Manager, Identity and Access Management

Duquesne Light Company, headquartered in downtown Pittsburgh, is a leader in providing electric energy and has been in the forefront of the electric energy market, with a history rooted in technological innovation and superior customer service. Today, the company continues its role as a leader in the transmission and distribution of electric energy, providing a secure supply of reliable power to more than half a million customers in southwestern Pennsylvania.

Duquesne Light Company is committed to creating a culture of inclusion. We value and respect the unique differences and experiences of our employees. We believe that our differences lead to better collaboration, innovation and outcomes. We want you to join our team!

We are seeking a skilled and experienced Manager of Identity and Access Management (IAM) to lead and manage our organization's IAM program. This role is pivotal in ensuring the security, compliance, and integrity of our digital systems by overseeing the creation, management, and monitoring of identities and access to our applications, networks, and systems. The ideal candidate will have experience in IAM technologies, a strong understanding of security best practices, and the ability to manage cross-functional teams to deliver IAM initiatives.

Location: Hybrid, downtown Pittsburgh, Pennsylvania.

Key Responsibilities:

• Leadership & Management:
  
  
  
  • Lead and manage the IAM team, providing guidance, mentorship, and training to team members.
  • Develop and execute a comprehensive IAM strategy aligned with organizational goals and security requirements.
  • Ensure the IAM team delivers timely and effective solutions to access management challenges.
  • Collaborate with other departments (e.g., IT, security, compliance) to understand access requirements and implement appropriate controls.
  
  
  
  
• Identity & Access Governance:
  
  
  
  • Oversee the creation, modification, and deletion of user identities across enterprise systems and applications.
  • Implement and manage role-based access control (RBAC), ensuring that access permissions align with job responsibilities and organizational policies.
  • Ensure the continuous monitoring of access rights and the timely removal of unnecessary access.
  • Manage identity lifecycle processes, including onboarding, offboarding, and role changes.
  
  
  
  
• Security & Compliance:
  
  
  
  • Ensure IAM solutions and practices are compliant with industry regulations and standards (e.g., GDPR, HIPAA, SOX).
  • Collaborate with the security team to ensure that access controls align with overall cybersecurity policies and procedures.
  • Conduct periodic audits of user access, permissions, and roles to identify potential security gaps and recommend improvements.
  • Implement multi-factor authentication (MFA), single sign-on (SSO), and other advanced access management solutions to improve security.
  
  
  
  
• Technology & Tools Management:
  
  
  
  • Oversee the deployment, configuration, and maintenance of IAM systems and tools (e.g., Okta, Azure AD, SailPoint, etc.).
  • Stay current on IAM trends, technologies, and best practices, recommending and implementing improvements as necessary.
  • Work with the IT infrastructure and security teams to ensure IAM tools are integrated with other enterprise systems.
  
  
  
  
• Incident Management & Problem Solving:
  
  
  
  • Act as the point of escalation for IAM-related incidents, ensuring quick resolution and minimal business impact.
  • Lead incident response activities related to access control issues and identity management failures.
  • Work with internal teams to troubleshoot and resolve IAM-related issues effectively.
  
  
  
  
• Reporting & Metrics:
  
  
  
  • Develop and present reports on IAM performance, identifying areas for improvement and tracking the progress of initiatives.
  • Establish and monitor key performance indicators (KPIs) to measure the effectiveness of the IAM program.
  
  
  
  

• Education & Experience:
  
  
  
  • Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience).
  • Minimum of 5-7 years of experience in IAM, cybersecurity, or related IT roles, with at least 2-3 years in a leadership position.
  • Proven experience with IAM tools and technologies such as Okta, Microsoft Azure AD, Ping Identity, SailPoint, etc.
  
  
  
  
• Technical Skills:
  
  
  
  • Strong knowledge of IAM concepts such as RBAC, SSO, MFA, identity lifecycle management, and directory services.
  • Hands-on experience with identity management systems and integrations.
  • Understanding of regulatory frameworks and industry standards related to IAM (e.g., NIST, ISO 27001).
  • Experience with IAM-related protocols like LDAP, SAML, OAuth, and OpenID Connect.
  
  
  
  
• Soft Skills:
  
  
  
  • Excellent communication and interpersonal skills to interact with stakeholders at all levels, including technical and non-technical teams.
  • Strong problem-solving abilities, with a keen focus on details and security risks.
  • Leadership and team management skills, with a track record of mentoring and developing team members.
  
  
  
  

Preferred Qualifications:

• IAM certifications such as Certified Identity and Access Manager (CIAM), Certified Information Systems Security Professional (CISSP), or similar.
• Experience with cloud-based IAM solutions (e.g., AWS, Azure).
• Knowledge of automation and orchestration tools for IAM processes.
• Experience in regulatory compliance and audit readiness.

#LI- HYBRID

EQUAL OPPORTUNITY EMPLOYER

Duquesne Light Holdings is committed to providing equal employment opportunity to all people in all aspects of the employment relationship, without discrimination because of race, age, sex, color, religion, national origin, disability, sexual orientation and gender identity or status as a Vietnam era or special disabled veteran or any other unlawful basis, as defined by applicable law, and fostering a workplace free of unlawful discrimination and retaliation. This policy affects decisions including, but not limited to, hiring, compensation, benefits, terms and conditions of employment, opportunities for promotion, transfer, layoffs, return from a layoff, training and development, and other privileges of employment. An integral part of Duquesne Light Holdings' commitment is to comply with all applicable federal, state and local laws concerning equal employment and affirmative action.

Duquesne Light Holdings is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful.

If you need a reasonable accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us at HR@duqlight.com and describe the specific accommodation requested for a disability-related limitation.