Donaldson is committed to solving the world’s most complex filtration challenges. Together, we make cool things. As an established technology and innovation leader, we are continuously evolving to meet the filtration needs of our changing world. Join a culture of collaboration and innovation that matters and a chance to learn, effect change, and make meaningful contributions at work and in communities.
Position Summary
The Senior Manager, Identity & Access Management (IAM), based in Bloomington, MN, will lead the team that protects how every employee, contractor, partner, application, and machine across Donaldson’s global business gains and uses access. Identity is the new perimeter, and this leader will own the strategy, operations, and continuous improvement of our identity platforms, including SailPoint Identity Security Cloud and Microsoft Entra ID, across enterprise and manufacturing environments.
We are looking for a cybersecurity leader, not only an identity technologist: a hands-on doer who builds and develops a strong team, delivers results, and stays ahead of a rapidly changing field. This leader will strengthen compliance and audit readiness, reduce risk through Zero Trust and least privilege, and govern emerging identities such as AI agents, workload identities, and non-human accounts. Qualified candidates must be able to work a hybrid schedule at our Bloomington, MN office.
Role Responsibilities
Lead, coach, and grow a high-performing team of IAM engineers and analysts, setting clear priorities, building technical depth and career paths, and creating a culture of ownership, accountability, and continuous learning.
Own the IAM strategy and multi-year roadmap aligned with Donaldson’s cybersecurity program, Zero Trust architecture, business priorities, and regulatory and customer requirements.
Lead the operation and evolution of SailPoint Identity Security Cloud for identity governance and administration, including joiner, mover, and leaver automation, role-based access, access requests, certifications, and separation-of-duties controls.
Lead Microsoft Entra ID and the broader Microsoft identity stack, including single sign-on, conditional access, multi-factor and phishing-resistant authentication, Privileged Identity Management, and hybrid Active Directory.
Strengthen privileged access management, least privilege, and just-in-time access for administrators, service accounts, cloud environments, and operational technology in manufacturing plants.
Establish governance for non-human identities, including service principals, workload identities, API keys, bots, and AI agents, defining how they are provisioned, authorized, monitored, and retired.
Drive compliance and audit readiness for SOX, TISAX, privacy, and customer requirements through effective controls, timely access reviews, clean evidence, and rapid remediation of findings.
Partner with security operations to detect and respond to identity-based threats, such as credential theft, MFA fatigue attacks, and token abuse, using identity threat detection and response capabilities.
Roll up your sleeves to lead critical integrations, platform upgrades, incident response, and complex troubleshooting, while partnering with HR, applications, infrastructure, and business leaders to simplify the user experience.
Track and evaluate emerging identity trends and technologies, such as passwordless authentication, decentralized identity, AI-driven access analytics, and agentic AI controls, and turn them into practical, phased improvements with measurable outcomes.
Own enterprise PKI and certificate lifecycle management, including secure issuance, renewal, revocation, automation, and governance of certificates and cryptographic identities.
Ensure IAM controls support CMMC, DoD/CUI, SOX, TISAX, and other regulatory requirements, maintaining strong control effectiveness, audit readiness, and timely remediation.
Drive identity lifecycle integration across authoritative sources…