Head of Identity & Access Management (IAM)

About the role

A leading digital bank is hiring a Head of Identity & Access Management (IAM) through Envision Employment Solutions. The role builds the entire enterprise IAM and customer identity (CIAM) architecture from scratch, covering both the customer-facing login experience and the workforce controls that protect the bank's critical infrastructure.

Key responsibilities

• Design and build the enterprise IAM and CIAM framework from scratch, defining identity lifecycle workflows, authentication standards and authorization models.
• Partner with the Product team to design secure, high-availability, low-friction consumer authentication, including multi-factor authentication, biometrics and passwordless options.
• Implement workforce identity controls, Single Sign-On (SSO), Enterprise Directory services and automated Privileged Access Management (PAM) workflows.
• Work with cloud security and network engineering to enforce continuous identity verification, least-privilege access and conditional access policies across cloud-native microservices.
• Automate user provisioning, de-provisioning and role-based access control (RBAC).
• Set up access recertification campaigns, audit logging and reporting to meet internal reviews and CBE regulatory examinations.

Required profile

• 10+ years of cumulative IT and information security experience, including 4 to 5 years in IAM, CIAM and PAM architecture and leadership within banking, financial services or fintech.
• Solid understanding of Central Bank of Egypt cybersecurity circulars, authentication requirements and data privacy guidelines.
• Credentials such as CISSP, CIAM or vendor-specific expert certifications are strongly preferred.
• A builder mindset, able to balance strict security with agile product delivery, and strong cross-functional collaboration.

Required skills

• Identity protocols: OIDC, OAuth 2.0, SAML
• Cloud identity providers: Azure AD/Entra ID, Okta, Ping Identity
• CIAM architecture and IAM governance