Senior Manager, Identity Security Operations

Job Description

This role is offered as hybrid in Seattle, WA. Candidates must be available to work in office at the Nordstrom corporate headquarters a minimum of 4 days/week to be considered for this position.

Who We Are

We're a fast-moving retailer with a lot going on, and our customers and employees count on us to keep their experience seamless and secure. Behind that experience is a team obsessed with getting identity right - making sure the right people, and the right non-human identities, have the right access to the right things, at the right time, and nothing more.

The Identity Security team sits at the center of Nordstrom's security program, and we're in the middle of a significant modernization of how identity works at the company. We're looking for a senior leader to own - and level up - the operational engine that keeps it all running.

The Role

As Senior Manager, Identity Security Operations, you own the Identity Security Operations function end to end: the health, reliability, security posture, and service delivery of Nordstrom's enterprise identity platforms - Microsoft Entra ID, Active Directory, Okta, SailPoint, and BeyondTrust.

But this isn't a keep-the-lights-on job. You'll run operations through one of the larger identity transformations in retail - consolidating our workforce IdP onto Entra ID, retiring on-premises Active Directory, moving the enterprise to passwordless and phishing-resistant MFA, and modernizing identity governance. Your job is to keep operations excellent today while re-engineering what "operations" means for tomorrow: more automated, more self-service, less toil, lower risk.

You'll lead a multi-layered organization - leads, engineers, and analysts across onshore, offshore, and contingent staff - and partner as a true peer with the Identity Engineering & Build team on what enters steady state and what "supportable" means before it ships. This is a senior leadership role with real ownership: the operating model, the multi-year roadmap, and the maturity agenda are yours to set, with visibility all the way up to the CISO.

A Day in the Life

• Lead and grow the organization
• Lead through senior individual contributors; build bench strength, succession, and a durable leadership layer beneath you.
• Own strategy, operating model, staffing plan, and budget for the Identity Security Operations & Maintenance function.
• Build and retain a high-performing team across onshore, offshore, and managed-service delivery
• Modernize and automate.
• Own the multi-year operational roadmap and drive the automation and toil-reduction agenda - converting repeatable work into engineered, self-service, and automated capability.
• Keep operations excellent while major platforms migrate and consolidate underneath you, with minimal disruption to the business.
• Partner with Identity Engineering & Build to define transition-to-operations standards so new capability ships observable, documented, and supportable.
• Run operations at enterprise scale.
• Set and hold the bar for operational excellence - SLAs, KPIs, service health, and executive-level operational reporting for identity services.
• Own major incident command, problem management, and change governance for identity; drive rigorous post-incident review and durable remediation.
• Own access lifecycle operations at scale: joiner-mover-leaver, provisioning/deprovisioning, MFA operations, access certification campaigns, and privileged access operations
• Partner, own, and represent.
• Own vendor, managed-service, and licensing relationships for identity platforms; manage contract and renewal cycles with Sourcing and Finance.
• Serve as the senior escalation point and accountable owner for identity operations in audit, regulatory, and compliance engagements (SOX, PCI-DSS).
• Represent identity operations with clear, decision-ready communication to peers and executive leadership.

You Own This If You Have

• 10+ years in identity and access management or information security operations, including 7+ years leading teams and at least 5 years leading leaders or owning a function.
• Significant senior leadership experience in identity security operations - including leading teams and other leaders, and owning a function or major operational portfolio.
• Operational ownership of enterprise identity platforms at scale - an enterprise IdP (Microsoft Entra ID and/or Okta), directory services (Active Directory), IGA (SailPoint), and PAM (BeyondTrust). Real depth in several, with the leadership range to be accountable across the full stack.
• Enough technical command to lead decisions credibly - SSO, MFA, SAML, OIDC, OAuth, Conditional Access, and identity lifecycle management.
• A track record running operations at enterprise scale - SLA ownership, major incident command, and ITIL-aligned problem and change management.
• Experience owning budget, headcount planning, and vendor/managed-service relationships.
• The ability to build and retain high-performing teams and to communicate credibly with both engineers and executive leadership.
• Bachelor's degree in a related field, or equivalent experience.

Nice to Have

• Experience leading identity operations through a major platform migration or consolidation (e.g., IdP migration, directory retirement).
• Retail, or another large, distributed, high-transaction-volume enterprise.
• Experience as an accountable owner in audit and compliance programs (SOX, PCI-DSS).
• Experience leading globally distributed and managed-service delivery teams.
• Depth in passwordless/FIDO2, Zero Trust operational patterns, and identity threat detection and response (ITDR).
• Relevant certifications (CISSP, CISM, SC-300, ITIL).

#LI-Hybrid

Pay Range Details

The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations.

Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.

$191,000.00 - $297,000.00 Annual

We’ve got you covered…

Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:

• Medical/Vision, Dental, Retirement and Paid Time Away
• Life Insurance and Disability
• Merchandise Discount and EAP Resources

This position may be eligible for performance-based incentives/bonuses. Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more. Eligibility requirements may apply based on location, job level, classification, and length of employment. Learn more in the Nordstrom Benefits Overview by copying and pasting the following URL into your browser: https://careers.nordstrom.com/pdfs/Ben_Overview_17-19.pdf

A few more important points...

The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.

For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site.

Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com (http://www.nordstrom.com/).

Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s (https://careers.nordstrom.com/#/contact-us/faq) for relevant information and guidelines.

Nordstrom keeps job postings open for at least one day after the posting date.