Identity and Access Management Leader

AMETEK is building out its identity and access management capability and is hiring a founding Identity and Access Management Leader to lead this effort. Reporting to the Director of Enterprise Operations and Architecture, the leader will help establish identity as a central role in advancing foundational control for AMETEK’s Zero Trust strategy by making identity the primary control point for secure access, with, ensuring access decisions informed are continuously evaluated based on user, device, application, data sensitivity, location, and risk context.  This is a hands-on, senior-level role for someone with deep expertise in Active Directory, Microsoft Entra ID, and single sign-on, who can both set the strategic direction for identity management and work directly in the environment to implement it. The role will evaluate, select, and implement a modern IAM platform, and will partner closely with our Enterprise Architecture function on broader technology alignment.    Key Responsibilities:

Evaluate AMETEK's current identity and access management practices and develop a roadmap for maturing the program, including near-term improvements and a longer-term target architecture. Lead the requirements definition, vendor evaluation, and selection process for a modern IAM platform. Define and advance AMETEK’s identity-centric Zero Trust architecture for AMETEK, with emphasis on, including least privilege access, conditional access, continuous verification, and risk-based authentication. Partner with Security Architecture, Network, Endpoint, Cloud, and Enterprise Architecture teams to align identity controls IAM, device posture, segmentation, application access, segmentation, and data protection controls under a Zero Trust operating model. Develop policies and maintain standards for adaptive access, privileged access, service accounts, machine identities, third-party access, and other non-human identity use cases. Integrate IAM controls with endpoint security, security monitoring, vulnerability management, and incident response processes to improve visibility, and enforcement, and response across the environment. Establish measurable Zero Trust maturity measures, goals and metrics, such as MFA coverage, conditional access adoption, privileged access reduction, stale account remediation, access review completion, and response to high-risk sign-in response. Design and implement the target-state identity lifecycle architecture, covering onboarding, role changes, and offboarding across the employee lifecycle. Serve as the subject matter expert for Active Directory and Microsoft Entra ID, including hybrid identity, conditional access, and directory synchronization. Own and continuously improve single sign-on architecture across SAML, OIDC, and OAuth 2.0, integrating enterprise and divisional applications. Establish access certification, role-based access control, and privileged access management practices as the program matures. Partner with Enterprise Architecture, HR systems, and Corporate Technology Services on integration standards and cross-domain alignment. Support the identity and access components of merger and acquisition integrations as AMETEK continues to grow. Coordinate with security, compliance, and internal audit on access control requirements relevant to AMETEK's regulated business environments. Be a hands-on contributor in the environment day to day, particularly during the program's early stages, not solely an advisory or architectural resource. Build and lead AMETEK's Identity and Access Management team, including defining the team structure, hiring, and developing team members as the function grows.

Eight or more years of progressive experience in identity and access management, including experience building or significantly maturing an IAM function. Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field is