IAM / Automation Lead

Covetrus is a global animal-health technology and services leader dedicated to empowering veterinary practice partners to drive improved health and financial outcomes. We bring together products, services, and technology into a single platform that connects our customers to the solutions and insights they need to work best. Our passion for the well-being of animals and those who care for them drives us to advance the world of veterinary medicine.
IAM / Automation Lead

Information Technology • Full-Time • Remote
About the Role

As the IAM / Automation Lead, you will own the strategy, operations, and roadmap for enterprise Identity & Access Management (IAM) — protecting our workforce, applications, and data by ensuring the right people have the right access at the right time.

This is a high-impact, senior level role reporting to the Senior Director of IT. You will serve as the organization’s subject-matter expert and technical lead for enterprise IAM, partnering closely with IT, HR, Legal, and Compliance, and driving continuous maturity of our identity posture across cloud and on-premises environments. The role carries a heavy focus on automation and self-service — reducing manual operations, improving the end-user experience, and strengthening our cybersecurity posture while delivering cost savings.
Key Responsibilities

- Serve as the North American Center of Excellence (COE) lead for IAM, partnering with global COE counterparts to align standards, tooling, and best practices — ensuring IAM responsibilities and services are delivered consistently on a global basis

- Serve as the technical lead for IAM integration on current and future mergers, acquisitions, and divestitures (M&A)

- Lead the design, implementation, and operations of IAM programs including SSO, MFA, PAM, IGA, and directory services

- Deliver measurable cost savings and operational efficiencies by leading product evaluations, tools consolidations, and IAM initiatives back by data-driven financial business cases

- Enforce compliance with IAM policies and standards; Create procedures aligned to NIST, CIS, ISO 27001, SOX, and other applicable frameworks

- Own user lifecycle management: joiner/mover/leaver (JML) execution, access provisioning, role engineering, and automated de-provisioning

- Drive automation and self-service capabilities across the IAM function — including automated access requests, approvals, and provisioning — to reduce manual operations and improve the end-user service experience

- Partner with End User Services and the Service Desk to identify and automate away manual, ticket-based access requests, replacing them with self-service and automated workflows

- Deliver automated entitlement and permission reviews across SaaS, cloud, and on-prem applications

- Mature Privileged Access Management (PAM) adoption, including vault adoption, session monitoring, and just-in-time (JIT) access

- Partner with Cyber and Network Operations on global user controls, including Zero Trust and SSO group management — leading identity-centric network access controls and conditional access policy development

- Build and maintain integrations between IAM platforms, HR systems (HCM), ticketing systems, and downstream applications via SCIM, LDAP, and API connectors

- Define KPIs and metrics for access hygiene, orphaned accounts, and privilege sprawl; report SLA performance and program health to leadership quarterly

- Partner across teams to advance the IAM roadmap, and support IAM vendor relationships, licensing, and contract renewals in collaboration with Cyber and Procurement

- Serve as a technical mentor to IAM engineers and analysts, sharing best practices in design, implementation, and troubleshooting

- Support audits (SOX, SOC 2, ISO 27001) with evidence of quarterly access reviews, control narratives, and remediation tracking

- Drive IAM roadmap planning with a 12–18 month horizon, balancing security uplift with employee experience

Technolog