Asks for

The ad says“Experience leading enterprise IAM programs at scale, including identity-provider consolidation, IGA, PAM, and Active Directory modernization.”
The ad says“Experience delivering global identity services and developing identity policy with HR, application, security, and infrastructure partners, including attribute-based access control.”
The ad says“Experience building or operating identity detection and response, including automated containment and measurable response times.”
The ad says“Hands-on expertise with Okta or Entra ID, Saviynt or SailPoint, CyberArk, and cloud identity services such as AWS IAM Identity Center.”
The ad says“Delivery of zero-trust capabilities, including phishing-resistant or passwordless MFA, conditional access, least privilege, identity-based network access, and just-in-time privileged access.”
The ad says“Experience managing IAM budgets and vendors, including licensing optimization and contract negotiations that delivered savings.”
The ad says“Hands-on expertise with Okta or Entra ID, Saviynt or SailPoint, CyberArk, and cloud identity services such as AWS IAM Identity Center.”
The ad says“Hands-on expertise with Okta or Entra ID, Saviynt or SailPoint, CyberArk, and cloud identity services such as AWS IAM Identity Center.”
The ad says“12+ years in IAM or security engineering, including 5+ years leading teams and managers.”
The ad says“Experience managing IAM budgets and vendors, including licensing optimization and contract negotiations that delivered savings.”
The ad says“Experience building or operating identity detection and response, including automated containment and measurable response times.”
The ad says“Delivery of zero-trust capabilities, including phishing-resistant or passwordless MFA, conditional access, least privilege, identity-based network access, and just-in-time privileged access.”
The ad says“Experience leading enterprise IAM programs at scale, including identity-provider consolidation, IGA, PAM, and Active Directory modernization.”
The ad says“Experience leading enterprise IAM programs at scale, including identity-provider consolidation, IGA, PAM, and Active Directory modernization.”
The ad says“Delivery of zero-trust capabilities, including phishing-resistant or passwordless MFA, conditional access, least privilege, identity-based network access, and just-in-time privileged access.”
The ad says“12+ years in IAM or security engineering, including 5+ years leading teams and managers.”
The ad says“Delivery of zero-trust capabilities, including phishing-resistant or passwordless MFA, conditional access, least privilege, identity-based network access, and just-in-time privileged access.”
The ad says“Experience managing IAM budgets and vendors, including licensing optimization and contract negotiations that delivered savings.”
The ad says“Hands-on expertise with Okta or Entra ID, Saviynt or SailPoint, CyberArk, and cloud identity services such as AWS IAM Identity Center.”
The ad says“Experience leading enterprise IAM programs at scale, including identity-provider consolidation, IGA, PAM, and Active Directory modernization.”
The ad says“Delivery of zero-trust capabilities, including phishing-resistant or passwordless MFA, conditional access, least privilege, identity-based network access, and just-in-time privileged access.”
The ad says“Delivery of zero-trust capabilities, including phishing-resistant or passwordless MFA, conditional access, least privilege, identity-based network access, and just-in-time privileged access.”
The ad says“Hands-on expertise with Okta or Entra ID, Saviynt or SailPoint, CyberArk, and cloud identity services such as AWS IAM Identity Center.”
The ad says“Hands-on expertise with Okta or Entra ID, Saviynt or SailPoint, CyberArk, and cloud identity services such as AWS IAM Identity Center.”
The ad says“12+ years in IAM or security engineering, including 5+ years leading teams and managers.”
The ad says“Experience managing IAM budgets and vendors, including licensing optimization and contract negotiations that delivered savings.”
The ad says“Delivery of zero-trust capabilities, including phishing-resistant or passwordless MFA, conditional access, least privilege, identity-based network access, and just-in-time privileged access.”

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime.

Wizards of the Coast builds worlds that bring people together through play and imagination. From genre-defining games like Magic: The Gathering® and Dungeons & Dragons® to an expanding multiverse, we create new ways to foster friendship and connection. Millions of players, thousands of creators, and one significant attack surface make identity security essential. Who holds the keys? Our Director of Identity & Access Management does.

This leader runs the identity program end to end, authentication, authorization, governance, and privileged access for every employee, contractor, service, and studio, reporting to the VP of Infrastructure Engineering and Operations. The role commands the enterprise identity budget, roadmap, and headcount, and leads managers and principal engineers across identity platform engineering, Identity Governance (IGA), Privileged Access Management (PAM), and a brand-new Identity Security Operations function.

What You’ll Do

Set the multi-year IAM strategy and funding plan. Consolidate workforce identity onto one provider, retire legacy tooling, and deliver IAM as a single global service that meets regional requirements through configuration instead of one-off regional builds. Engineers, external studios, and creative partners reach their environments from anywhere through identity-based, not location-based, controls.

Automate access from hire through exit on authoritative HR data. Keep the role and entitlement model scalable through acquisitions, push access decisions to business leaders through self-service, hold contractors and partners to the same standard, and secure workload and AI-agent identity with short-lived credentials and real-time revocation.

Replace standing privilege with just-in-time elevation and session recording. Define identity-verification and recovery standards that survive the gaps phishing-resistant MFA leaves behind, make identity the enterprise access control plane, and stand up an Identity Security Operations function that detects and contains identity attacks automatically. IAM runs as a Tier 0 service here, with service levels, on-call coverage, and change rigor to match. Broad mandate? Absolutely!

What It Takes

12+ years in IAM or security engineering, including 5+ years leading teams and managers.
Experience leading enterprise IAM programs at scale, including identity-provider consolidation, IGA, PAM, and Active Directory modernization.
Hands-on expertise with Okta or Entra ID, Saviynt or SailPoint, CyberArk, and cloud identity services such as AWS IAM Identity Center.
Delivery of zero-trust capabilities, including phishing-resistant or passwordless MFA, conditional access, least privilege, identity-based network access, and just-in-time privileged access.
Experience building or operating identity detection and response, including automated containment and measurable response times.
A record of transforming reactive IAM operations into automation-led platform engineering, supported by measurable results.
Experience managing IAM budgets and vendors, including licensing optimization and contract negotiations that delivered savings.
Experience delivering global identity services and developing identity policy with HR, application, security, and infrastructure partners, including attribute-based access control.

Nice to Have

Relevant certifications, such as CISSP, Okta, SailPoint, Saviynt, or CyberArk.
Experience with AI-driven identity governance, role mining, access recommendations, or continuous certification.
Experience in a multi-studio, multi-business-unit entertainment or gaming environment.

We are an Equal Opportunity / Affirmative Action Employer

At Wizards, we believe in the magic of diversity—great ideas come from unique perspectives. We are committed to building an inclusive, welcoming workplace where everyone belongs. Wizards is an equal opportunity employer and does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, or any other legally protected status.

Wizards will provide reasonable accommodations with the application process, upon your request, as required to comply with applicable laws. If you have a disability and require assistance in this application process, please contact your recruiter or coordinator.

The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package.

#Wizards

Pay Range

$216,200—$324,300 USD

Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include:

Health & Wellness
Time Off to Recharge
Financial Well-being
Life & Family Support
Volunteer and Community Initiatives
Learning & Development
Exclusive Perks

Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

Asks for

Values