American Airlines is looking for a Senior Manager to lead identity protection and access security capabilities that help protect users, systems, operations, and data. This role sits within the Identity Services team and focuses on secure digital products, including Privileged Access, Secrets Management, and Digital Certificates & Encryption platforms.
Why this work matters: you’ll design and govern identity controls that support reliable airline operations, with clear accountability for tools, processes, and compliance across both human and non-human identities.
Benefits
- Travel perks: access to 365 destinations on more than 6,800 daily flights across the global network
- Health benefits: health, dental, prescription and vision benefits; virtual doctor visits; flexible spending accounts
- Wellness programs
- 401(k) program: available upon hire; employer contributions available after one year depending on workgroup
- Additional benefits: Employee Assistance Program, pet insurance, and discounts on hotels, cars, cruises, and more
What you’ll do
- Oversee tools and processes that control, monitor, and secure access to critical systems and sensitive data for elevated users, accounts, and processes
- Oversee non-human identity vaulting and lifecycle management platforms
- Manage public and private PKIs, ensuring certificates are handled throughout their lifecycle
- Design, implement, operate, and govern cryptographic technologies with a focus on compliance, key management, scalability, and enterprise-wide consistency
- Develop, implement, oversee, and lead strategic access control policies and procedures to maintain least-privilege privileged access
- Lead enterprise-wide strategies for digital certificates, encryption, and PAM aligned with organizational goals and regulatory requirements
- Direct planning, execution, and delivery of critical identity & access projects to meet strategic objectives, timelines, and budget
- Communicate key risks, strategies, and program status to executive leadership, and deliver performance reporting with strategic insights and KPIs
- Provide visionary leadership and mentorship to cybersecurity professionals focused on identity & access products, supporting continuous development through targeted training opportunities
- Lead regular audits of access controls and directory services to ensure compliance with internal policies and external regulations; remediate identified issues or gaps
- Oversee risk assessments related to digital certificates, encryption, and PAM, including risk mitigation plans and continuous security improvements
- Oversee response and resolution for access-related security incidents and service requests, including troubleshooting and issue resolution for user access and directory services
Requirements
- Bachelor’s degree in a related technical discipline (or equivalent experience/training)
- Prior job experience in cybersecurity management or a related field
- 7+ years of IT career experience in a closely related field
- 5+ years in a people leadership role
- Bachelor’s degree in Information Security, Computer Science, or related field; advanced degree preferred
- Proven track record developing and implementing successful cybersecurity programs
- Experience managing security audits and assessments
- Experience with regulatory compliance and industry standards such as GDPR, PCI-DSS, and ISO 27001
- Relevant certifications including but not limited to CISSP, CISM, CISA, CompTIA Security+, CIAM, and Microsoft Certified: Identity and Access Administrator Associate
- In-depth knowledge of IAM principles, technologies, and best practices
- Understanding of Privileged Access, Secret, and Vaulting tools and technologies
- Understanding of Public Key Infrastructures, Digital Certificates, and Encryption management, including secure lifecycle platforms
- Knowledge of regulatory compliance requirements related to access management (e.g., GDPR, HIPAA, SOX)
- Strong problem-solving and analytical skills for identifying and addressing IAM issues and threats
- Strong verbal and written communication skills for technical and non-technical stakeholders
- Ability to manage IAM projects and initiatives across technology teams, business teams, and end users
- Ability to develop, update, and enforce comprehensive IAM strategies and policies
- Proficiency ensuring compliance with IAM standards and conducting risk assessments
- Strong agile management skills to oversee implementation and maintenance of IAM solutions
Technologies
PKI, Public Key Infrastructure, Digital Certificates, Encryption, PAM, Privileged Access Management, Secrets Management, Vaulting, Access Control, IAM, CIAM
Location: Fort Worth, TX (onsite)
