Director, IAM Engineering Lead

Leads IAM engineering at CLS, owning the design, rollout and governance of identity and access management for the firm's workforce, customers and machine identities. The role sits in the CISO organisation, reports to the Head of Security Architecture, Design and Engineering, and partners closely with the Head of Identity and Access Management.

The agenda is broad. It includes bringing more applications and infrastructure onto the IGA platform in phases, automating provisioning and access reviews through connectors, role-based access control and AI-driven workflows, and keeping identity data clean and in step with HR systems. On privileged access, the director extends PAM beyond Linux and Windows to network devices, databases, AWS and operational technology, moving toward just-in-time access and zero standing privileges. The role also builds a secrets management capability, governs service and AI agent identities, applies machine learning to spot over-permissioning and unusual identity activity, and hands routine IAM tasks to AI agents under human oversight. Alongside the programme, the director builds and runs a security engineering team, shapes its operating model and engineering standards, manages vendors, and reports outcome metrics to senior leaders.

CLS wants about ten years in security engineering and architecture, five to seven or more in senior leadership, with deep identity and privileged access engineering experience in a regulated setting such as markets technology, investment banking or financial market infrastructure. SailPoint, Delinea and AWS IAM experience is desirable. The role is in Iselin, New Jersey, with two office days a week.