IAM Engineer — Hybrid Identity & Access Security Advocate

American Heart Association; Dallas, Northern (TX, KY); Hybrid; USD 105,000 - 115,000; Full time

Benefits offered by this job

Tuition Assistance

Employee Wellness Program

Telemedicine

PTO 16 days first year

12 paid holidays

Job summary

American Heart Association seeks an IAM Engineer to design and operate enterprise identity and access management across cloud and on‑prem environments. You will enable lifecycle management, provide secure authentication, and support role-based access controls with automation using PowerShell and Microsoft Graph.

You will collaborate with Cybersecurity, HR, and infrastructure teams to ensure compliant, reliable, and user‑friendly identity solutions aligned with policy and audits.

Qualifications

• Bachelor’s degree or equivalent experience.
• 3 years of relevant experience.
• 3+ years in identity and access management or related role.
• Hands-on experience with Microsoft Entra ID and Active Directory in enterprise environments.
• Experience with identity lifecycle management, automated provisioning, access governance, and RBAC.
• Knowledge of SAML, OAuth 2.0, OpenID Connect, and SCIM.
• Experience with MFA, Conditional Access, SSO, and privileged access controls.
• Experience with PowerShell, Microsoft Graph, REST APIs, or related scripting technologies.

Responsibilities

• Design, implement, and maintain identity lifecycle processes for employees, contractors, partners, and service identities.
• Engineer automated joiner/mover/leaver workflows using authoritative identity sources.
• Configure and support Microsoft Entra ID, Active Directory, hybrid identity synchronization, and directory-integrated apps.
• Develop and maintain RBAC, group-based access, entitlements, and access packages.
• Create automation using PowerShell, Microsoft Graph, APIs, and workflow tools to improve accuracy and speed.
• Implement and support single sign-on, MFA, passwordless authentication, Conditional Access, and risk-based access controls.
• Configure and troubleshoot SAML, OAuth 2.0, OpenID Connect, SCIM, and related protocols.
• Integrate enterprise apps with identity providers and secure provisioning patterns.
• Support privileged identity and access management controls, incl. JIT access and governance.
• Monitor IAM service health, provisioning, sync, authentication, and integration failures.
• Troubleshoot complex access issues and perform root-cause analysis across directories and apps.
• Participate in incident response, change management, and on-call rotation.

Skills

Microsoft Entra ID

Active Directory

Identity lifecycle management

Automation

PowerShell

Microsoft Graph

REST APIs

SAML

OAuth 2.0

Conditional Access

Education

Bachelor’s degree or equivalent experience

Tools

PowerShell

Microsoft Graph

REST APIs

SAML

OAuth 2.0

SCIM

Job description

American Heart Association seeks an IAM Engineer to design and operate enterprise identity and access management across cloud and on‑prem environments. You will enable lifecycle management, provide secure authentication, and support role-based access controls with automation using PowerShell and Microsoft Graph.

You will collaborate with Cybersecurity, HR, and infrastructure teams to ensure compliant, reliable, and user‑friendly identity solutions aligned with policy and audits.