Job description

Job Overview This role will build and lead a new enterprise Identity & Access Management (IAM) Platform team. It is a unique opportunity to shape a critical capability from the ground up assessing today’s environment, defining the future state, and leading a multi-year transformation while keeping existing identity services secure and reliable. You will partner with leaders across technology, cybersecurity, risk, compliance, audit, and the business to understand pain points, align priorities, and develop a practical strategy for modernizing IAM. You will establish the team, operating model, architecture, governance, and roadmap for identity governance, access management, privileged access, and human and non-human identities. The role requires deep experience designing, building, and modernizing IAM capabilities at enterprise scale. The successful candidate will serve as the technical authority for the IAM platform, setting the architectural vision, establishing engineering standards, reviewing critical designs, and partnering closely with engineers throughout implementation. You should be comfortable diving deep into complex identity challenges and contributing directly when needed, without being expected to be the hands-on expert in every IAM product. The ideal candidate will combine strong technical depth with strategic thinking, proven managerial experience, and the ability to translate an ambitious vision into a practical, executable program. Responsibilities Build and lead the new IAM Platform team, including its mission, structure, capabilities, and ways of working. Assess the current identity environment, processes, controls, integrations, and stakeholder pain points. Define the IAM strategy, target-state architecture, operating model, and multi-year transformation roadmap. This includes driving detailed architecture and design based on experience of building these systems at enterprise scale. Create an executable program plan covering investment, resources, priorities, dependencies, risks, and measurable outcomes. Partner with senior business and technology leaders to build alignment, make trade-offs, and drive adoption. Guide the evaluation and selection of IAM and IGA platforms, vendors, and implementation partners. Oversee the modernization of identity governance, authentication, authorization, privileged access, and human and non-human identity management. Lead the phased migration from legacy capabilities while maintaining service continuity, security, and regulatory compliance. Strengthen IAM controls, including joiner/mover/leaver processes, access reviews, least privilege, audit evidence, and SOC 1 requirements. Establish platform performance, risk, control, adoption, and service-reliability measures. Qualifications Experience developing an enterprise strategy, target operating model, architecture, or transformation roadmap. Demonstrated experience architecting, building, integrating, or operating enterprise-scale IAM platforms—not solely managing IAM programs or vendors. Ability to move comfortably between enterprise strategy and detailed technical discussions, including reviewing solution designs, challenging architectural assumptions, and guiding engineering teams through implementation. Strong understanding of identity architecture and integration patterns across cloud, SaaS, internally developed applications, APIs, and legacy environments. Strong knowledge of core IAM and IGA concepts, including identity lifecycle management, access governance, authentication, authorization, federation, and privileged access. Strong understanding of OpenID Connect, OAuth 2.0, SAML, delegated authorization, On-Behalf-Of flows, and service-to-service authentication. Practical experience with one or more leading identity ecosystems, such as Microsoft Entra ID, Active Directory, AWS IAM, SailPoint, Saviynt, Omada, One Identity, or comparable solutions. Candidates are not expected to be experts in every product, but should have the technical depth to evaluate platforms, guide integrations, and make sound architecture decisions. Experience leading complex technology transformation or modernization initiatives while supporting existing services. Ability to engage senior leaders, uncover organizational pain points, build consensus, and translate needs into practical priorities. Strong communication and program leadership skills, with the ability to explain technical and risk topics to diverse audiences. Experience establishing or significantly transforming an IAM platform or team is preferred Knowledge of non-human identities, workload identities, service accounts, secrets management, or AI agent identities is highly desired. Experience in a regulated or highly controlled environment, including familiarity with SOC 1 or similar controls is an asset. The base salary range for this position is $128,000 - $293,000 per year. Arrowstreet Capital operates a robust talent acquisition program, and we also seek to compensate and reward our employees competitively within our industry and in line with our merit-based culture. Our approach to total compensation includes base salaries and annual discretionary bonuses, as well as a robust benefits package. The determination of a successful candidate’s base salary placement within the listed range will vary based on the candidate’s relevant experience and qualifications (which may also include relevant certifications, credentials and other education), the job responsibilities and scope, the commensurate resulting level of the position and other relevant factors. The listed range is also an estimate, and additional information regarding base salary and other elements of total compensation offered by Arrowstreet Capital to successful applicants will be communicated during the recruitment process. Arrowstreet Capital is a Boston-based systematic investment firm that manages global equity portfolios for institutional investors around the world. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, ancestry, genetic information, age, pregnancy, medical condition, disability, veteran or military status, marital status or any other characteristic protected by federal, state, or local law. Arrowstreet Capital is committed to working with and providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you need a reasonable accommodation for any part of the employment process due to a disability, contact us to discuss the nature of your request and contact information.

Requirements

Must-haves

Job Overview
The ideal candidate will combine strong technical depth with strategic thinking, proven managerial experience, and the ability to translate an ambitious vision into a practical, executable program.
Build and lead the new IAM Platform team, including its mission, structure, capabilities, and ways of working.
Assess the current identity environment, processes, controls, integrations, and stakeholder pain points.
Create an executable program plan covering investment, resources, priorities, dependencies, risks, and measurable outcomes.
Partner with senior business and technology leaders to build alignment, make trade-offs, and drive adoption.
Guide the evaluation and selection of IAM and IGA platforms, vendors, and implementation partners.
Oversee the modernization of identity governance, authentication, authorization, privileged access, and human and non-human identity management.
Lead the phased migration from legacy capabilities while maintaining service continuity, security, and regulatory compliance.
Strengthen IAM controls, including joiner/mover/leaver processes, access reviews, least privilege, audit evidence, and SOC 1 requirements.
Establish platform performance, risk, control, adoption, and service-reliability measures.
Experience developing an enterprise strategy, target operating model, architecture, or transformation roadmap.
Demonstrated experience architecting, building, integrating, or operating enterprise-scale IAM platforms—not solely managing IAM programs or vendors.
Strong understanding of identity architecture and integration patterns across cloud, SaaS, internally developed applications, APIs, and legacy environments.
Strong knowledge of core IAM and IGA concepts, including identity lifecycle management, access governance, authentication, authorization, federation, and privileged access.
Strong understanding of OpenID Connect, OAuth 2.0, SAML, delegated authorization, On-Behalf-Of flows, and service-to-service authentication.
Experience leading complex technology transformation or modernization initiatives while supporting existing services.
Ability to engage senior leaders, uncover organizational pain points, build consensus, and translate needs into practical priorities.
Strong communication and program leadership skills, with the ability to explain technical and risk topics to diverse audiences.
Knowledge of non-human identities, workload identities, service accounts, secrets management, or AI agent identities is highly desired.
Experience in a regulated or highly controlled environment, including familiarity with SOC 1 or similar controls is an asset.
Arrowstreet Capital is a Boston-based systematic investment firm that manages global equity portfolios for institutional investors around the world.

Nice-to-haves

Experience establishing or significantly transforming an IAM platform or team is preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsai

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Vision