Hybrid Identity & Access Security Analyst II

Edward Elmhurst Health; Skokie, Northern (IL, KY); Hybrid; USD 80,000 - 125,000; Full time

Benefits offered by this job

Free Parking

Tuition Reimbursement

Health Savings Account Options

Job summary

Endeavor Health is seeking an IAM Security Analyst II in Skokie, IL or Warrenville, IL or Arlington Heights, IL. You will administer enterprise identity lifecycle, governance, and access control using IGA, PAM, and Microsoft Entra, focusing on onboarding, RBAC, and automated provisioning.

Ideal candidates have 4+ years IAM, strong scripting (PowerShell, Python), and collaboration across teams. This role requires on-call duties and adherence to regulatory standards.

Qualifications

• Bachelor's degree with 3+ years IT security or IAM experience.
• 4+ years Identity and Access Management experience preferred.
• Healthcare experience a plus.
• Experience with PowerShell and Python scripting.

Responsibilities

• Triage, build, and fulfill user lifecycle requests and access provisioning.
• Resolve Tier 2/3 IAM incidents; participate in on-call.
• Support IAM/IGA platforms; plan, test, deploy, and train.
• Collaborate with IT teams; standardize RBAC and lifecycle workflows.
• Mentor IAM Analyst I, guide scripting and best practices.
• Lead small-to-medium security or identity automation projects.
• Maintain SOPs and operational documentation.

Skills

IAM governance

RBAC design

Incident response

Education

Bachelor's degree in IT or related field

Tools

PowerShell

Python

JSON

IGA platform

Job description

Endeavor Health is seeking an IAM Security Analyst II in Skokie, IL or Warrenville, IL or Arlington Heights, IL. You will administer enterprise identity lifecycle, governance, and access control using IGA, PAM, and Microsoft Entra, focusing on onboarding, RBAC, and automated provisioning.

Ideal candidates have 4+ years IAM, strong scripting (PowerShell, Python), and collaboration across teams. This role requires on-call duties and adherence to regulatory standards.