[Hiring] Senior IAM/PAM Engineer @Newell Brands

Role Description

The Senior IAM/PAM Engineer advances Newell's IAM/PAM program strategy, modernization of critical infrastructure spanning Microsoft Active Directory, PingFederate, Entra ID and CyberArk Privileged Access Management. This role influences standards, investment decisions and drives execution across multiple security and IT functions.

This role provides technical direction on complex, moderately ambiguous IAM initiatives, influences InfoSec and IT partners to align on identity and directory strategy, and drives improvements to the backend systems that keep authentication and authorization running reliably at enterprise scale. The role contributes to departmental planning and serves as a recognized subject matter expert across the IAM domain.

The ideal candidate is a hybrid and multi-cloud IAM expert who brings knowledge and experience of identity engineering across cloud and on-premises environments, independently drives modernization initiatives from strategy through execution, and influences peers and cross-functional partners to align on governance approaches and technical standards.

Key Responsibilities

• Lead the modernization of critical IAM/PAM infrastructure, migrating privileged accounts from legacy systems to enterprise platforms in partnership with IT Infrastructure and application teams.
• Influence and align Senior Engineers, Architects and Senior Management across the organization on IAM policies, controls and standards; serve as the primary technical authority on identity governance decisions that span multiple functions or departments.
• Lead the development of Newell's identity and directories strategy in close partnership with InfoSec and IAM domain leaders, ensuring integration with the broader InfoSec strategy and contributing to multi-year departmental planning efforts.
• Independently lead IAM workstreams within business and IT projects, defining approach, managing cross-functional dependencies and ensuring delivery of IAM functionality that meets security, compliance and timeline requirements.
• Provide direction and leadership in resolving complex IAM-related issues.
• Provide oversight and engineering support for IAM backend infrastructure.
• Lead development and implementation of procedures and documentation supporting IAM services.
• Support and onboard servers and users to PAM services.
• Troubleshoot and resolve complex authentication and authorization integration issues.
• Administer Windows Server 2016/2019/2022 Active Directory forests and domain trusts, Group Policy services, and hybrid multi-tenant Microsoft Entra ID, Office 365, AWS and GCP environments.
• Provide technical mentorship and guidance to junior and mid-level IAM engineers, reviewing work, sharing expertise and supporting their professional development within the identity domain.

Qualifications

• Bachelor’s degree in information security, Computer Science, Information Management Systems or a related field, or equivalent experience.
• 5+ years of hands-on experience with Windows Server 2016/2019/2022 — Active Directory, forest and domain trusts, Group Policy.
• 3+ years of experience in hybrid, multi-cloud, multi-tenant environments, including Active Directory, Entra ID, AWS and GCP.
• Experience with modern SDLC methods and the ability to learn and adapt to methodologies used across teams.
• Intermediate knowledge of cloud platforms (Azure, AWS or GCP), including identity services, entitlement management and security controls within each environment.
• Experience using IAM tools and scripting for automation.
• Experience spanning business, security, application, UX and network infrastructure architecture.
• Deep intellectual curiosity about current and emerging identity technologies, with a demonstrated ability to translate awareness of technology trends and threats into actionable recommendations that influence Newell's IAM strategy and investment priorities.

Preferred Qualifications

• Industry certifications related to IAM or Entra ID, such as CISSP, CISM or Azure Security Engineer.
• Hands-on experience with CyberArk or a comparable PAM platform.
• Working knowledge of SPIFFE/SPIRE, mTLS or other workload identity standards, with experience applying these to define enterprise authentication policy.
• Experience with Infrastructure-as-Code tools (Terraform, ARM templates or Bicep) to manage IAM configurations as version-controlled code.

Benefits

The Remote base pay range for this position is from $136,000 to $187,000. Salary will be based on prior experience related to the skills required for this position.