Job description

City/State Virginia Beach, VA Work Shift First (Days) Overview: The Cyber Manager – Identity & Access Management is a leader and architecture owner responsible for advancing Sentara Health’s enterprise identity strategy across non-human identities, identity proofing, and privileged access management. This role partners with Identity Governance and Administration leaders to build a unified identity ecosystem that supports clinical, corporate, partner, and consumer populations. The role also owns the Digital Front Door identity experience, ensuring patients and consumers have a secure, consistent, and seamless login journey across the Sentara ecosystem. Key Responsibilities: Enterprise IAM: Workforce and Partners • Oversee single sign-on, multifactor authentication, and privileged access management capabilities to enforce Zero Trust and least-privilege principles. • Ensure identity services are integrated seamlessly across the internal application landscape. Identity Platform and Engineering • Direct the development and modernization of the core identity technology stack, including APIs, microservices, and identity data platforms. • Ensure the reliability, performance, and scalability of identity products and platforms, including Saviynt, Ping, 1Kosmos, Experian ,CyberArk, BeyondTrust, and related tools. • Standardize identity patterns across the organization to enable secure developer self-service and consistent implementation practices. • Security Operations integration: Partner with the Cyber Threat Operations Center to monitor and respond to identity-based threats, credential stuffing, and account takeover activity. Non-Human Identity and Machine Governance • Machine identity inventory: Establish a comprehensive inventory and ownership model for non-human identities, including service accounts, API keys, RPA bots, secrets, and other machine identities. • Secrets management: Direct the lifecycle for credential discovery, vaulting, and automated rotation across applications and automated workflows to reduce static or unmanaged credentials. • IoMT security: Extend IAM principles to the Internet of Medical Things by ensuring medical devices, such as infusion pumps and monitors, authenticate with unique machine identities before accessing clinical networks. • Workload identities: Oversee Entra Workload ID or similar capabilities to secure machine-to-machine communications across cloud-native and legacy hospital systems. Education Bachelor’s or master’s degree in computer science, information security, or a related field. (Preferred) Certification/Licensure Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certifications (Preferred) Experience Extensive experience in technology and cybersecurity, including at least 15 years of relevant experience and 5 or more years in a senior leadership role; healthcare integrated delivery network or health plan experience preferred. Proven leadership experience managing teams and driving cross-functional collaboration. Strong understanding of regulatory requirements, industry standards, and cybersecurity best practices. Deep understanding of identity protocols (SAML, OIDC, OAuth 2.0, FIDO2) and experience managing both cloud-native and hybrid identity environments. Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical audiences. Strategic thinker with the ability to translate business needs into effective security solutions. Demonstrated ability to thrive in a fast-paced, dynamic environment and adapt to evolving threats and challenges. Strong leadership and management skills, with the ability to build, lead, and develop high-performing security teams. Excellent interpersonal skills, with the ability to engage effectively with stakeholders at all levels of the organization. Proven track record of driving security initiatives and achieving measurable results. Ability to operate effectively in a fast-paced, dynamic environment with urgency, attention to detail, and adaptability. Experience with Agile, LEAN, or Six Sigma practices preferred. We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay rate for Full Time employment is:$116,729.60-$216,777.60. Additional compensation may be available for this role such as shift differentials, standby/on-call, overtime, premiums, extra shift incentives, or bonus opportunities. . Benefits: Caring For Your Family and Your Career • Medical, Dental, Vision plans • Adoption, Fertility and Surrogacy Reimbursement up to $10,000 • Paid Time Off and Sick Leave • Paid Parental & Family Caregiver Leave • Emergency Backup Care • Long-Term, Short-Term Disability, and Critical Illness plans • Life Insurance • 401k/403B with Employer Match • Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education • Student Debt Pay Down – $10,000 • Reimbursement for certifications and free access to complete CEUs and professional development • Pet Insurance • Legal Resources Plan • Colleagues may have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met Sentara Independence provides quality outpatient services to the surrounding community. The facility includes an ambulance-accessible emergency room that is supported by board-certified physicians. Sentara Independence houses state-of-the-art medical equipment and highly-skilled physicians and staff. Sentara Independence is now an extension of the quality services at Sentara Virginia Beach General Hospital including advanced imaging and physical therapy. Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves. In support of our mission “to improve health every day,” this is a tobacco-free environment. For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.

Requirements

Must-haves

Virginia Beach, VA
First (Days)
The role also owns the Digital Front Door identity experience, ensuring patients and consumers have a secure, consistent, and seamless login journey across the Sentara ecosystem.
Enterprise IAM: Workforce and Partners
Oversee single sign-on, multifactor authentication, and privileged access management capabilities to enforce Zero Trust and least-privilege principles.
Ensure identity services are integrated seamlessly across the internal application landscape.
Identity Platform and Engineering
Direct the development and modernization of the core identity technology stack, including APIs, microservices, and identity data platforms.
Ensure the reliability, performance, and scalability of identity products and platforms, including Saviynt, Ping, 1Kosmos, Experian ,CyberArk, BeyondTrust, and related tools.
Standardize identity patterns across the organization to enable secure developer self-service and consistent implementation practices.
Security Operations integration: Partner with the Cyber Threat Operations Center to monitor and respond to identity-based threats, credential stuffing, and account takeover activity.
Non-Human Identity and Machine Governance
Machine identity inventory: Establish a comprehensive inventory and ownership model for non-human identities, including service accounts, API keys, RPA bots, secrets, and other machine identities.
Secrets management: Direct the lifecycle for credential discovery, vaulting, and automated rotation across applications and automated workflows to reduce static or unmanaged credentials.
IoMT security: Extend IAM principles to the Internet of Medical Things by ensuring medical devices, such as infusion pumps and monitors, authenticate with unique machine identities before accessing clinical networks.
Workload identities: Oversee Entra Workload ID or similar capabilities to secure machine-to-machine communications across cloud-native and legacy hospital systems.
Proven leadership experience managing teams and driving cross-functional collaboration.
Strong understanding of regulatory requirements, industry standards, and cybersecurity best practices.
Deep understanding of identity protocols (SAML, OIDC, OAuth 2.0, FIDO2) and experience managing both cloud-native and hybrid identity environments.
Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical audiences.

Nice-to-haves

Education Bachelor’s or master’s degree in computer science, information security, or a related field. (Preferred)
Certification/Licensure Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certifications (Preferred)
Experience with Agile, LEAN, or Six Sigma practices preferred.
Colleagues may have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

apiagile

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Paid Time Off

Professional Development