IAM & Provisioning Specialist — Automate Access Lifecycle

Duly Health and Care; Chicago (IL); On-site; USD 68,000 - 102,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

Mental health benefit

401(k) with match

Tuition reimbursement

Volunteer time off

Parental leave

Job summary

At Duly Health and Care, we seek an experienced IT Access & Provisioning Specialist to design, implement, and maintain automated identity lifecycle management across the enterprise, focusing on onboarding/offboarding automation with SailPoint, Active Directory, and Azure AD. You will collaborate with Cybersecurity, IT Networking, and compliance teams to strengthen access controls and data integrity.

You will lead provisioning workflows, manage joiners/movers/leavers, and help mature IAM

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field (or equivalent work experience).
• 5+ years’ hands on experience in identity and access management and privileged access management.
• 5+ years of experience with complex, cloud-based enterprise environments.
• Strong working knowledge of Active Directory (OUs, group policy, group management) and Azure AD / Microsoft Entra ID (users, groups, conditional access, licensing).
• Experience building or supporting automated provisioning/deprovisioning workflows tied to HR systems of record.
• Familiarity with identity lifecycle concepts: joiner/mover/leaver processes, RBAC, SoD, access certifications.
• Basic scripting/automation skills (Java, PowerShell, Python, or similar) for extending or troubleshooting integrations.
• Understanding of directory synchronization tools (Azure AD Connect / Entra Connect) and SSO/federation concepts (SAML, OAuth, OIDC).
• Strong analytical and troubleshooting skills, with attention to detail in high-volume, process-driven environments.
• Excellent communication skills and ability to work cross-functionally with HR, security, and application teams.

Responsibilities

• Design, build, and maintain automated onboarding and offboarding workflows using SailPoint integrated with Active Directory and Azure AD/Entra ID.
• Manage identity lifecycle events by automating account creation, role/group assignment, license provisioning, and deprovisioning.
• Deep experience managing IAM solutions in a cloud-centric environment.
• Develop and maintain connectors, rules, and workflows between SailPoint, HRIS systems (Workday), AD, Azure AD, and downstream applications.
• Configure and manage access certification campaigns, RBAC, and SoD policies within the IGA platform.
• Troubleshoot provisioning and deprovisioning failures, sync errors, and connector issues across AD/Azure AD and SailPoint.
• Collaborate with HR, IT Service Desk, and business units to ensure timely identity data flows.
• Create and maintain documentation for IAM processes, workflows, and SOPs.
• Monitor identity-related audit logs and compliance reports to ensure policies and regulatory requirements (HIPAA).
• Assist in incident response related to identity and access issues, including emergency account disablement and access reviews.

Skills

IAM

Azure AD / Entra ID

Active Directory

PowerShell

Python

Education

Bachelor's degree in IT/CS/Cybersecurity or equivalent

Tools

SailPoint

IdentityIQ/IdentityNow

HRIS integrations (Workday)

Azure AD Connect / Entra Connect

Job description

At Duly Health and Care, we seek an experienced IT Access & Provisioning Specialist to design, implement, and maintain automated identity lifecycle management across the enterprise, focusing on onboarding/offboarding automation with SailPoint, Active Directory, and Azure AD. You will collaborate with Cybersecurity, IT Networking, and compliance teams to strengthen access controls and data integrity.

You will lead provisioning workflows, manage joiners/movers/leavers, and help mature IAM