Head of Identity & Access Management (IAM)

Envision Employment Solutions is currently looking for a Head of Identity & Access Management (IAM) for one of our partners, a leading Digital Bank. Every login, every customer authentication, every privileged access request runs through the architecture you design, from a blank page. You're building both sides of identity at once, the customer-facing experience that has to feel invisible and secure at the same time, and the workforce controls that keep the bank's critical infrastructure locked down.

Responsibilities

Design and build the enterprise IAM and CIAM framework from scratch, defining identity lifecycle workflows, authentication standards, and authorization models; Partner with the Product team to architect secure, high-availability, low-friction consumer authentication experiences, including multi-factor authentication, biometric integration, and passwordless options; Implement workforce identity controls, Single Sign-On (SSO), Enterprise Directory services, and automated Privileged Access Management (PAM) workflows to protect critical infrastructure and cloud environments; Partner with cloud security and network engineering to enforce continuous identity verification, least-privilege access, and conditional access policies across cloud-native microservices; Automate user provisioning, de-provisioning, and role-based access control (RBAC) to eliminate identity sprawl and streamline internal HR-to-IT workflows; Establish regular access recertification campaigns, audit logging, and reporting mechanisms to satisfy internal reviews and CBE regulatory examinations

Requirements

10+ years of cumulative IT and information security experience; 4 to 5 years specializing in IAM, CIAM, and PAM architecture and leadership within banking, financial services, or advanced fintech environments; Hands-on expertise with modern identity protocols (OIDC, OAuth 2.0, SAML); Experience with cloud identity providers (e.g., Azure AD/Entra ID, Okta, Ping Identity) and modern CIAM architectures; Solid understanding of Central Bank of Egypt (CBE) cybersecurity circulars, authentication requirements, and data privacy guidelines; A builder mindset, thriving in a fast-paced, from-scratch environment; Excellent cross-functional collaboration skills, bridging product engineering, security operations, and executive stakeholders

Nice to have

Professional credentials such as CISSP, Certified Identity and Access Manager (CIAM), or vendor-specific expert certifications (strongly preferred)