Lead, Identity & Access Management (IAM) at Commvault. . Location: United States. Recruitment Fraud Alert. . We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number. . . What to know:. . . Commvault does . not. conduct interviews by email or text.. . We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day.. . . If you suspect a recruiting scam, please contact us at . [email protected]. . . . . About Commvault. . . Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. The company’s unique AI-powered platform combines best-in-class data protection, exceptional data security, advanced data intelligence, and lightning-fast recovery across any workload or cloud at the lowest TCO. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data. . The Opportunity.... . As the IAM Lead at Commvault, you will help shape and advance the strategy, architecture, and hands-on execution of Identity & Access Management across our cloud, SaaS, and enterprise environments. This is a deeply technical role focused on strengthening authentication, authorization, and identity governance controls that protect our workforce, platforms, and customers.. . A core focus of this role is ownership and advancement of our SailPoint identity governance platform. You will drive identity lifecycle automation, access certifications, role modeling, and entitlement governance to ensure controls scale effectively with business growth.. . You will act as the senior technical lead for IAM—working closely with Engineering, Cloud, Infrastructure, HR, and Security teams to design and implement secure, scalable, and user-centered identity solutions. This is a hands-on individual contributor role with significant enterprise impact and no direct people management responsibilities.. . . . What You’ll Do.... . . Lead the evolution of Commvault’s IAM architecture across workforce, privileged, and service identities.. . Own and enhance SailPoint (Identity Governance & Administration), including lifecycle workflows (joiner/mover/leaver), automated provisioning, role modeling, access certifications, and entitlement governance.. . Ensure SailPoint integrations with HR systems, Active Directory / Entra ID, SaaS platforms, and cloud infrastructure are secure, resilient, and scalable.. . Establish and promote least-privilege access models, RBAC standards, and identity governance guardrails.. . Drive automation across identity lifecycle processes to reduce manual effort and improve control consistency.. . Partner with Cloud and Application teams to embed secure identity patterns into new platforms and services.. . Strengthen privileged access and service identity governance aligned with zero trust principles.. . Identify IAM risks, lead technical remediation efforts, and support security incident response when needed.. . Develop and track metrics related to identity risk, certification outcomes, provisioning efficiency, and control effectiveness.. . Support audit and compliance initiatives (SOC 2, ISO 27001, FedRAMP), with emphasis on governance maturity and evidence readiness.. . . . . Who You Are.... . . 7+ years of experience in IAM, identity governance, or security engineering.. . Strong foundation in IAM concepts: authentication, authorization, federation, SSO, MFA, RBAC/ABAC, and least privilege.. . Hands-on experience with SailPoint (IdentityIQ or IdentityNow), including lifecycle workflows, certifications, provisioning integrations, and role design.. . Solid understanding of integrations between identity governance platforms, HR systems, directories, SaaS applications, and cloud providers.. . Experience with enterprise identity platforms such as Entra ID (Azure AD), Active Directory, or AWS IAM.. . Working knowledge of privileged access management (PAM) and governance of non-human/service identities.. . Comfortable acting as a senior technical voice and influencing stakeholders across engineering and security teams.. . Practical, solution-oriented mindset that balances security, usability, automation, and scalability.. . . . . Nice to Have. . . Experience modernizing or scaling an enterprise IGA program.. . Familiarity with SailPoint customization, workflows, connectors, or rule configuration.. . Experience integrating IAM and IGA controls into CI/CD pipelines and cloud-native workloads.. . Background in zero trust architecture and identity-centric security models.. . Security or identity certifications (CISSP, CISM, CCSP, SailPoint certifications).. . Experience supporting external audits and regulatory assessments.. . . . . You’ll love working here because.... . . Continuous professional development, product training, and career pathing. . An inclusive company culture, opportunity to join our Employee Groups . . Generous benefits supporting your health, financial security, and work-life balance . . Employee stock purchase plan (ESPP). . . . . Ready to #makeyourmark at Commvault? Apply now! . . . . #LI-JS1. . #LI-Remote. Thank you for your interest in Commvault. Reflected below is the minimum and maximum base salary range for this role. At Commvault we use broad salary ranges in our job postings to reflect the diverse levels of expertise and experience among our candidates and is not reflective of the total compensation and benefits package. The specific salary offered will be determined based on your unique qualifications, including your relevant experience, skills, and the value you bring to the role. While the range provides a general idea of the compensation, it is important to note that placements within the range are not automatic and will be carefully considered to ensure a fair and competitive offer. We are committed to rewarding talent and experience.. Pay Range. $93,500. - . $182,850. . USD. . Commvault is an equal opportunity workplace and is an affirmative action employer. We are always committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status and we will not discriminate against on the basis of such characteristics or any other status protected by the laws or regulations in the locations where we work.. . Commvault’s goal is to make interviewing inclusive and accessible to all candidates and employees. If you have a disability or special need that requires accommodation to participate in the interview process or apply for a position at Commvault, please email . [email protected]. For any inquiries not related to an accommodation please reach out to . [email protected]. .. . . . Commvault's Privacy Policy . . .
Lead, Identity & Access Management (IAM) at Commvault