Senior Manager, Identity and Access Management

If you’re passionate about building a better future for individuals, communities, and our country—and you’re committed to working hard to play your part in building that future—consider WGU as the next step in your career. Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families. The salary range for this position takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At WGU, it is not typical for an individual to be hired at or near the top of the range for their position, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is:   Grade: Management Technical 714 Pay Range: $151,800.00 - $250,500.00 Job Description As Senior Manager, Identity and Access Management, you own the strategy, architecture, governance, and daily operation of the enterprise IAM program within Information Security. The scope is the full program: identity governance and administration, access management and federation, privileged access management, identity threat detection and security posture management, and enterprise certificate lifecycle services. It spans every population the university serves — workforce, students and learners, external partners, and the fast-growing set of non-human identities, including service accounts, enterprise secrets, and AI agents. You will lead a team of identity engineers and analysts, set the technical standards other teams build against, and partner with Human Resources, Legal, Privacy, Internal Audit, Infrastructure, and Application Development. You will also be accountable for the reliability of authentication and other IAM services, which the university treats as tier-one dependencies.

Program strategy and direction. The IAM strategy, capability roadmap, and program priorities, along with the business case and executive sponsorship behind them.  Team leadership. Leading, coaching, and developing a team of identity engineers and analysts, including hiring, goal setting, and performance management.  Identity governance and lifecycle. Automated joiner, mover, and leaver processes driven by authoritative human resources, student, and affiliate systems of record; the enterprise identity data model and registry of record; role and entitlement design; separation-of-duties policy; and access certification through closed-loop remediation.  Authentication and federation. Single sign-on, multi-factor and passwordless authentication, federation with partners and peer institutions, and accessible authentication and account recovery paths for every population the university serves.  Privileged and non-human identity. Credential vaulting, session control, just-in-time elevation, break-glass procedures, and reduction of standing privilege — extended to service accounts, enterprise secrets, and the authorization boundaries of AI agents and autonomous workloads.  Identity security operations. Identity threat detection and response, identity security posture management, remediation of permission drift and orphaned accounts, and the identity lead role during security incident response.  Service reliability. Availability, resilience, and disaster recovery for authentication and other IAM services, including defined service levels and tested failover.  Policy, compliance, and