Director, Identity & Access Management in Washington, District of Columbia at CAQH

CAQH

Position SummaryThe Director of Identity and Access Management (IAM) is a senior technical and strategic leadership position responsible for designing, governing, and continuously maturing the organization's IAM program across a 100% cloud-native, fully remote environment. This leader serves as the company's authoritative voice on all matters of identity — spanning human identities (employees, consultants, customers, and partners) and the rapidly expanding population of non-human identities (NHIs) including service accounts, API keys, workload credentials, and agentic AI systems.

This is a full-time, exempt, remote position and reports to the CISO.

Specific Responsibilities

IAM Strategy & Program Leadership

Define and own the multi-year IAM strategy, roadmap, and investment plan aligned with business objectives, Zero Trust principles, and healthcare regulatory requirements.Establish governance frameworks for all identity types: workforce, partner/customer (CIAM), privileged (PAM), and non-human/machine identities including AI agents and ML workloads.Develop and maintain IAM policies, standards, and procedures across the organization and enforce adherence through governance processes.Lead annual and continuous access certification and entitlement review programs covering employees, contractors, and third parties.Own the IAM risk register; identify, assess, prioritize, and remediate access-related risks in collaboration with the broader security and risk teams.

Non-Human Identity & Agentic AI Governance

Establish a comprehensive Non-Human Identity (NHI) governance program covering service accounts, API tokens, certificates, OAuth clients, workload identities, and agentic AI identities.Design and enforce identity controls for agentic AI and ML pipeline workflows, ensuring least-privilege, just-in-time (JIT) access, and dynamic permission scoping for autonomous agents that chain actions across systems.Implement continuous discovery and inventory of all NHIs across cloud platform (Azure) and SaaS applications; eliminate shadow credentials and unmanaged secrets.Define AI agent identity lifecycle standards: provisioning, scoping, monitoring, credential rotation, and decommissioning.Partner with AI/ML Engineering and Product to embed identity governance requirements into the SDLC for all agentic and automated systems.

Architecture & Technical Oversight

Oversee architecture, integration, and operations of IAM platforms including IdP (Okta, Azure Entra ID), IGA, PAM, and secrets management.Lead the design and enforcement of authentication standards: MFA, passwordless, FIDO2/WebAuthn, SAML 2.0, OAuth 2.0/OIDC, and SCIM-based provisioning.Govern cloud entitlement management (CIEM) to enforce least-privilege and prevent privilege sprawl.Own directory services strategy; oversee user provisioning, de-provisioning, role lifecycle, and RBAC/ABAC model design.Ensure cryptographic asset management (PKI, certificate lifecycle, key management) is operationally sound and audit-ready.

Customer & Partner Identity (CIAM)

Lead the Customer Identity and Access Management (CIAM) strategy for external users including healthcare customers, partners, and integration endpoints.Ensure CIAM solutions deliver secure, low-friction authentication experiencesDefine partner federation standards and govern third-party access lifecycle from onboarding through offboarding.

Compliance, Audit & Risk

Ensure IAM program compliance with HIPAA/HITECH, SOC 2 Type II, HITRUST CSF, NIST 800-63 (Digital Identity Guidelines), ISO 27001, and applicable state privacy laws (CCPA, etc.).Serve as the IAM subject-matter expert during audits, assessments, and regulatory examinations; own audit evidence collection and remediation of findings.Partner with Legal and Privacy teams on access-related data governance, breach response procedures, and regulatory reporting obligations.Monitor threat intelligence and ITDR (Identity Threat Detection & Response) signals; drive timely response to identity-based attack indicators.

Team Leadership & Culture

Recruit, develop, and retain a high-performing team of IAM engineers, analysts, and architects; build a culture of ownership, continuous learning, and operational excellence.Define and track team KPIs, OKRs, and SLA/SLO metrics tied to identity program health and security posture improvements.Act as an IAM evangelist internally, educating stakeholders across the business on identity risk and enabling security-conscious behavior.

Skills

Deep expertise in at least two major IAM platformsHands-on knowledge of IGA platformsPAM platform experienceSecrets management and NHI toolingProficiency in authentication protocols and standards: OAuth 2.0, OIDC, SAML 2.0, SCIM, LDAP, Kerberos, FIDO2/WebAuthn.CIEM and cloud identity posture management experience (Wiz CIEM or native cloud tooling).Familiarity with IAM considerations for AI/ML workloads, agentic architectures, and machine-to-machine identity patterns.Scripting and automation capability in Python, PowerShell, Bash, or similar; ability to review and direct infrastructure-as-code (Terraform, CloudFormation) with IAM implications.Solid understanding of Zero Trust architecture principles and their application to identity

Experience & Education

10+ years of progressive experience in Identity and Access Management, cybersecurity, or adjacent disciplines.4+ years in a senior leadership role managing IAM teams, programs, or practices.Demonstrated experience in a cloud-native or 100% cloud-based environment (AWS, Azure, or GCP at scale).Prior experience in a healthcare, life sciences, or similarly regulated industry strongly preferred.Proven track record designing or governing IAM in environments serving multiple user populations (workforce, customers, partners, third parties, automated systems).Bachelor’s degree preferred.Relevant industry certifications in – CISSP, CISM, CCSP certifications preferred.

Who We Are

DataSpring is the trusted data connector at the core of healthcare. For more than 25 years, we have powered the industry with the largest and most complete healthcare data foundation in the U.S., including more than 4.8 million provider data records sourced directly from providers and member data representing 75% of covered lives supplied by health plans. By improving how essential information flows across the system, DataSpring helps healthcare operate more efficiently, accurately, and with greater confidence.

What You Get

At DataSpring, you will do meaningful work at the intersection of healthcare, data, and technology, helping solve complex problems that make the healthcare system work better. You will collaborate with experienced professionals who care deeply about accuracy, trust, and meaningful impact in a fully remote environment.

DataSpring offers competitive compensation and a comprehensive benefits package for full-time employees, including medical, dental, and vision coverage, a 401(k) with company contributions and matching, paid parental leave, tuition assistance, and generous paid time off. We are committed to investing in our people and supporting professional growth over time.

Equal Opportunity Employer

DataSpring is proud to be an equal opportunity employer and is committed to fostering a workplace where all individuals are valued, respected, and empowered.

Employment decisions at DataSpring are made without regard to race, color, religion, sex, national origin or ancestry, age, marital status, disability, protected veteran status, personal appearance, sexual orientation, gender identity or expression, familial status, family responsibilities, matriculation, political affiliation, genetic information, source of income, place of residence, or any other characteristic protected by law. DataSpring does not tolerate unlawful discrimination or harassment of any kind.

Applicants have rights under the Family and Medical Leave Act (FMLA), Equal Employment Opportunity (EEO), and the Employee Polygraph Protection Act (EPPA). If you need a reasonable accommodation to apply for a posted position, please contact the DataSpring People & Culture team at Careers@dataspring.org or 202-517-0436.

The pay range for this role is:190,000 - 220,000 USD per year(Remote (United States))Equal Employment Opportunity/M/F/disability/protected veteran status