Director, Identity Platforms & Operations

Director, Identity Platforms & Operations 

Overview 

The Director, Identity Platforms & Operations is The Coca-Cola Company’s senior leader for enterprise identity platforms, privileged access management, and identity operations. This role owns the engineering, operations, and continuous improvement of the Company’s identity technology stack—including Microsoft Entra ID, Entra B2B, CyberArk, and identity defense tools—ensuring that identity services are secure, resilient, and aligned with the Company’s zero-trust strategy. The Director drives the enterprise account lifecycle, service account management, and identity protection capabilities that safeguard the Company’s workforce, partners, and digital assets. 

Reporting to the Senior Director, Security Engineering & Identity, this is a people-leadership role responsible for a team of identity engineers and the oversight of a managed services partner that supports identity operations. The Director partners closely with Cyber Solutions, Cybersecurity Operations, IT Infrastructure, and business technology teams to ensure identity platforms meet evolving security, compliance, and business requirements while maintaining operational excellence across provisioning, de-provisioning, and access lifecycle processes. 

Key Responsibilities 

Identity Platform Engineering & Operations 

• Own the engineering, configuration, and operational health of the Company’s core identity platforms, including Microsoft Entra ID, Entra B2B, identity governance and identity defense tools. 

• Define and execute platform roadmaps that align with the Company’s zero-trust strategy and evolving business requirements. 

• Ensure platform reliability, scalability, and performance through proactive monitoring, capacity planning, and incident management. 

• Drive automation of identity operations to improve efficiency, reduce manual effort, and minimize errors across the identity lifecycle. 

Privileged Access Management 

• Oversee the Company’s CyberArk privileged access management environment, ensuring secure vaulting, session management, and credential rotation for privileged accounts. 

• Define and enforce policies for privileged access that align with the Company’s security standards and regulatory requirements. 

• Partner with application and infrastructure teams to expand PAM coverage and integrate privileged access controls into new platforms and workflows. 

Identity Lifecycle & Account Operations 

• Lead enterprise account provisioning, de-provisioning, and joiner/mover/leaver lifecycle processes to ensure timely and accurate access management across the workforce. 

• Oversee service account management practices, including inventory, ownership assignment, credential hygiene, and lifecycle governance. 

• Ensure identity operations processes support SOX control requirements and partner with compliance teams to maintain audit readiness. 

• Continuously improve operational processes to reduce access-related risk and improve the end-user experience. 

Identity Protection & Zero-Trust Execution 

• Operationalize identity protection capabilities, including identity threat detection, conditional access policies, and risk-based authentication. 

• Execute on the Company’s zero-trust identity strategy, driving adoption of modern authentication methods such as passwordless, phishing-resistant MFA, and adaptive access controls. 

• Maintain identity verification and reset technology platforms such as Microsoft Verified ID and competitive solutions, as well as their associated processes. 

• Monitor identity security posture and drive remediation of vulnerabilities, misconfigurations, and policy gaps across the identity estate. 

People Leadership & Managed Services Oversight 

• Lead and develop a team of identity engineers, fostering a culture of operational excellence, continuous learning, and accountability. 

• Manage the relationship with the managed services partner, including performance management against SLAs, quality oversight, and capacity planning. 

• Provide regular reporting to leadership on identity platform health, operational metrics, and risk posture. 

• Partner with security architecture teams to translate architectural direction into operational reality. 

Qualifications 

• Minimum 8–12 years of progressive experience in cybersecurity, identity and access management, or IT infrastructure, with at least 5 years in a leadership role. 

• Deep expertise in Microsoft Entra ID, including Entra B2B, conditional access, and identity protection capabilities. 

• Solid foundation in on-premises Active Directory including forest and domain topology, trust relationships, Group Policy, and directory services. 

• Proven experience managing enterprise CyberArk deployments, including privileged session management, credential vaulting, and policy configuration. 

• Strong understanding of identity lifecycle management, including joiner/mover/leaver processes, service account governance, and directory services. 

• Experience executing zero-trust identity strategies, including modern authentication methods (passwordless, phishing-resistant MFA, adaptive access). 

• Demonstrated ability to manage managed services providers, including SLA governance, quality assurance, and performance optimization. 

• Working knowledge of SOX compliance requirements as they relate to identity and access controls. 

• Familiarity with identity security frameworks and standards such as NIST 800-63, NIST CSF, and ISO 27001. 

• Exceptional communication skills with the ability to translate technical identity concepts into business-relevant language for executive audiences. 

• Relevant certifications such as CISSP, CISM, Microsoft SC-300, or CyberArk Defender/Sentry are highly desirable. 

Education 

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field is required. 

• Master’s degree or advanced certifications (e.g., CISSP, CISM) are desirable. 

Reporting Relationship 

Reports to the Senior Director, Security Engineering & Identity, within the Chief Information Security Office (CISO) organization. Leads a team of identity engineers and oversees a managed services partner supporting identity operations. 

Location 

Atlanta, GA (Global Headquarters) 

Travel 

Estimated up to 10% travel, primarily domestic, with occasional travel for vendor engagements and cross-functional workshops.