Job Title: Identity and Access Management Technical Lead
Department: Technology and Transformation
Reports to: IT Manager
Who We Are:
For over 30 years, CAF America has been a leader in enabling cross-border giving to validated charities and charitable projects across the world totaling more than $1 billion. We enable our donors to make strategic, cost-effective, and tax-advantaged gifts through our vetted network of more than 1.9 million charitable organizations in 135 countries, all while reducing the risk, reputation exposure, and administrative burden associated with cross-border giving.
At CAF America, we pride ourselves on creating a positive working environment and culture that values all team members’ experience and voices and represents the society we serve. We want to attract, retain, and develop the best of talent at all levels, and provide a leading and great place to work, where every voice matters.
Summary:
The Identity and Access Management (IAM) Technical Lead is a key member of the Technology Operations team, responsible for managing and leading identity and access governance across enterprise systems and SaaS platforms within CAF America operates within the technical design authority of the IT Manager. This role ensures secure provisioning, authentication, and compliance while collaborating with Cyber Security, Enterprise Systems, and Data Solutions team members in day-to-day operations. The IAM Lead will also drive governance and process improvements for identity lifecycle management, including periodic audits and reporting. This position also has a significant role in collaborating with our CAF counterpart in the UK.
Primary Duties and Responsibilities
Partner with Vendors, Managed Service Providers, and internal IT Teams to successfully conduct the following:
- Identity Lifecycle Leadership
- Define identity governance policies, access control standards, and compliance requirements to ensure security, regulatory compliance, and risk reduction across all enterprise systems.
- Define and govern authentication strategy, including SSO, MFA, and identity federation configurations, ensuring security and compliance. Provide standards and oversight for identity provider configurations.
- Define policies and standards for provisioning and deprovisioning user and group accounts across M365, Azure Entra ID, CRM, and integrated SaaS platforms, and monitor adherence to these standards
- Maintain RBAC structures and enforce least privilege principles.
- Access Governance
- Define and implement access control policies and standards.
- Own and Conduct periodic access audits and ensure compliance with SOC2, PCI, GDPR. Partner and collaborate with Cybersecurity and other internal teams (Risk & Compliance, and Privacy) to conduct these audits.
- Authentication Infrastructure
- Manage SSO, MFA, and identity federation configurations.
- Optimize authentication flows for security and usability.
- Compliance & Risk Alignment
- Partner with Cyber Security and Risk teams to meet regulatory requirements.
- Prepare audit reports and support compliance reviews.
- Integration & Automation
- Integrate identity solutions with enterprise applications and SaaS platforms.
- Enable and consult on automation initiatives for onboarding/offboarding workflows.
- Incident Response
- Act as identity SME during security incidents.
- Implement corrective actions and strengthen identity posture.
Secondary Responsibilities
In addition to the primary duties and responsibilities this role is required to facilitate, enable, and back-up vendors, Managed Service Providers, and internal IT Teams in the following areas:
- Collaborate with Cyber Security and Enterprise Apps personnel on security posture and access strategies.
- Coordinate with MSPs and SaaS vendors for identity integrations and compliance validation.
- Own and lead audit preparation and reporting for identity and access controls across all enterprise systems.
- Maintain detailed IAM documentation and evidence logs for SOC2, PCI, GDPR compliance. Coordinate with Risk & Compliance, Privacy, and Cyber Security team members to ensure timely completion of annual and periodic access reviews. Deliver audit reports to leadership and regulatory bodies as required.
- Support end-user training on MFA, SSO, and secure access practices.
- Provide technical input during security incidents and remediation efforts.
- Research emerging IAM technologies and recommend improvements for automation and efficiency.
Qualifications:
- Strong knowledge of IAM principles, RBAC, and identity governance frameworks.
- Experience defining IAM policies and governance standards.
- Bachelor’s degree (B.A./B.S.) in IT or related field; or equivalent combination of education and experience.
- 2–4 years of experience in IAM or IT security roles, with hands-on expertise in identity lifecycle management, authentication protocols, and compliance support.
- Must be eligible to work legally in the United States.
- Experience with Azure Entra ID, Okta, M365, and SaaS integrations.
- Experience with compliance frameworks (SOC2, PCI, GDPR) and audit related audits.
- Familiarity with authentication protocols (SAML, OAuth, OpenID Connect).
- Hands-on expertise in identity and access management, including federation, SSO (SAML/OIDC), MFA
- Strong familiarity with enterprise CRM and productivity platforms, including user provisioning and password management.
- Hands-on experience with identity and access management tools such as Microsoft Entra ID, including configuring SSO and MFA for third-party SaaS applications.
- Proficiency in administering collaboration and file-sharing platforms (e.g., Dropbox, Google Shared Drives) with a focus on secure access.
- Advanced knowledge of Microsoft 365 and Azure Entra ID environments.
- Experience using compliance and audit tools or processes for SOC2, PCI, GDPR evidence collection.
- Experience managing internal ticketing systems and support workflows, including triage and resolution of identity-related issues.
- Exposure to cloud and web hosting environments (e.g., AWS) and IAM systems, with the ability to assist in maintenance and monitoring tasks.
- Knowledge of security frameworks and IAM governance best practices. (NIST/ISO)
- Exposure to automation tools and scripting (PowerShell, MS Power Automate) preferred.
- Work with multiple entities (internal teams, vendors, users, etc.) simultaneously while resolving complex system issues
- Maintain resilience, positive attitude, and supportive disposition while resolving difficult technical problems with complex decentralized SaaS and Cloud solutions
- Return and report to supervisor and peers, and demonstrate accountability for tasks
- Excellent documentation and communication skills, with experience maintaining IT knowledge bases and delivering user training.
This position is U.S.-based. All duties must be carried out from within the United States.
To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily, with or without accommodation. If you require accommodation to perform these essential functions, please contact the Human Resources Department. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
Your health and wellness are important to us. CAF America offers a comprehensive benefits package which includes 100% paid premium for Employee Medical, Dental and Vision insurance along with a Health Savings Account (HSA), Life Insurance, Accidental Death and Dismemberment Insurance, Short- and Long-Term Disability, 401k program with up to 15% match, Lifestyle Savings Account, Employee Assistance Program (EAP) and robust Time Off programs.
Salary: $100,000