The Identity and Access Management Director serves as the expert in identity and access management (IAM) space.  This is a technical position managing the Active Directory, Azure, and Certificate Management areas of IAM.  This person will work to direct and assist across multiple brands and security domains. Director will provide technical solution designs and architecture, and leadership for implementing security capabilities and security controls across those brands.   The Identity and Access Management Director coordinates with application teams, infrastructure team, HR, and other end users to determine requirements, ensuring system improvements are successfully implemented and monitored, and finding ways to increase efficiency and end user productivity.              

Essential Functions:

• To lead a team of 3-15 global resources and/or contractors from across the business that may be globally located while also acting as the local IAM Operations leader for brands located in North America for the areas listed above and possible additional responsibilities in the future. 
• Create, maintain and drive technology strategies and roadmaps within the area of Identity and Access Management (IAM). Partner with the application teams, compliance, end users, and support/operations groups to plan and drive the implementation of the technology and its capabilities.  Responsible for the architecture of the technology, e.g. multi-factor authentication and single sign-on, web access management, certificate templates, and certificate management. Set up best practices and provide directions and guidance of how to utilize the technology and its capabilities.  Drive the development of identity and access specifications, standards, and processes to ensure adequate protection of the enterprise network. In partnership with Security Architecture and Engineering, design the identity and access solutions for applications or systems, and/or provide expertise and consulting to the project teams on identity and access controls needed.  Involve Director-level leadership from business and technology disciplines to present and deliver highly complex solutions as needed. 
• Utilize or develop reusable patterns, practices, and enterprise Identity and Access Management processes that fit within the overall architectural blueprint. Drive requirements analysis activities and participate in the design of highly complex architectural solutions involving multiple logical and/or physical dimensions. Oversee the production and present documentation for these components. Identify opportunities to enhance existing architecture. Assist with drafting the business case including identification of potential business/customer benefits. Recommend when tactical solutions should be replaced or incorporated into sunset and refresh strategies for assigned application(s), project(s) or discipline. Ensure that application sunset and refresh strategies are created and maintained. Lead the assessments and inspections of high complexity physical and/or logical architectural components. Lead analysis of complex system issues.   
• Make recommendations for major/significant changes to the architecture. Ensure the sharing of 'lessons learned'.                                                                                     

Qualifications:

• Bachelor’s degree in Computer Science or related field and an advance degree is preferred.  However, we will consider other factors to include IT and Security certifications and experience when making our hiring decision. 
• 10 + years of experience with identity and access management technologies. 5 + years of development and support experience in Microsoft Azure and Active Directory as an administrator.  4 + years of development and support experience in Certificate Management as an administrator.

Knowledge, Skills & Abilities:

• Demonstrated experience on creating strategy and working across boundaries to improve the security posture for the organization. Extensive technical knowledge and demonstrated experience on identity and access management and security. Demonstrated knowledge and skills operating directory systems in a complex global organization. Strong ability to think strategically and be innovative. Strong ability to look at big pictures, connect the dots and architect the solution. Strong ability to drive and lead conversations and coordinate work among different parties. Strong ability to give direction, identify the path and troubleshoot infrastructure and application problems. Be willing to take risks and be willing to step up and take initiative. Be a quick learner and adapter and be willing to challenge oneself. Excellent communication skills, including communicating with senior leadership, the business community, and all levels of IT.
• Strong technical background on identity and access management including management or leadership previously in those areas listed earlier. Hands on experience in developing and supporting the solutions that this position will manage.   Ability to drive change throughout the organization. Ability to see what needs to change and work with other teams and your team to effect change.

Physical Demands:  Must be able to remain in a stationary position at a desk and/or computer for extended periods of time. 

Travel: Less than 25% with shipboard travel likely

Work Conditions:  Work primarily in a climate-controlled environment with minimal safety/health hazard potential. 

This position is classified as “in-office.”  As an in-office role, it requires employees to work from a designated Carnival office in South Florida Tuesday through Thursday each week. Employees may work from their homes on Mondays and Fridays.  Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area. 

Offers to selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.  

At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival’s discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:

• Health Benefits:
  • Cost-effective medical, dental and vision plans
  • Employee Assistance Program and other mental health resources
  • Additional programs include company paid term life insurance and disability coverage 
• Financial Benefits:
  • 401(k) plan that includes a company match
  • Employee Stock Purchase plan
• Paid Time Off
  • Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion. 
  • Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year.  Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year.  All employees gain additional vacation time with further tenure.
  • Sick Time – All full-time employees receive 80 hours of sick time each year.  Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.  
• Other Benefits
  • Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
  • Personal and professional learning and development resources including tuition reimbursement 
  • On-site preschool program and wellness center at our Miami campus

#LI-Hybrid

#LI-SH1