[Hiring] Manager, Identity and Access Management @Florida Crystals / ASR Group

Role Description

The Identity and Access Management (IAM) Manager reports to the Sr. Director, Information Security (CISO) and serves as the enterprise leader for the IAM program across Florida Crystals / ASR Group. The role owns the strategy, roadmap, and day-to-day execution of Identity and Access Management, including:

• Microsoft Entra ID and Entra ID Governance
• SAP Security across ECC, S/4HANA, and SAP RISE
• Privileged access
• Joiner/mover/leaver processes
• Access certifications
• Audit readiness

The primary focus is to mature and operate the IAM program with a strong emphasis on expert-level SAP Security, identity governance, and audit-defensible controls. This role leads a hybrid team consisting of:

• An in-house Senior SAP Security Administrator
• An in-house Senior IAM Engineer focused on Entra ID Governance
• An outsourced team of SAP Security administrators executing SAP permissions changes under tight SLAs

The IAM Manager partners closely with:

• SAP BASIS and functional teams
• Enterprise Architecture
• HRIS
• Internal Audit
• Business leadership

to advance the IAM architecture and execute the multi-year identity, governance, and SAP Security roadmap.

Qualifications

• 10+ years of progressive IAM experience in large, multi-entity enterprises
• At least 6 years of hands-on SAP Security at an expert level (ECC and S/4HANA required)
• 3+ years leading teams, including experience managing outsourced or offshore administration teams under formal SLAs
• Significant experience designing and operating IAM and identity governance controls at scale
• Proven experience leading IAM and SAP Security audits (ITGC, SOX-style, NIS 2, or equivalent)
• Direct experience integrating authoritative HR sources (such as SAP SuccessFactors) into IAM lifecycle automation

Requirements

• Bachelor’s Degree in Information Systems, Computer Science, Engineering, or equivalent experience
• In lieu of a Bachelor’s Degree, 10+ years of relevant field experience will be considered
• Relevant certifications preferred, such as SAP Certified Technology Associate – SAP System Security and Authorizations, CISSP, CISM, CISA, or Microsoft Identity and Access Administrator (SC-300)

Benefits

• Remote work opportunity
• Flexible working hours
• Support for professional development and certifications

Essential Capabilities

• Expert-level SAP Security expertise, including role design, SoD, GRC Access Control, firefighter access, and SAP audit support
• Strong working knowledge of Microsoft Entra ID and Entra ID Governance
• Solid understanding of identity and access management, identity governance, privileged access, and zero-trust-aligned architectures
• Demonstrated ability to lead outsourced administration teams under formal SLAs
• Strong organization and planning discipline
• Excellent written and verbal executive communication
• Ability to set and defend priorities across competing operational, audit, and project demands
• Ability to create clear, concise documentation targeted at IT leadership, business stakeholders, auditors, and technical teams
• Strong collaboration and leadership skills

Location of Role

USA Remote, able to work from 8AM to 5PM Eastern Time Zone (USA, Florida), with occasional off-hours support for P1/P2 incidents, audit deadlines, and major project cutovers. West Palm Beach, FL area preferred.