CIAM & IDAM Services & Enablement Lead

Position Summary:

Zoetis is seeking a CIAM & IDAM Services & Enablement Lead to join our Tech & Digital organization within Information Security.

The global Identity, Directory & Access Management (IDAM) team is responsible for ensuring the right individuals have the right access to the right information across Zoetis’ digital ecosystem.

In this role, you will lead the Customer Identity & Access Management (CIAM) function while serving as a trusted advisor and advocate for Identity & Access Management best practices across the organization. Leveraging SAP Customer Data Cloud (CDC/Gigya), you will oversee B2B and B2C identity services including registration, consent management, authentication, sign-on, and password management across global web properties and mobile applications.

This is a leadership-focused role that combines CIAM platform ownership, identity strategy, technical solution design, stakeholder enablement, and team/vendor leadership. The ideal candidate brings broad knowledge across the IDAM landscape, including CIAM, Identity Governance & Administration (IGA), Privileged Access Management (PAM), PKI, and directory services, along with the ability to translate complex identity concepts into practical solutions for both technical and business audiences.

Key Responsibilities:

CIAM Platform Leadership & Operations

• Lead the Customer Identity function and oversee the availability, reliability, and ongoing operation of the SAP Customer Data Cloud (CDC/Gigya) platform.
• Manage the roadmap and strategic direction for B2C and B2B external Identity & Access Management solutions.
• Partner with business stakeholders, technologists, application owners, and external partners to translate business requirements into scalable identity solutions.
• Support the onboarding and integration of applications leveraging the CIAM platform.
• Lead platform enhancements, including advanced logging and reporting, form standardization, security improvements, and user experience enhancements.
• Oversee global platform rollouts, ensuring solutions meet scalability, performance, security, and business requirements.
• Lead QA, User Acceptance Testing (UAT), and deployment validation activities.
• Manage Service Level Agreements (SLAs) and ensure operational expectations are consistently met.
• Lead incident response for platform disruptions, including stakeholder communications, root cause analysis, remediation, and preventive actions.
• Ensure CIAM services align with applicable corporate policies and privacy requirements, including GDPR and CCPA.

IDAM Consulting & Enablement:

• Serve as a trusted advisor on Identity & Access Management, establishing and promoting standards for security, data governance, and user experience.
• Consult with business units, project teams, and technology partners to assess identity and access requirements and recommend appropriate IDAM solutions.
• Drive adoption of enterprise identity standards and help teams integrate security-first and identity-aware principles into solution design.
• Develop and deliver best-practice guides, reference architectures, training materials, and other enablement resources.
• Present identity strategies, solutions, and recommendations to a broad range of stakeholders, including executive leadership.
• Build strong relationships across business and technology teams while fostering a collaborative, flexible, and client-focused culture.

Technical Design & Engineering:

• Design and implement IAM solutions that meet business and security requirements, including architectures for application and data integration.
• Troubleshoot issues and reengineer identity processes and interfaces to improve reliability and efficiency.
• Develop and maintain tools, scripts, workflows, and automation that support identity processes and anomaly detection.
• Lead large-scale technical initiatives from solution design and planning through implementation and post-launch support.
• Drive continuous improvement based on operational data, platform performance, security requirements, and business needs.

People & Vendor Leadership:

• Lead a growing team of direct reports and oversee approximately 10 Managed Service Provider (MSP) consultants.
• Coordinate projects involving Zoetis India Capability Center (ZICC) colleagues, onshore teams, and MSP resources.
• Manage relationships with technology vendors and partners, including SAP/Gigya and SailPoint, to support platform performance and issue resolution.
• Oversee project and contract resources to ensure deliverables meet quality, budget, and timeline expectations.
• Provide strategic direction to cross-functional teams including cloud operations, cybersecurity, web development, data analytics, and marketing.

Education & Experience:

Required

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.

Preferred

• Advanced degree or relevant industry certifications, such as: Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP) Comparable security, identity, or cloud certifications

Technical & Leadership Qualifications:

This is primarily a leadership and enablement role. Hands-on technical experience is valuable, but the primary focus is on platform leadership, solution strategy, stakeholder influence, and delivery.

The ideal candidate will bring:

• Deep expertise in Customer Identity & Access Management (CIAM), ideally with SAP Customer Data Cloud (CDC/Gigya).
• Strong knowledge of authentication and authorization protocols, including OAuth, OpenID Connect, SAML, and LDAP, as well as risk-based authentication.
• Experience integrating CIAM platforms with enterprise applications such as CRM, e-commerce, billing, and learning management systems.
• Strong understanding of IAM capabilities and technologies, including Identity Governance, federated sign-on, privileged access, PKI, and directory services.
• Familiarity with IAM platforms such as SailPoint IIQ and Oracle Identity Manager.
• Experience managing platform scalability, availability, performance, upgrades, and feature rollouts.
• Knowledge of privacy and compliance requirements, including GDPR and CCPA.
• Strong incident management and remediation experience, including root cause analysis, impact assessment, workaround identification, and data remediation.
• Experience working with REST APIs, ETL processes, and other integration technologies.
• Familiarity with web and infrastructure technologies including CMS, DNS, JavaScript, CSS, HTML, and HTTPS.
• Understanding of data governance and data quality principles.
• Familiarity with analytical tools such as SQL, Power BI, Alteryx, Tableau, Microsoft Excel, and Access.
• Experience working within Agile/Scrum development environments.
• Familiarity with collaboration and information-sharing platforms such as SharePoint, Jira, and Confluence.
• PowerShell and Secret Server experience is preferred.
• Strong vendor management experience, including oversight of MSPs and third-party technology partners.
• Excellent communication and presentation skills with the ability to explain complex technical concepts to both technical and non-technical audiences.
• Demonstrated ability to influence stakeholders and lead effectively within a global, matrixed organization.
• Fluency in written and spoken English.

Position Requirements:

• Office-based or remote leadership role with standard working conditions.
• Ability to work during core business hours, with flexibility to support global time zones and occasional off-hours needs related to critical incidents or executive meetings.
• Ability to travel up to 20% for global meetings, conferences, or vendor engagements.

The U.S. base salary range for this full-time position is $129,000- $185,000. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the base pay target range for new hire salaries for the position. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

This position is also eligible for short-term incentive compensation.

This position is also eligible for long-term incentives.

In addition to compensation, Zoetis offers a comprehensive benefits package that supports the physical, emotional and financial wellbeing of our colleagues and their families including healthcare and insurance benefits beginning on day one, a 401K plan with a match and profit-sharing contribution from Zoetis, and 4 weeks of vacation.

Visit zoetisbenefits.com to learn more.

 

Full time

 

Regular

 

Colleague

 

Any unsolicited resumes sent to Zoetis from a third party, such as an Agency recruiter, including unsolicited resumes sent to a Zoetis mailing address, fax machine or email address, directly to Zoetis employees, or to Zoetis resume database will be considered Zoetis property. Zoetis will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume.

Zoetis will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor but does not have the appropriate approvals to be engaged on a search.

Notice: Zoetis Recruiters will contact candidates via email from an address ending in @zoetis.com and may also initially connect with candidates through LinkedIn, including LinkedIn InMail. Zoetis does not use Gmail, Outlook, Yahoo, or other web-based/generic email domains to communicate about job opportunities, interviews, or offers of employment. If you receive a recruitment-related email message claiming to be from Zoetis that does not come from @zoetis.com, please treat it as suspicious. For your security, do not reply, click links, open attachments, share personal or financial information, or send money in response to unexpected or questionable recruitment communications.

Zoetis is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability or veteran status or any other protected classification. Disabled individuals are given an equal opportunity to use our online application system. We offer reasonable accommodations as an alternative if requested by an individual with a disability. Please contact Zoetis Colleague Services at [email protected] to request an accommodation. Zoetis also complies with all applicable national, state and local laws governing nondiscrimination in employment as well as employment eligibility verification requirements of the Immigration and Nationality Act. All applicants must possess or obtain authorization to work in the US for Zoetis. Zoetis retains sole and exclusive discretion to pursue sponsorship for the acquisition or maintenance of nonimmigrant status and employment eligibility, considering factors such as availability of qualified US workers. Individuals requiring sponsorship must disclose this fact. Please note that Zoetis seeks information related to job applications from candidates for jobs in the U.S. solely via the following: (1) our company website at www.Zoetis.com/careers site, or (2) via email to/from addresses using only the Zoetis domain of “@zoetis.com”. In addition, Zoetis does not use Google Hangout for any recruitment related activities. Any solicitation or request for information related to job applications with Zoetis via any other means and/or utilizing email addresses with any other domain should be disregarded. In addition, Zoetis will never ask candidates to make any type of personal financial investment related to gaining employment with Zoetis.