Senior Level Identity And Access Management Jobs
Senior level identity and access management jobs put experienced professionals in charge of enterprise-wide security architecture, privileged access governance, and the engineering or analyst teams that operationalize it. Hiring is concentrated across Technology & Software, Healthcare & Medical Services, and Retail, with a strong mix of on-site, hybrid, and remote roles, and employers like FINRA, Fastly, and Gartner hiring at this level now.
Find JobsOverview
Showing 5 of 12+ Senior Level Identity And Access Management jobs
Job Description
This role is offered as hybrid in Seattle, WA. Candidates must be available to work in office at the Nordstrom corporate headquarters a minimum of 4 days/week to be considered for this position.
We are seeking an accomplished Principal Security Engineer to serve within Nordstrom's Cybersecurity & Privacy Organization (CPO), focused on Identity & Access Management (IAM). This role will drive the architecture, strategy, and evolution of enterprise identity systems — including workforce identity, customer identity, privileged access, and the emerging discipline of agentic identity (machine-to-machine and AI agent credentials, authorization, and governance). The ideal candidate will be a seasoned identity practitioner with deep technical expertise, a passion for mentoring, and the ability to set IAM strategy at the highest levels of the organization. The goal is to make identity a foundational enabler of secure business innovation, operational resilience, and safe adoption of AI agents and automation.
Key Responsibilities:
- Lead the design and architecture of enterprise IAM solutions across cloud, on-premises, and hybrid environments, including identity governance, authentication, authorization, and directory services.
- Set technical direction and strategy for IAM initiatives, including zero trust identity, cloud IAM, agentic identity frameworks, and identity automation programs.
- Serve as the principal technical advisor to security leadership, engineering teams, and business stakeholders on identity architecture, access risk management, and emerging identity threats.
- Drive identity innovation through evaluation and integration of cutting-edge technologies, including AI/ML-based identity analytics, adaptive access controls, and identity orchestration platforms.
- Define and lead Nordstrom's agentic identity strategy — establishing the standards, architecture, and governance for how AI agents, bots, and automated services are credentialed, authorized, scoped, and audited across the enterprise.
- Partner with platform engineering, AI/ML, and application teams to operationalize agentic identity controls, ensuring AI agents operate under least-privilege, are attributable, and have auditable access lifecycles.
- Maintain deep, current knowledge of the identity threat landscape — including credential-based attacks, identity supply chain risks, OAuth/token abuse, and emerging risks from agentic AI systems — and translate that intelligence into defensive priorities for Nordstrom.
- Continuously assess Nordstrom's IAM posture, identifying capability gaps in identity governance, privileged access, and agentic identity and recommending new tools, vendors, or partnerships to close them.
- Lead cross-functional identity architecture reviews and threat modeling exercises for critical business systems, with particular focus on access patterns, entitlement creep, and agentic access models.
- Develop and maintain enterprise IAM standards, design patterns, and reference architectures aligned with industry best practices (NIST 800-63, OAuth 2.0/OIDC, SCIM, SPIFFE/SPIRE) and regulatory requirements.
- Mentor and guide IAM engineers and analysts; foster a culture of technical excellence and continuous learning within the identity engineering organization.
- Mentor the Cybersecurity Engineering team on identity-first security thinking and the emerging discipline of agentic identity — helping practitioners understand how to secure, govern, and audit non-human identities at scale.
- Collaborate with enterprise architecture, infrastructure, application development, and DevSecOps teams to embed identity controls throughout the technology lifecycle.
- Lead identity-related incident response efforts for critical events such as credential compromise, privilege escalation, and identity infrastructure attacks, providing technical expertise and strategic guidance.
- Conduct advanced identity research and vulnerability analysis; develop proof-of-concepts for agentic identity governance, decentralized identity, and adaptive access models.
- Partner with compliance, audit, and risk management teams to ensure IAM controls meet regulatory requirements (e.g., PCI-DSS, CCPA, SOX) and support auditability of both human and non-human access.
- Track and communicate IAM program metrics, technical roadmaps, and identity risk posture to executive leadership and board-level stakeholders.
- Drive automation and tooling initiatives to scale identity operations, reduce manual provisioning and access review workflows, and improve identity threat detection and response capabilities.
Required Qualifications:
- Bachelor's degree in Computer Science, Information Security, Engineering, or related field; Master's degree preferred.
- 12+ years of experience in information security, with at least 5 years focused on identity & access management in a senior or principal technical leadership role.
- Deep expertise in identity & access management domains: workforce and customer identity, privileged access management, identity governance, federation, directory services, and emerging agentic identity patterns.
- Proven experience architecting and implementing IAM solutions in large-scale enterprise environments, including cloud-native identity services (AWS IAM, Azure Entra ID, GCP IAM).
- Strong understanding of security frameworks and standards (NIST 800-63, OAuth 2.0, OpenID Connect, SAML, SCIM, SPIFFE/SPIRE, FIDO2/WebAuthn).
- Demonstrated experience with IAM tools and technologies: IGA platforms, PAM solutions, CIAM, SSO/federation, identity orchestration, and identity threat detection and response (ITDR) tools.
- Demonstrated experience designing identity solutions for non-human entities (service accounts, API keys, machine identities, AI agents) and a strong willingness to lead in the agentic identity space.
- Exceptional communication and stakeholder management skills with ability to influence at all organizational levels.
- Relevant certifications required (e.g., CISSP, GIAC, CCSP, OSCP, or equivalent advanced certifications).
Preferred Skills:
- Experience driving IAM transformations in retail, e-commerce, or other large-scale consumer-facing environments.
- Deep knowledge of identity-as-code practices, infrastructure-as-code for IAM, and CI/CD identity integration.
- Experience with identity orchestration platforms, identity fabric architectures, and AI-enhanced identity analytics solutions.
- Familiarity with agentic AI identity challenges, including agent credential management, delegation chains, least-privilege scoping for autonomous systems, and non-human identity governance.
- Experience evaluating IAM and agentic identity vendors and technologies.
- Proven track record of mentoring and developing identity engineering professionals in complex, matrixed organizations.
- Strong understanding of identity supply chain risks, third-party identity federation, and vendor IAM integration patterns.
- Ability to translate complex technical security concepts into business risk language for executive and non-technical audiences.
- Active participation in security community through speaking engagements, publications, or open-source contributions.
Pay Range Details
The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations.
Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.
We’ve got you covered…
Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:
- Medical/Vision, Dental, Retirement and Paid Time Away
- Life Insurance and Disability
- Merchandise Discount and EAP Resources
A few more important points...
The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.
For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site.
Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com.
Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.
Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.
Nordstrom keeps job postings open for at least one day after the posting date.
© 2026 Nordstrom, Inc
Job Description
This role is offered as hybrid in Seattle, WA. Candidates must be available to work in office at the Nordstrom corporate headquarters a minimum of 4 days/week to be considered for this position.
We are seeking an accomplished Principal Security Engineer to serve within Nordstrom's Cybersecurity & Privacy Organization (CPO), focused on Identity & Access Management (IAM). This role will drive the architecture, strategy, and evolution of enterprise identity systems — including workforce identity, customer identity, privileged access, and the emerging discipline of agentic identity (machine-to-machine and AI agent credentials, authorization, and governance). The ideal candidate will be a seasoned identity practitioner with deep technical expertise, a passion for mentoring, and the ability to set IAM strategy at the highest levels of the organization. The goal is to make identity a foundational enabler of secure business innovation, operational resilience, and safe adoption of AI agents and automation.
Key Responsibilities:
- Lead the design and architecture of enterprise IAM solutions across cloud, on-premises, and hybrid environments, including identity governance, authentication, authorization, and directory services.
- Set technical direction and strategy for IAM initiatives, including zero trust identity, cloud IAM, agentic identity frameworks, and identity automation programs.
- Serve as the principal technical advisor to security leadership, engineering teams, and business stakeholders on identity architecture, access risk management, and emerging identity threats.
- Drive identity innovation through evaluation and integration of cutting-edge technologies, including AI/ML-based identity analytics, adaptive access controls, and identity orchestration platforms.
- Define and lead Nordstrom's agentic identity strategy — establishing the standards, architecture, and governance for how AI agents, bots, and automated services are credentialed, authorized, scoped, and audited across the enterprise.
- Partner with platform engineering, AI/ML, and application teams to operationalize agentic identity controls, ensuring AI agents operate under least-privilege, are attributable, and have auditable access lifecycles.
- Maintain deep, current knowledge of the identity threat landscape — including credential-based attacks, identity supply chain risks, OAuth/token abuse, and emerging risks from agentic AI systems — and translate that intelligence into defensive priorities for Nordstrom.
- Continuously assess Nordstrom's IAM posture, identifying capability gaps in identity governance, privileged access, and agentic identity and recommending new tools, vendors, or partnerships to close them.
- Lead cross-functional identity architecture reviews and threat modeling exercises for critical business systems, with particular focus on access patterns, entitlement creep, and agentic access models.
- Develop and maintain enterprise IAM standards, design patterns, and reference architectures aligned with industry best practices (NIST 800-63, OAuth 2.0/OIDC, SCIM, SPIFFE/SPIRE) and regulatory requirements.
- Mentor and guide IAM engineers and analysts; foster a culture of technical excellence and continuous learning within the identity engineering organization.
- Mentor the Cybersecurity Engineering team on identity-first security thinking and the emerging discipline of agentic identity — helping practitioners understand how to secure, govern, and audit non-human identities at scale.
- Collaborate with enterprise architecture, infrastructure, application development, and DevSecOps teams to embed identity controls throughout the technology lifecycle.
- Lead identity-related incident response efforts for critical events such as credential compromise, privilege escalation, and identity infrastructure attacks, providing technical expertise and strategic guidance.
- Conduct advanced identity research and vulnerability analysis; develop proof-of-concepts for agentic identity governance, decentralized identity, and adaptive access models.
- Partner with compliance, audit, and risk management teams to ensure IAM controls meet regulatory requirements (e.g., PCI-DSS, CCPA, SOX) and support auditability of both human and non-human access.
- Track and communicate IAM program metrics, technical roadmaps, and identity risk posture to executive leadership and board-level stakeholders.
- Drive automation and tooling initiatives to scale identity operations, reduce manual provisioning and access review workflows, and improve identity threat detection and response capabilities.
Required Qualifications:
- Bachelor's degree in Computer Science, Information Security, Engineering, or related field; Master's degree preferred.
- 12+ years of experience in information security, with at least 5 years focused on identity & access management in a senior or principal technical leadership role.
- Deep expertise in identity & access management domains: workforce and customer identity, privileged access management, identity governance, federation, directory services, and emerging agentic identity patterns.
- Proven experience architecting and implementing IAM solutions in large-scale enterprise environments, including cloud-native identity services (AWS IAM, Azure Entra ID, GCP IAM).
- Strong understanding of security frameworks and standards (NIST 800-63, OAuth 2.0, OpenID Connect, SAML, SCIM, SPIFFE/SPIRE, FIDO2/WebAuthn).
- Demonstrated experience with IAM tools and technologies: IGA platforms, PAM solutions, CIAM, SSO/federation, identity orchestration, and identity threat detection and response (ITDR) tools.
- Demonstrated experience designing identity solutions for non-human entities (service accounts, API keys, machine identities, AI agents) and a strong willingness to lead in the agentic identity space.
- Exceptional communication and stakeholder management skills with ability to influence at all organizational levels.
- Relevant certifications required (e.g., CISSP, GIAC, CCSP, OSCP, or equivalent advanced certifications).
Preferred Skills:
- Experience driving IAM transformations in retail, e-commerce, or other large-scale consumer-facing environments.
- Deep knowledge of identity-as-code practices, infrastructure-as-code for IAM, and CI/CD identity integration.
- Experience with identity orchestration platforms, identity fabric architectures, and AI-enhanced identity analytics solutions.
- Familiarity with agentic AI identity challenges, including agent credential management, delegation chains, least-privilege scoping for autonomous systems, and non-human identity governance.
- Experience evaluating IAM and agentic identity vendors and technologies.
- Proven track record of mentoring and developing identity engineering professionals in complex, matrixed organizations.
- Strong understanding of identity supply chain risks, third-party identity federation, and vendor IAM integration patterns.
- Ability to translate complex technical security concepts into business risk language for executive and non-technical audiences.
- Active participation in security community through speaking engagements, publications, or open-source contributions.
Pay Range Details
The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations.
Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.
We’ve got you covered…
Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:
- Medical/Vision, Dental, Retirement and Paid Time Away
- Life Insurance and Disability
- Merchandise Discount and EAP Resources
A few more important points...
The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.
For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site.
Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com.
Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.
Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.
Nordstrom keeps job postings open for at least one day after the posting date.
© 2026 Nordstrom, Inc
See All 12 Senior Level Identity And Access Management Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSenior Level Identity And Access Management Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Healthcare & Medical Services
- Retail
- Science & Research
- Media & Entertainment
Senior Level Identity And Access Management Jobs: Frequently Asked Questions
How do I get a senior level identity and access management job?
Employers at this level look for candidates who have owned IAM program design end-to-end, not just supported it. Deep hands-on experience with platforms like SailPoint, Okta, CyberArk, or Azure AD carries weight, as does the ability to articulate governance decisions to both security teams and business stakeholders. Demonstrating that you have mentored engineers or led cross-functional rollouts gives you a clear edge over candidates with equivalent technical skills alone.
Which companies hire senior level identity and access managements?
Companies hiring senior level identity and access managements right now include FINRA, Fastly, and Gartner, based on current listings on Migrate Mate as of September 2026. Hiring at this level covers large enterprises with complex compliance environments, federal contractors managing zero-trust mandates, and mid-size technology firms scaling their security infrastructure.
Are there remote senior level identity and access management jobs?
Yes, and remote availability is notably strong at this level. About 64% of senior level identity and access management openings are remote or hybrid as of September 2026, reflecting how widely organizations have accepted distributed security leadership. Fully on-site roles tend to cluster in regulated industries, such as defense, government contracting, and certain financial services firms with strict data-handling requirements.
What makes a identity and access management role senior level?
Senior level identity and access management roles are defined by ownership rather than execution. You set the architecture and governance framework, not just configure systems built by others. Expect responsibility for platform strategy across authentication, authorization, and lifecycle management, accountability for audit and compliance outcomes, and a formal or informal mandate to mentor junior engineers and align IAM programs with broader enterprise security goals.
Which industries hire the most senior level identity and access managements?
Senior Level identity and access management roles concentrate in Technology & Software, Healthcare & Medical Services, and Retail, based on current listings on Migrate Mate as of September 2026. These sectors drive demand because they operate at the intersection of large user populations, strict regulatory requirements, and high-value data assets that make robust access governance both a compliance necessity and a core security priority.