Senior Security Engineer – Identity and Access Management

Overview

• We are seeking a highly motivated Senior Security Engineer with a strong passion for Identity and Access Management (IAM) to join our Enterprise Security & Infrastructure (ESI) organization.
• The ideal candidate brings hands‑on experience designing, engineering, implementing, and supporting enterprise‑scale identity solutions across hybrid environments (on‑premises and cloud).
• This role requires a deep understanding of modern identity technologies, along with the ability to secure and optimize identity platforms that support critical business operations.
• A successful engineer in this role will maintain awareness of new security and identity trends, research, evaluate, design, and recommend technical security solutions for the enterprise.
• This role is critical in ensuring the secure, efficient, and compliant management of identities and access across the organization, helping to protect enterprise assets while enabling business productivity.
• The Senior Security Engineer, Identity & Access Management is responsible for designing, implementing, and maintaining secure, scalable IAM solutions across hybrid environments, while driving modernization toward Zero Trust and cloud‑based identity models.
• This role focuses on engineering automated identity processes, strengthening access governance and privileged access controls, and integrating AI‑enabled capabilities to enhance security and operational efficiency.
• The engineer partners closely with cross‑functional teams to assess and mitigate identity‑related risks, implements monitoring and automated response for identity threats, and contributes to technology evaluation and innovation.
• Additionally, the role ensures compliance with regulatory requirements, supports audit readiness, and establishes standards and best practices to continuously improve enterprise identity security.

Requirements

• Bachelor's degree in computer engineering, Computer Science, Mathematics, Engineering.
• 5 years related experience; 5‑8 years preferred.
• Experience collaborating on security solution designs for the TCP/IP protocol suite, LAN/WAN technologies, switching, routing, VoIP and telephony technologies, firewalls and VPN, intrusion prevention systems (IPS), vulnerability assessment, and patch management tools.
• Functional experience designing security controls and countermeasures for operating systems, databases, applications, Web services, user devices, and wireless networks.
• 6+ years of Identity and Access Management experience.
• Experience supporting an enterprise environment with over 10,000 accounts.
• Experience working in a Healthcare environment.
• Upon hire: CISSP, CIAM, Identity or Security related certification or equivalent.
• Familiarity with regulatory and compliance frameworks (e.g., HIPAA, NIST, ISO).
• Proven experience designing and supporting IAM solutions in hybrid Active Directory and cloud environments (e.g., Microsoft Entra ID/Azure AD).
• Strong understanding of Zero Trust principles, least privilege access, and identity governance.
• Hands‑on experience with authentication protocols and standards (e.g., SAML, OAuth, OIDC, Kerberos, LDAP).
• Strong experience with automation and scripting, particularly PowerShell, Python and Microsoft Graph API.
• Experience building automated identity workflows using Azure Logic Apps, Power Automate, or similar orchestration tools.
• Experience leveraging AI‑assisted tools (e.g., GitHub Copilot, Microsoft Security Copilot, Claude Code) to accelerate automation and security operations.
• Strong collaboration skills with cross‑functional teams including infrastructure, application, and security teams.
• Ability to manage multiple priorities and deliver results in a fast‑paced environment.
• Continuous learning mindset with a focus on staying current with identity and security trends.
• Strong problem‑solving and analytical skills with the ability to troubleshoot complex identity issues.
• Ability to evaluate new technologies and translate business requirements into secure technical solutions.
• Effective communication skills, with the ability to explain technical concepts to both technical and non‑technical stakeholders.