & Platforms

• Identity Governance & Administration (IGA)
• Single Sign-On & Federation
• Privileged Access Management (PAM)
• Directory Services
• Cloud & Infrastructure Platforms
• Protocols & Standards
• ITSM, SIEM & Adjacent Tools

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent professional experience will be considered in lieu of a degree.
• 8+ years of progressive experience in information security or information technology, including 4+ years focused specifically on Identity and Access Management (IAM).
• 3+ years serving as a senior or lead technical contributor on an IAM function or program within a mid-to-large enterprise environment (5,000+ employees).
• Hands-on engineering experience designing, building, and operating enterprise IAM automation.
• Experience integrating joiner/mover/leaver (JML) automation with an HRIS platform.
• Experience automating access certification/recertification campaigns at enterprise scale.
• Experience supporting compliance and security audits.
• Experience managing PAM programs and vault platforms in production.
• Demonstrated success building data-driven business cases.
• Relevant industry certifications preferred (e.g., CISSP, CIAM, SC-300, Okta Certified Professional, or equivalent).

Competencies (Skills and Abilities)

• Strong engineering mindset: able to design, script, and deploy automated identity workflows.
• Proven ability to identify high-friction, manual IAM operations and re-architect them into scalable, self-service, automated solutions.
• Deep working knowledge of authentication and federation protocols.
• Strong grasp of Zero Trust architecture, conditional access, and least-privilege enforcement.
• Track record of measurably reducing manual operations and ticket volume.
• Ability to build and present data-driven financial business cases.
• Ability to serve as a technical mentor.
• Effective communicator, able to translate technical automation and security work into business impact.

Benefits

• 401k savings & company match
• Paid time off
• Paid holidays
• Maternity leave
• Parental leave
• Military leave
• Other leaves of absence
• Health, dental, and vision benefits
• Health savings accounts
• Flexible spending accounts
• Life & disability benefits
• Identity theft protection
• Pet insurance
• Certain positions may include eligibility for a short-term incentive plan

Physical Demands/Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Travel as required to remote locations to provide project and technology services.

On-call and on-demand extended work hours may include nights and weekends.