About this role
Envision Employment Solutions is currently looking for a Head of Identity & Access Management (IAM) for one of our partners, a leading Digital Bank!
THE ROLE
Every login, every customer authentication, every privileged access request runs through the architecture you design, from a blank page. You're building both sides of identity at once, the customer-facing experience that has to feel invisible and secure at the same time, and the workforce controls that keep the bank's critical infrastructure locked down. Get it right, and identity becomes the thing nobody thinks about because it just works, safely, every time.
WHAT YOU’LL DO
Design and build the enterprise IAM and CIAM framework entirely from scratch, defining modern identity lifecycle workflows, authentication standards, and authorization modelsPartner with the Product team to architect secure, high-availability, low-friction consumer authentication experiences, including multi-factor authentication, biometric integration, and passwordless options, balancing rigorous bank security with a seamless digital banking experienceImplement robust workforce identity controls, Single Sign-On (SSO), Enterprise Directory services, and automated Privileged Access Management (PAM) workflows to protect critical infrastructure and cloud environmentsPartner with cloud security and network engineering to enforce continuous identity verification, least-privilege access, and conditional access policies across cloud-native microservicesAutomate user provisioning, de-provisioning, and role-based access control (RBAC) to eliminate identity sprawl and streamline internal HR-to-IT workflowsEstablish regular access recertification campaigns, audit logging, and reporting mechanisms to satisfy internal reviews and CBE regulatory examinations
WHAT WE’RE LOOKING FOR
10+ years of cumulative IT and information security experience, including 4 to 5 years specializing in IAM, CIAM, and PAM architecture and leadership within banking, financial services, or advanced fintech environmentsHands-on expertise with modern identity protocols (OIDC, OAuth 2.0, SAML), cloud identity providers (e.g., Azure AD/Entra ID, Okta, Ping Identity), and modern CIAM architecturesSolid understanding of Central Bank of Egypt (CBE) cybersecurity circulars, authentication requirements, and data privacy guidelinesProfessional credentials such as CISSP, Certified Identity and Access Manager (CIAM), or vendor-specific expert certifications are strongly preferredA builder mindset, thriving in a fast-paced, from-scratch environment, able to balance extreme security rigor for financial data with rapid, agile product deliveryExcellent cross-functional collaboration skills, bridging product engineering, security operations, and executive stakeholders
YOU’LL THRIVE HERE IF YOU
You'd rather architect identity from first principles than patch together an inherited mess of directories and permissionsYou believe a login should feel effortless to the customer and be uncompromising underneathYou treat least-privilege access as a default, not an exception you get to when there's timeYou can translate an identity architecture decision into something both a regulator and a product team understandYou want to build the layer that every other system in the bank ultimately trusts