Job Description

At VF, we strive to foster a culture of belonging based on respect, connection, openness, and authenticity. So, before we get to the job details, take a minute to learn a little more about us – our values and our culture - visit VF Careers or www.vfc.com.

What will you do?

A day in the life of a Senior Engineer, Identity and Access Management at VF looks a little like this.

The Senior Engineer, IAM is responsible for operating, supporting, and continuously improving identity and access management services, with a primary focus on Microsoft Active Directory, Entra ID and AWS IAM, in support of VF's security, compliance, and business objectives. This role partners closely with Security, Infrastructure, Cloud, and Application teams to deliver reliable identity services across cloud and on-premises environments.

The Senior Engineer, IAM provides technical expertise for identity initiatives, helping to modernize identity capabilities while ensuring secure and efficient access to enterprise systems. This role contributes to identity priorities and planning while supporting the execution of key identity-related projects.

Let’s break down that day-in-the-life a bit more.

Strategic Planning & Delivery

• Contribute to Entra ID and AWS identity priorities aligned with security and business objectives.
• Support delivery of Entra ID and AWS identity initiatives and modernization efforts.
• Partner with technology and business teams to identify and implement identity solutions that improve security and user experience.
• Support adoption of Zero Trust principles and modern authentication standards through Entra ID and AWS controls.

Agentic AI Security Enablement

• Support implementation of identity controls for autonomous agents and machine identities in Entra ID and AWS.
• Support processes for provisioning, maintaining, and retiring agent identities using Entra workload identities and AWS IAM roles.
• Implement least-privilege access controls and role-based authorization models in Entra ID and AWS for agent workloads.
• Assist in developing standards for workload identity federation and OAuth/OIDC integrations between Entra ID and AWS.

Active Directory, Entra ID, AWS & IAM Support

• Support for on-premises Active Directory, Group Policy management, and tiered security architecture.
• Support implementation and operation of Entra ID and AWS IAM solutions, ensuring security and operational effectiveness.
• Follow and maintain identity standards for authentication, authorization, and identity lifecycle management in Entra ID and AWS.
• Support integration of Entra ID and AWS IAM capabilities across SaaS applications and enterprise systems.
• Support enhancements to core identity services including Active Directory, Entra ID SSO, MFA, Conditional Access, AWS IAM Identity Center, and directory services.
• Collaborate with Enterprise Architecture and Security teams to align IAM solutions with broader technology standards.
• Provide day-to-day IAM support, including access requests, troubleshooting, and basic IGA and PAM administration across supporting platforms such as Saviynt.

Business Partnership

• Work with business and technology stakeholders to gather requirements and translate them into IAM solutions.
• Support cloud migrations, application integrations with Entra ID, and digital transformation initiatives.
• Identify opportunities to automate identity lifecycle processes in Entra ID and AWS and improve operational efficiency.
• Balance security, usability, and compliance requirements when designing solutions.

Risk, Compliance & Governance

• Support IAM governance processes, access reviews, and compliance activities.
• Partner with Security, Risk, and Audit teams to address identity-related findings and risks.
• Monitor Entra ID and AWS IAM controls and recommend improvements to strengthen security posture.
• Assist in maintaining compliance with regulatory and audit requirements.

Knowledge Sharing

• Share Entra ID and AWS identity expertise with engineers and project teams through documentation, design reviews, and informal guidance.

Platform, Vendor & Stakeholder Engagement

• Engage Microsoft, AWS, and implementation of partners on identity topics.
• Evaluate emerging IAM technologies and provide recommendations, with emphasis on Entra ID and AWS identity capabilities.
• Support Entra ID feature adoption, Microsoft Entra licensing reviews, and AWS identity optimization efforts.
• Communicate architecture decisions, project status, and technical recommendations to stakeholders.
• Serve as a general IAM subject matter expert across authentication, authorization, federation, identity governance, and privileged access for project teams and business partners.

What do you need to succeed?

We all have unique skills that we bring to work and celebrate every day. For this role, there are foundation skills you’ll need to succeed and excel. Additionally, while formal education in a related field is great to have, we are most interested in your 5+ years of experience and professional achievements.

The foundation skills you will need in this position are:

• 5+ years of experience in Information Security, with strong experience in IAM.
• Hands-on experience implementing and supporting Microsoft Entra ID and AWS IAM, with exposure to other IAM platforms such as SailPoint, Saviynt, CyberArk, BeyondTrust, or similar platforms.
• Working knowledge of AWS IAM, IAM Identity Center, and federation between Entra ID and AWS using SAML, OIDC, and SCIM.
• Experience with Entra ID Conditional Access, Privileged Identity Management, and hybrid identity through Entra Connect.
• Strong understanding of IAM concepts including SSO, MFA, Federation (SAML/OIDC), PAM, IGA, and directory services, with emphasis on Entra ID and AWS implementations.
• Experience supporting and implementing IAM solutions in AWS and hybrid environments.
• Familiarity with Zero Trust principles and identity-centric security models.
• Experience working with compliance, audit, and access governance requirements.
• Strong communication, collaboration, and stakeholder management skills.
• Bachelor's degree or equivalent combination of education and experience.
• Preferred: Microsoft Identity and Access Administrator (SC-300) or AWS Certified Security Specialty.

Now WE have a question for YOU.

Are you in?

Hiring Range:

$120,000.00 USD - $150,000.00 USD annually

Incentive Potential: This position is eligible for additional compensation awards that may include an annual incentive plan, sales incentive, or commission potential. Specific details of the additional compensation eligibility for this position will be provided during the recruiting and interview process.

Benefits at VF Corporation: You can review a general overview of each benefit program offered, including this year's medical plan rates on www.MyVFbenefits.com and by clicking Looking to Join VF? Detailed information on your benefits will be provided during the hiring process.

Please note, our hiring ranges are determined and built from market pay data. In determining the specific compensation for this position, we comply with all local, state, and federal laws.

At VF, we value a diverse, inclusive workforce and we provide equal employment opportunity for all applicants and employees. All qualified applicants for employment will be considered without regard to an individual’s race, color, sex, gender identity, gender expression, religion, age, national origin or ancestry, citizenship, physical or mental disability, medical condition, family care status, marital status, domestic partner status, sexual orientation, genetic information, military or veteran status, or any other basis protected by federal, state or local laws. If you require accommodations during the application process, please contact us at peopleservices@vfc.com. VF will provide reasonable accommodations for qualified individuals to the extent required by applicable law.

Pursuant to all applicable local Fair Chance Ordinance requirements, including but not limited to the San Francisco Fair Chance Ordinance, VF will consider for employment qualified applicants with arrest and conviction records.