Manager Identity and Access Management - Cyber Security & TSOC

FirstEnergy at a Glance We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers’ lives brighter, the environment better and our communities stronger. FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts. About the Opportunity This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. [SC00] Position Overview We’re looking for a strategic, technically skilled leader to shape the future of identity and access management platforms at FirstEnergy. In this role, you’ll lead a talented team of system administrators, driving innovation in identity, authorization and access mgmt for both internal and external users. The Mgr IAM is responsible for ensuring that Service Level Agreements are being met, as well as evaluating new technologies and processes for use within the five IAM pillars. You’ll work closely with teams across Cybersecurity, IT, HR, Tx, Dx, Supply Chain and other key business stakeholders to deliver secure, scalable solutions in a hybrid environment. Key Responsibilities Lead the Identity & Access Management (IAM) program, ensuring secure and efficient management of user identities, authentication, authorization, and access across enterprise systems. Develop and execute IAM strategy, roadmap, and operating model aligned with cybersecurity, business, and regulatory requirements. Manage a talented team responsible for identity lifecycle, including onboarding, transfers, role changes, and offboarding of employees, contractors; in coordination with HR and IT. Maintain a high level of technical knowledge of platforms supported by attending webinars, conferences and workshops; reviewing professional publications and research and establishing personal networks Responsible for managing staff performance by setting objectives, goals, priorities, tracking performance and providing feedback. Assists in personal growth of staff through individual development plans, mentoring, coaching and stretch assignments. Oversee the management of the infrastructure, hardware and software including their SLAs required to support all aspects of the IAM pillars: Identity Governance, Access Mgmt, Privileged Access Mgmt, Password Mgmt and Identity Analytics and Intelligence. Lead enterprise authentication services including Multi-Factor Authentication (MFA), Single Sign-On (SSO), Conditional Access, federation services, and passwordless authentication technologies. Establish and enforce role-based access control (RBAC) and least privilege principles across information technology and operational technology environments. Ensure compliance with regulatory standards. Ensure adherence to cybersecurity, data governance and data loss prevention policies. Enforce role-based access control (RBAC) and multi-factor authentication (MFA). Monitor and enforce access controls and permissions. Contribute to long-term technology roadmaps, budget planning, forecasting (both Labor and OTL), and resource allocation. Lead multiple projects simultaneously, ensuring timely delivery within scope and budget. Lead investigations and resolve IAM related incidents. Implement corrective actions and continuous improvement measures, including updating procedures and processes. Provide off-hours support for major incidents and critical project activities as needed. Integrate IAM controls with cyber operations, threat detection, and insider threat monitoring capabilities. Support secure remote access, vendor access management, and privileged access controls for operational technology (OT) and critical infrastructure environments. Maintain strong segregation of duties between IAM operations, access governance, and compliance oversight functions. Serve as the senior IAM leader during regulatory audits, compliance assessments, and cybersecurity reviews. Provide input to contract negotiations for required software, hardware and consulting, to stay within budget. Partner with Cyber Operations, Infrastructure, HR, Compliance, Internal Audit, and business stakeholders to ensure identity controls support business objectives while reducing cyber risk. Champion FE’s Core Values and Behaviors through coaching and by personal example. Qualifications Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technology field. MBA is preferred. Minimum of 7 years experience in cyber security, IT infrastructure or application project roles, with demonstrated leadership experience. Deep knowledge of Identity & Access Management Technologies including but not limited to: Microsoft Entra ID, Azure B2C, Okta, Ping Identity, SailPoint, OneIdentity, PAM Solutions, Token Management Platforms, IT Service Mgmt Platforms, and various Certificate Lifecycle Management platforms Experience with authentication Protocols: SAML, OAuth, OpenID Connect is required. Experience with compliance activities such as: SOX, CIP. Preferred certifications: CISSP, CISM, or IAM-specific certifications. Strong communication (both written and verbal) and interpersonal skills Proven ability to collaborate across departments and influence stakeholders Strategic mindset with a focus on innovation and continuous improvement Ability to effectively manage a large, budgeted portfolio, forecast and re-forecast dollars for both Labor and OTL. Ability to work with all levels of management throughout the organization. Strong knowledge of core architectural design principles to achieve optimal availability and disaster recovery availability. Ability to communicate complex and technical issues to a diverse population, orally and in writing, in an easily understood, authoritative and actionable manner. Demonstrated understanding of best practices in system and application management encompassing strategies, policies, principles, procedures and standards. Benefits, Compensation & Workforce Diversity At FirstEnergy, employees are key to our success. We depend on their talents to meet the challenges of our changing business environment. We are committed to rewarding individual and team efforts through our total rewards philosophy which includes competitive pay plus incentive compensation, a company-sponsored pension plan, 401(k) savings plan with matching employer contribution, a choice of medical, prescription drug, dental, vision, and life insurance programs, as well as skills development training with tuition reimbursement. Please visit our website at www.firstenergycorp.com to learn more about all of our employee rewards programs. FirstEnergy proudly supports workforce diversity. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability. No recruiters or agencies without a previously signed contract. Unable to sponsor or transfer H-1B visas at this time. Safety Safety is a core value for FirstEnergy and is essential to all of our business activities. We ensure employees have the tools, information, and processes to perform their duties in a manner that assures safety for themselves, their co-workers, our customers and the public. Our goals are to provide a safe work environment, to maintain an accident-free, injury-free workplace, and to promote and maintain public safety. To meet these goals, we dedicate ourselves to achieving world-class safety standards. Position Classification Exempt FirstEnergy Human Resources Team