Sagility is a tech-enabled BPM services provider, a thought partner providing a broad spectrum of transformational services, to enable our clients to provide efficient and hi-quality care across the healthcare system.
Sagility™️ combines industry-leading technology and transformation-driven BPM services with decades of healthcare domain expertise to help clients draw closer to their members. We optimize the entire member/patient experience through service offerings for clinical, case management, member engagement, provider solutions, payment integrity, claims cost containment, and analytics.
Leading industry analyst firms have consistently cited our service excellence, breadth of offerings, and ability to execute. The most recent being recognized as a leader for Healthcare Payer Operations in 2022 as a part The Healthcare Payer Operations PEAK Matrix® Assessment report by Everest Group. To learn more about our recognition please visit our AWARDS SECTION
We have 48,000+ employees in 15 cities across 5 countries – India, Philippines, USA, Jamaica, and Colombia.
ROLE PURPOSE:
The VP – Global Systems, Identity & Enterprise Platforms will provide global leadership, architecture governance and operational accountability for enterprise directory services, identity and access management, single sign-on, DNS, Netskope and ServiceNow Software Asset Management. The role will define the strategy and roadmap for these platforms, strengthen security and resilience, drive standardization and automation, and ensure consistent service delivery across regions.
PRIMARY ACCOUNTABILITY AREAS:
Global Systems Strategy & Governance
- Define and execute a multi-year global roadmap for directory, identity, access, DNS, secure access and software asset management platforms.
- Own architecture principles, engineering standards, lifecycle plans, capacity forecasts and technology debt remediation for the assigned platforms.
- Establish global operating models, service ownership, decision rights, control frameworks and measurable service outcomes.
- Partners with Security, Infrastructure, Applications, Service Management, Risk, Audit, Procurement and regional technology teams align priorities and controls.
Active Directory & Directory Services
- Provide end-to-end ownership of the global Active Directory service, including forest and domain architecture, domain controllers, sites and services, replication, trusts, Group Policy and directory health.
- Drive hardening, tiered administration, privileged access controls, service account governance and reduction of legacy dependencies.
- Lead domain consolidation, modernization, migration and remediation programs while protecting business continuity.
- Ensure resilient backup, recovery, disaster recovery testing, patching, vulnerability remediation and configuration compliance for directory infrastructure.
- Govern enterprise identity data quality, joiner-mover-leaver dependencies and integrations with authoritative identity sources.
Identity & Access Management (IAM)
- Own the IAM strategy and service roadmap spanning identity lifecycle, access request, approval, provisioning, de-provisioning, authentication and access certification.
- Drive role-based access control, least privilege, segregation of duties and policy-based access across enterprise applications and infrastructure.
- Govern privileged identity and privileged access integrations in partnership with Cybersecurity.
- Improve identity lifecycle automation and control effectiveness across employees, contractors, service accounts and non-human identities.
- Lead periodic access reviews, control evidence, exception governance and remediation of identity-related audit findings.
Single Sign-On & Federation
- Provide governance and engineering leadership for enterprises SSO and federation services using standards such as SAML 2.0, OpenID Connect and OAuth 2.0.
- Own application onboarding patterns, integration standards, authentication policies and lifecycle management for SSO-connected applications.
- Drive strong authentication and adaptive access adoption in alignment with the enterprise security architecture.
- Ensure availability, certificate lifecycle management, monitoring and recovery readiness for federation and authentication services.
Enterprise DNS & Naming Services
- Own global DNS architecture, standards and operational governance for internal and external naming services.
- Govern zones, records, delegation, forwarding, IP address dependencies, change controls and DNS security configurations.
- Ensure resilient design, monitoring, backup, disaster recovery and lifecycle management of DNS platforms and supporting infrastructure.
- Coordinate domain registration, certificate and public DNS dependencies with Security, Network, Application and external service providers.
Netskope Platform Leadership
- Own Netskope platform strategy, governance and service performance as part of the enterprise secure access and cloud security ecosystem.
- Lead policy architecture, platform engineering, deployment standards, integration governance and operational monitoring in partnership with Cybersecurity and Network teams.
- Drive consistent controls for sanctioned and unsanctioned cloud usage, web access, data protection and remote access scenarios, according to approved enterprise policies.
- Oversee incident support, platform upgrades, capacity, licensing, service improvements and vendor technical governance.
ServiceNow Software Asset Management (SAM)
- Own the ServiceNow SAM operating model, platform roadmap and data governance required for reliable software asset visibility.
- Establish processes for software discovery, normalization, entitlement records, license position, reclamation, renewal support and audit readiness.
- Drive integration of SAM with discovery, CMDB, procurement, contract, finance and endpoint data sources.
- Partner with Procurement, Finance, Legal, Application Owners and Infrastructure teams to improve license compliance and optimize software spend.
- Define data quality controls, reconciliation cadence, exception management and executive reporting for strategic publishers and enterprise software.
Operations, Reliability & Service Management
- Be accountable for service availability, performance, security, operational resilience and customer experience across the in-scope platforms.
- Lead major incident governance, root-cause analysis, problem elimination, change quality and continual service improvement.
- Ensure monitoring, alerting, logging, runbooks, knowledge articles, support models and escalation paths are complete and current.
- Define service-level objectives and operational metrics, and review trends with global stakeholders and service partners.
Audit, Compliance & Controls Management
- Act as the Technology Owner and primary point of contact for audits related to Active Directory, Identity & Access Management (IAM), Single Sign-On (SSO), DNS, Netskope, ServiceNow SAM, and associated infrastructure platforms.
- Ensure compliance with corporate policies, regulatory requirements, customer contractual obligations, and industry security frameworks.
- Coordinate Internal Audit, External Audit, ITGC, SOX, ISO 27001, Cybersecurity, Privacy, and customer compliance assessments for in-scope platforms.
- Provide audit evidence, control documentation, architecture diagrams, configuration standards, access reviews, system reports, and operational records within agreed timelines.
People, Partner & Financial Leadership
- Lead and develop global engineering teams spread across North America, Jamaica, India and Philippines, through clear accountabilities, technical career paths, succession planning and capability building.
- Provide technical direction to managed service providers, OEMs and strategic partners; govern performance, risks, contractual outcomes and improvement plans.
- Own budgeting, forecasting, licensing oversight and value realization for the assigned technology portfolio.
- Communicate platform health, risks, priorities, investment needs and outcomes to senior technology and business leadership.
REQUIRED EXPERIENCE AND QUALIFICATIONS
Experience:
Typically, 15+ years in enterprise infrastructure, systems engineering or identity services, including significant experience leading global technology platforms and teams at senior management level.
Directory services
Deep expertise in Microsoft Active Directory architecture, Group Policy, DNS, federation, directory security, troubleshooting, resilience and modernization.
Identity
Strong experience in IAM, identity lifecycle, access governance, RBAC, authentication, SSO, federation and privileged access concepts.
Platforms
Hands-on leadership experience with enterprise DNS, Netskope and ServiceNow SAM or comparable enterprise platforms.
Service management
Strong command of ITIL practices, operational resilience, major incident and problem management, change governance, service metrics and continual improvement.
Security and risk
Working knowledge of Zero Trust, least privilege, segregation of duties, vulnerability remediation, audit controls, regulatory expectations and evidence-based compliance.
Automation
Ability to drive automation through PowerShell, APIs, workflow tools and infrastructure-as-code or configuration-management approaches.
Leadership
Demonstrated ability to lead geographically distributed teams, influence senior stakeholders, govern strategic partners and translate technical risk into business decisions.
PREFERRED CERTIFICATIONS:
- Microsoft identity, security, Windows Server or Azure architecture certification relevant to the role.
- Identity and access management certification such as CIAM, CIMP or equivalent.
- ServiceNow SAM Professional, SAM Implementer or comparable software asset management certification.
- Netskope, cloud security, Zero Trust or security architecture certification.
- ITIL 4, TOGAF, CISSP, CISM or equivalent certification is desirable.
