This role owns the Identity and Access Management (IAM) strategy for the IFS platform ecosystem. It leads the Authentication (AuthN) and Authorization (AuthZ) platforms that secure Nexus, Kairos, IFS.ai, Cloud Services, and future platform investments — balancing security, scale, compliance, and a straightforward experience for customers and developers.  The leader builds and runs a high-performing engineering organization through two engineering managers, and partners closely with Product, Architecture, Security, Compliance, Cloud Operations, and Customer Services to keep IAM capability ahead of the platform's needs.  Key responsibilities  Authentication  • Identity provider integration and federation  • SSO architecture and delivery  • OAuth 2.0 and OpenID Connect platforms  • Customer identity onboarding  • SCIM provisioning and identity lifecycle management  • User and group management  • Tenant onboarding and offboarding  • Session management and token services  • Identity governance and compliance  • Authentication observability and operational excellence  • High availability and disaster recovery for authentication services  Authorization  • Enterprise authorization platform strategy  • RBAC, ABAC, ReBAC, and ACL models  • Permission management platform  • Entitlement management  • Centralized and decentralized authorization patterns  • Policy administration capabilities  • Authorization enforcement frameworks  • Row-level security capabilities  • Audit and compliance controls  • Authorization interoperability across the IFS product suite  • Developer enablement — libraries, SDKs, and templates  • Platform adoption across application teams  Leadership responsibilities  • Set the strategic direction for IAM across the platform ecosystem and represent it in the wider engineering and product strategy  • Own platform architecture governance for AuthN and AuthZ, ensuring designs meet security, scale, and compliance requirements  • Uphold engineering excellence — code quality, reliability, and sound technical decision-making across both teams  • Champion security and compliance as design constraints from the start, not afterthoughts  • Represent the IAM customer experience — secure, fast, and easy to use — in every platform decision  • Own reliability and operational excellence for AuthN and AuthZ services, including on-call and incident response posture  • Drive adoption of AI-assisted engineering practices to lift team productivity  • Partner across Product, R&D, and Cloud Operations to align IAM investment with the wider platform roadmap  People responsibilities  • Lead a two-tier organization through two direct-report engineering managers — Authentication and Authorization — each running their own engineering team  • Coach and develop the engineering managers, building their capability to lead and grow their teams  • Own hiring, performance management, and career development across the IAM organization  • Shape team structure and role design to match platform scope as it grows  • Build a global, distributed team culture that works effectively across time zones  • Create clear paths for talent development and succession within the IAM leadership team  Commercial responsibilities  • Own the IAM organization's budget, including headcount planning and vendor spend  • Evaluate and select third-party identity and authorization technologies, weighing build-versus-buy trade-offs against cost, risk, and time to value  • Justify platform investment with a clear view of cost, risk reduction, and business impact  • Manage vendor relationships and contracts tied to IAM tooling and services  • Prioritize the roadmap to deliver the best return on engineering investment across AuthN and AuthZ