Manager, Identity and Access Management (IAM)

The Manager, Identity and Access Management (IAM) is a pivotal leadership role within Tampa General Hospital, strategically focused on safeguarding enterprise identity and access systems. This position oversees two critical teams - Identity Engineering and Epic Security - entrusted with managing identity lifecycle processes, authentication, privileged access, and securing clinical application systems. By ensuring the accurate design, provisioning, monitoring, and governance of access to enterprise systems, sensitive information, and clinical applications, the manager supports the hospital's operational integrity and security initiatives. As leader of the Identity Engineering team, the manager guides the deployment and optimization of technologies enabling secure access management. This encompasses directories, single sign-on solutions, multifactor authentication, privileged access management, certificates, and machine identities. The position drives advancements in authentication methods, including passwordless access, federation, conditional access, and related identity security controls, leveraging platforms such as Ping Identity, CyberArk, Venafi, and Microsoft Entra ID and Active Directory. Additionally, the manager directs the Epic Security team, ensuring that access to the organization's electronic health record and clinical systems aligns with workforce roles, least privilege principles, and regulatory requirements. Responsibilities include role and template design, access change management, privileged access oversight, and periodic reviews in collaboration with clinical and operational stakeholders. Throughout both functions, the manager develops IAM strategies, implements technical standards, fosters team collaboration, and ensures compliance with healthcare security regulations like HIPAA. This role combines technical expertise, healthcare application security knowledge, and leadership skills to enhance Tampa General's cybersecurity posture and protect patient and organizational information.

Join Tampa General Hospital in a critical cybersecurity leadership role responsible for protecting access to the systems and information that support patient care. The Manager of Identity and Access Management leads two essential teams, Identity Engineering and Epic Security, bringing together enterprise identity technologies and the specialized security required for one of the organization’s most critical clinical platforms. This leader will shape the future of identity at TGH, advancing modern authentication, privileged access, identity governance, automation, and Epic access security while building and developing high-performing teams. The role offers the opportunity to influence cybersecurity strategy at enterprise scale while balancing security, clinical operations, workforce experience, and regulatory requirements in a complex healthcare environment.

Essential Functions:

• Provide strategic and operational leadership for Tampa General Hospital’s enterprise Identity and Access Management (IAM) program, overseeing Identity Engineering and Epic Security teams responsible for maintaining service security, reliability, and effectiveness.
• Develop and execute a multi-year IAM strategy and roadmap aligned with organizational priorities, cybersecurity standards, clinical operations, technology architecture, and regulatory requirements.
• Lead and manage specialized technical teams by establishing priorities, providing workforce planning and recruitment, managing performance, ensuring professional development, and maintaining accountability for project delivery.
• Oversee the design, implementation, integration, and operation of enterprise identity capabilities, including identity lifecycle management, authentication, single sign-on, multifactor authentication, role-based access control, access certification, and privileged access.
• Provide governance for Epic Security, including role and template design, access provisioning, segregation of duties, access reviews, and alignment of access with clinical and operational responsibilities.
• Establish and maintain enterprise identity lifecycle processes, such as joiner, mover, and leaver activities; workforce and non-workforce identities; role and entitlement management; provision and deprovision processes; and timely removal of inappropriate access.
• Lead enterprise cryptographic modernization and post-quantum cryptography readiness by assessing risks, planning transitions, setting technology standards, and implementing quantum-resistant capabilities across critical systems.
• Direct enterprise Public Key Infrastructure (PKI) and machine identity security to ensure certificate discovery, issuance, renewal, policy enforcement, automation, and prevention of service interruptions.
• Ensure IAM and Epic Security controls comply with legal, regulatory, and organizational requirements such as HIPAA, privacy policies, audit standards, and recognized cybersecurity frameworks.
• Oversee risk-based governance processes, including access reviews, segregation-of-duties analyses, dormant-account management, and remediation of unauthorized access or control weaknesses.
• Influence enterprise-wide adoption of IAM standards and controls by collaborating across departments to resolve competing operational, clinical, technology, and workforce priorities through risk-based decision-making.
• Maintain awareness of emerging identity threats, authentication methods, cryptographic developments, and regulatory expectations, integrating significant advancements into IAM strategies and investment roadmaps.

Education Qualifications:

• Bachelor’s Degree Cybersecurity
• Bachelor’s Degree IT
• Bachelor’s Degree Related Field

Licenses and Certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Identity and Access Manager (CIAM)
• Certified Cloud Security Professional (CCSP)
• Certified Enterprise Architect
• CISA: Certified Information Systems Auditor
• GSE: GIAC Security Expert
• Security+
• Other Cybersecurity Related Cert

Experience Qualifications:

• 7+ years of progressive experience in identity and access management, cybersecurity, information security, or related technology disciplines.
• 3+ years of management experience, including responsibility for technical teams.
• An equivalent combination of education and years of experience.

Skills and Abilities:

• Extensive expertise in enterprise Identity and Access Management (IAM) frameworks and technologies, encompassing identity governance, lifecycle management, authentication, authorization, privileged access management (PAM), and modern access protocols like SAML, OAuth, OpenID Connect, and passkeys/passwordless authentication.
• Proven ability to lead and modernize complex enterprise IAM initiatives, implementing scalable strategies aligned with cybersecurity priorities, regulatory requirements, and organizational risk while ensuring seamless integration across multi-faceted teams and systems.
• Strong proficiency with identity and privileged access management platforms such as CyberArk, Ping Identity, Microsoft Active Directory, Microsoft Entra ID, and Venafi, including machine identity and certificate lifecycle management.
• In-depth knowledge of healthcare-specific cybersecurity requirements, including HIPAA compliance, privacy regulations, and the unique security demands of electronic health records (EHR) and clinical systems.
• Proficiency in applying recognized cybersecurity frameworks and standards like NIST Cybersecurity Framework, CIS Controls, and ISO 27001 to establish practical IAM policies, procedures, and technical patterns across clinical and enterprise environments.
• Exceptional analytical and risk management skills for identifying and resolving access issues, evaluating the intersection of risk, technical architecture, and operational impacts, and making independent risk-based decisions that influence clinical and business continuity.
• Demonstrated leadership capabilities, including guiding specialized technical teams, managing budgets, driving talent development, and ensuring optimized IAM service delivery while influencing change across organizational boundaries.
• Outstanding communication and executive influence abilities, translating complex identity and cybersecurity challenges into actionable insights for diverse stakeholders, fostering consensus, and advancing adoption of robust IAM practices while prioritizing workforce and operational needs.