Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 56 days ago

IT Security Identity & Access Technical Leader

Pitney Bowes41 open roles

Where
US CT Shelton
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Security Identity & Access Technical LeaderPitney Bowes · US CT Shelton

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Pitney Bowes's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Pitney Bowes postings stay open a median of 6 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 56 days ago

Pitney Bowes median: 6 days open

The posting

We’re hiring at Pitney Bowes, where top talent builds meaningful careers and lasting impact. We Move fast, Deliver excellence, and Win together…that’s The Pitney Bowes way. Here, how we work matters just as much as what we achieve.

We’re looking for people who:

  • Act with urgency, accountability, and purpose
  • Deliver high quality work with consistency and pride
  • Collaborate effectively and elevate those around them
  • Focus on outcomes that drive impact and growth

Job Description:

You Are:

A Security Identity & Access Technical Leader responsible for designing, implementing, and governing the enterprise-wide Identity and Access Management (IAM) program. You partner across security, infrastructure, HR, engineering, and business teams to build a modern, scalable identity ecosystem, winning together to deliver secure, seamless access experiences across the organization.

You Will:

  • Develop and maintain the organization’s Identity & Access Management (IAM) strategy, roadmap, and governance model, driving alignment and shared accountability across teams.
  • Architect and oversee solutions for security, authentication, authorization, privileged access, SSO, MFA, SaaS security posture, API access controls, conditional access policies, and lifecycle management, delivering excellence in secure design and execution.
  • Technically lead modernization efforts such as Zero Trust, passwordless authentication, identity automation, Attribute-Based Access Controls, AI-driven threat detection and response, identity models for AI agents, and continuous AI behavioral authentication, helping the organization move fast while staying secure.
  • Define standards for API security, including API identity and access controls, secure API key and token management, least-privilege access for machine identities, and monitoring and anomaly detection for API usage.
  • Establish secure patterns for API authentication and authorization, including OAuth, OIDC, and token lifecycle management.
  • Lead the design and operation of Privileged Access Management (PAM) solutions (CyberArk).
  • Ensure projects are delivered within scope, budget, and schedule, balancing speed with precision.
  • Lead a technical team supporting user access provisioning, deprovisioning, terminations, and password resets across multiple SaaS and on-premise applications (Dell OneIdentity, Salesforce, SAP, Workday), fostering collaboration and continuous improvement.
  • Perform regular audits to ensure security protocols are followed and risks are proactively addressed.
  • Ensure technical solutions comply with privacy laws and regulatory requirements.
  • Investigate and respond to irregularities in system access with urgency and rigor.
  • Establish metrics to ensure IAM solutions meet both security and business objectives.
  • Plan, test, and implement configuration changes efficiently and effectively.
  • Document IAM processes and procedures to enable consistency and scalability.
  • Escalate and resolve issues in a timely manner, maintaining a high standard of reliability and responsiveness.

Your background:

As a Identity Lead, you have:

  • 7-12 plus years professional experience in IT and/or Cybersecurity with an Enterprise Identity Management Team
  • Deep expertise in IAM frameworks, Zero Trust, and modern identity protocols (SAML, OAuth, OIDC, SCIM).
  • Experience with enterprise scale IAM platforms, On Premise, and Cloud Platforms.
  • Strong understanding of cloud identity (Azure AD/Entra, AWS IAM, GCP IAM, SaaS and API).
  • Knowledge of security architecture, threat modeling, and identity attack vectors.
  • Significant demonstrated knowledge of Active Directory and Entra processes and tools to include patching, hardening, configuration, and risk management
  • Demonstrated communication skills to communicate, persuade, influence without authority, and handle challenging conversations
  • Significant demonstrated knowledge of Identity management processes and tools to include Active Directory, Entra ID, Intune, Dell OneIdentity, Semperis, CyberArk, SAP, Salesforce and Workday.
  • Demonstrated knowledge in recent advances in IAM technology.

Preferred

  • Bachelor’s Degree in Information Security, Computer Science or equivalent
  • Information Security Certifications such as CISSP, CRISC, CIMP and/or CISM

Knowledgeable and experienced in:

  • Active Directory (Including Azure A/D Synchronization)
  • Entra ID (Including App Registration, Passwordless Authentication, Enterprise Application SSO and Conditional Access Policies)Intune
  • OKTA
  • Semperis
  • CyberArk
  • Zscaler AppTotal
  • Automation Tools including Task Scheduler and PowerShell
  • InfoBlox BloxOne
  • Microsoft PKI, NPS, SCCM Patching
  • Illumio
  • Microsoft Defender
  • Dell OneIdentity (Configuration, Monitoring, Migration and Implementation)
  • Microsoft NPS
  • JIRA Service Desk
  • Use of AI

Location:

This is a hybrid role, with 4 days in the Shelton, CT office required. (No relocation assistance offered.)

Sponsorship:

Must be legally authorized to work in the US. Employer will not sponsor position for employment visa status now or in the future (ex. H-1B).

We will:

• Provide the opportunity to grow and develop your career • Offer an inclusive environment that encourages diverse perspectives and ideas • Deliver challenging and unique opportunities to contribute to the success of a transforming organization • Offer comprehensive benefits globally (PB Benefits and Wellbeing Programs)

Pitney Bowes is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard for race, color, sex, religion, national origin, age, disability (mental or physical), veteran status, sexual orientation, gender identity, or any other consideration made unlawful by applicable federal, state, or local laws.

All qualified applicants, including Veterans and Individuals with Disabilities, are encouraged to apply.

All interested individuals must apply online. Individuals with disabilities who cannot apply via our online application should refer to the alternate application options via our Individuals with Disabilities link.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Pitney Bowes's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Pitney Bowes's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Pitney Bowes's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.