Title:  IT Specialist

Job Description

The Identity and Access Management (IAM) Architect will play a critical role in strengthening Aramark’s cybersecurity posture by owning and executing the IAM strategy across the enterprise. In Aramark’s global food service and facilities management operations, this hands-on architect will address unique challenges, such as securing distributed workforces and third-party access, to streamline identity processes, reduce access risk, and enable secure, efficient access to critical services and infrastructure across all lines of business. The role demands a blend of strategic foresight, technical depth, and operational execution to drive Identity Security outcomes in a fast-paced, cross-functional environment. Success in this position will directly support Aramark’s vision of profitable growth through secure, seamless user experiences and advanced automation.
 

Job Responsibilities

Program Ownership & Strategy 
•    Develop, refine, and execute Aramark’s enterprise IAM strategy with a focus on Identity Security and Identity Threat Protection. 
•    Drive roadmap planning and program delivery across all IAM domains (SSO, MFA, PAM, Directory Services, etc.). 
•    Continuously advance an evolving IAM program by standardizing access controls and enhancing maturity across decentralized business units.

Solution Architecture & Platform Management 
•    Architect scalable IAM solutions leveraging tools like SailPoint, Delinea, Ping, Azure AD, and Entra. 
•    Own and evolve IAM toolset configurations, policies, and integrations to enable least privilege and secure access models.
•    Lead technical implementation of new capabilities including role-based access control (RBAC), just-in-time provisioning, and adaptive authentication models.

Operational Execution & Automation 
•    Design and implement identity lifecycle workflows with a focus on user experience, and security. 
•    Champion intelligent automation and AI-powered analytics to streamline governance, reduce manual effort, and deliver IAM metrics and KPIs for reporting to stakeholders. 
•    Coordinate hands-on execution of high-impact IAM changes, ensuring strong testing and rollback planning.

Governance & Compliance 
•    Implement access review, certification, and audit mechanisms aligned with regulatory and internal policy requirements. 
•    Collaborate with GRC and Audit functions to maintain an effective control environment across IAM domains.

Cross-Functional Leadership & Team Enablement 
•    Act as a liaison between Cybersecurity, Infrastructure, HR, Legal, and Application teams to align on access policies and enforcement. 
•    Serve as a subject matter expert in IAM architecture reviews, enterprise initiatives, and incident response efforts. 
•    Mentor team members and partner resources, helping to build internal IAM expertise and a strong identity-centric culture.

SCOPE
•    Reports to Cybersecurity Sr. Director.
•    Works alongside a lean, high-impact team of internal staff and external partner resources within the IAM function.
•    Requires strong technical experience across IAM technologies and identity governance frameworks.
•    Success in this role demands both architectural vision and hands-on execution, particularly in a global enterprise with legacy systems, many lines of business, and decentralized access practices. This role offers visibility with senior leadership and opportunities to shape Aramark’s long-term cybersecurity strategy.
•    The candidate must possess strong interpersonal and communication skills, be adaptable in ambiguity, and show resilience in the face of setbacks or challenges.

Qualifications

achelor’s degree in Cybersecurity, Computer Science, or related field preferred; equivalent work experience accepted. 
•    6+ years of experience in Identity & Access Management, with at least 3 years focused on architecting or leading enterprise IAM solutions, or equivalent experience in related cybersecurity roles (e.g., security engineering, identity governance). 
•    Strong familiarity with modern IAM toolsets: SailPoint, Delinea, Ping, Azure AD, Entra, and others. 
•    Experience with implementing or managing SSO, MFA, PAM, IGA, and directory federation solutions.
•    Hands-on experience with Active Directory, Azure AD, and cross-platform identity architectures.
•    Proven track record of delivering IAM programs in large, complex environments. 
•    Experience training and mentoring team members or partners to increase internal expertise.
•    CISSP, CISM, or relevant certifications are desirable but not mandatory.
•    Exceptional analytical, collaborative, and communication skills with a curious, growth-oriented mindset.

Join Aramark’s Cybersecurity team to build a secure, innovative IAM foundation that powers our global operations. Apply today to make an impact!
 

Education

About Aramark

Our Mission

Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet.

At Aramark, we believe that every employee should enjoy equal employment opportunity and be free to participate in all aspects of the company. We do not discriminate on the basis of race, color, religion, national origin, age, sex, gender, pregnancy, disability, sexual orientation, gender identity, genetic information, military status, protected veteran status or other characteristics protected by applicable law.

About Aramark

The people of Aramark proudly serve millions of guests every day through food and facilities in 15 countries around the world. Rooted in service and united by our purpose, we strive to do great things for each other, our partners, our communities, and our planet. We believe a career should develop your talents, fuel your passions, and empower your professional growth. So, no matter what you're pursuing - a new challenge, a sense of belonging, or just a great place to work - our focus is helping you reach your full potential. Learn more about working here at http://www.aramarkcareers.com or connect with us on Facebook, Instagram and Twitter.