Identity & Access Management Engineer

Atrium Health; Charlotte (NC); On-site; USD 79,000 - 119,000; Full time

Benefits offered by this job

Paid Time Off

Health benefits

Flexible Spending Accounts

Family benefits

Retirement plans

Educational Assistance Program

Job summary

Advocate Health is seeking an IAM Intermediate Engineer to design, implement, and maintain identity governance and access management solutions. You will collaborate with cross-functional teams to ensure secure access across AD, cloud identities, and applications.

Responsibilities include troubleshooting, incident response, and improving IAM processes, with emphasis on security controls and regulatory compliance across healthcare environments.

Qualifications

• At least 3 years of IAM engineering, administration, or support experience.
• Strong knowledge of identity lifecycle management and access controls.
• Experience with IAM tooling and security best practices.

Responsibilities

• Design, implement, and maintain IAM solutions including IGA, PAM, and SSO.
• Test, validate, and QA IAM systems for security and performance.
• Troubleshoot IAM issues and collaborate with vendors for escalation.
• Assist in disaster recovery, monitoring, and documentation of IAM processes.

Skills

Powershell

C#

SailPoint

SQL

Education

Bachelor's Degree in Information Systems or related field

Tools

Active Directory

Azure AD

SSO

MFA

SAML

OAuth

LDAP

SCIM

IBM Verify

Okta

Job description

Department

12264 Enterprise Corporate - IT Service Delivery

Status

Full time

Benefits Eligible

Yes

Hours Per Week

40

Schedule Details/Additional Information

Powershell, C#, SailPoint, SQL

Pay Range

$38.20 - $57.30

Major Responsibilities

Design, implement, andmaintaincomplex IAM solutions, including IGA, PAM, and SSO, using various tools and technologies, suchas SailPoint, Active Directory, IBM Verify, Azure AD, Okta, MFA, SAML, OAuth, and LDAP.Participate in testing, validation, and quality assurance of IAM solutions, ensuring functionality, performance, security,monitorandauditIAM systems, activities, and processes.Assistin developing andimplementprocess improvement initiatives, backup and recovery procedures, and security optimization tasks within IAM.Perform troubleshooting, analysis and remediation of access and permissions issues. Assist working collaboratively with vendors attechnicallevel to resolve problems and manage escalation. Manage the identity lifecycle and access policies for users, groups, roles, and applications across the organization.Assistwith investigations and responses to high-impact IAM incidents,assistteamtocontainand mitigate threats.Perform access reviews, risk assessments, vulnerabilityanalysisand audits to ensure compliance with IAM policies and standards, and provide audit, privacy, legal and compliance support for IAM security/access related issues.Adhere to all procedures necessary to protect information systems from intentional or inadvertent modification, disclosure, or destruction. Provide technical support and guidance to clients and internal teams on IAM-related matters, such as user provisioning, access requests, password resets, authentication issues, identity governance, identity verification,etc.Monitor and audit the IAM management systems and processes, make recommendations, takeappropriate actionto ensure the best performance, and generate reports and metrics.Responsible for developing and reporting on overall metrics of assigned areas of responsibility.Evaluate and implement improvements tomonitoringprotocols.Assistin creating andmaintainingcomprehensive IAM documentation, including architecture designs, IAM policies, process workflows, procedures, configurations, and compliance reports, and ensure they align with the best practices and industry standards. Identify, implement securitycontrolsand remediate any IAM vulnerabilities, risks, or gaps, and implement corrective actions and preventive measures.Assistin ensuring IAM practices align with regulatory requirements (e.g.SOX, PCI DSS, FFIEC, HIPAA), conduct security audits, and support compliance efforts. Support security/access related records in all phases including build, configuration, testing, implementation, go-live support, and optimization, and perform process improvement and security optimization tasks.Serve as escalation for the application teams for security/access issues, and asIAMpoint of contact for assigned audits and security related activities with other departments. Document all responses.Facilitate disaster recovery and business continuance configurations and procedures.Assistindisaster recovery and businesscontinuanceconfigurations and procedures. Analyze and resolve IAM issues and incidents and provide root cause analysis and recommendations for improvement.Evaluate/resolve issues/tickets working with customers as needed. Recommend and implement solutions for problems within the team. Participate incomplexIAM projects and initiatives, and collaborate with other engineers, analysts, and managers to deliver high-quality IAM solutions.Analyzes business requirements and creates technical recommendations.Assistin the resolution of project issues and recording time against tasks accurately and timely.Assistin work plan development and management. Ensure successful completion of assigned projects on schedule, within budget, andin accordance withAdvocate Health standards. Collaborate with the IAM team, application owners, and business stakeholders to understand and document IAM requirements and issues.Ensures integrity for application delivery, creates tasks, work estimates, and resource requirementsonthose tasks. Communicates with teammates and customersin order tokeep them informedwith regard toactivity status and potential problem areas and provides recommendations to management.Identifyand understandbusinessimpact of decisions made to fulfill customer expectations. Contribute to team effort bysharing ofknowledge, aiding, anddemonstratinginitiative.Train and mentor other IAM teammembers.Define protocol for working with customers and appropriately balance needs and resources. Maintain knowledge of applicable technologies, job/system related forums,roadmapsand/or related documentation. Research and evaluate new IAM technologies and best practices and recommend improvements and enhancements to the IAM architecture and processes.

Licensure, Registration, And/or Certification Required

IAM certification (SailPoint, Okta, or other IAM engineering related certification) withinoneyearemployment.

Education Required

Bachelor's Degree (or equivalent knowledge) in Information Systems, ComputerScienceor related field

Experience Required

Typically requires at least three years of experience in IAM Engineering, administration, or support, preferably in a large and complex environment and 5 yearsofexperience in IT fields such as Cyber Security, Epic Security, or other technical areas;oran equivalent combination of education and experience.Strong knowledge and skills in IAM concepts, principles,bestpracticesand standards, such as identity lifecycle management, access management, authentication, authorization,provisioning, deprovisioning, auditing,and identity federation.Proficient in IAM tools and technologies, such as Active Directory, Azure AD, SSO, MFA, SAML, OAuth,LDAPand SCIM. Experience in scripting and automation using PowerShell, Python,Bash, JavaScript, Java,C#or other languages. Experience in cloud computing platforms and services, such as Azure, AWS, or Google Cloud.

Preferred remote locations in IL, WI, NC, GA

Fully Remote Role from these states: AL, AK, AR, AZ, DE, FL, GA, IA, ID, IN, IL (Only WI/IL Division), LA, KS, KY, ME, MI, MO, MS, MT, NC, ND, NE, NH, NM, NV, OH, OK, PA, SC, SD, TN, TX, UT, VA, WI, WV, WY

Due to complex requirements, remote work is NOT permitted for short or long periods in: CA, DC, CO, CT, HI, MA, MD, MN, NJ, NY, OR, RI, VT, WA. and working Internationally (this includes working while on vacation)

No relocation, No Sponsorship or student visa for this position now or in the future.

Knowledge, Skills & Abilities Required

Strong technical skills inIAM tools,scripting languages (PowerShell, Python, Bash, JavaScript, Java, C#, or other languages), and a deep understanding of security controls and industry standards.Requires an understanding of IAM technology, process and procedures and the ability to apply that understanding to supporting existing systems and/or implementing new systems that directlybenefitthe patientcare, education, and research and/or business functions of Advocate Health.Strong knowledge of user provisioning procedures and role-based access control. Detailed knowledge of security as it relates to application support.Understanding ofsecurity mechanisms with clinical and hospital information systems.Knowledge of industry standard frameworks and controls such asNIST,CIS, SOX, and Zero Trust principles. Advanced knowledge of operating systems, vendor-specific environments, and other system software.Broad understanding of tools and technologies from end user devices through the database managementsystem.SQL knowledge is a plus. Strong data analytical, critical thinking, reasoning, deduction, inference, and problem-solving skills.Ability to learnnew technologiesand skills quickly. Ability tomaintaina high levelof confidentiality.Excellent verbal and written communication skills and the demonstrated ability to communicate well with all levels of the organization. Ability to work ina fast-paced, dynamic team environment. Highly organized with the ability to work onnumeroussimultaneous activities while paying attentionto detail and quality.Experience in project management and agile methodologies, such as Scrum or Kanban, is a plus. Proven experience working in ateam-oriented, collaborative environment.Foster a cooperative work environment by usingeffectivecommunication skills, interpersonalrelationshipsand team building. Demonstrates experience in developing processes and documents to ensure quality delivery of services. Clearand strong understanding of customer service requirements and skills.Demonstrated facilitation skills and ability to explain technical subjects to non-technical clients.Demonstrated ability to translate user requirements into system specifications. Self-motivated, able to work independently to complete tasks and respond to department requests and to collaborate with others toutilizetheir resources and knowledge toidentifyhigh qualitysolutions. ProficiencyinMicrosoftSuite (Word, PowerPoint, Excel, Access,Outlook) or similar products.

Physical Requirements And Working Conditions

Work is subject to high-level visibility through verbal and written communications with senior management. This position requires travel, therefore, will be exposed to weather and road conditions. Operates all equipment necessary to perform the job. Exposed to a normal office environment. Position will require off-hourssupport and on-call rotation.Due to project requirements and schedules in Advocate Health, overtime,eveningand weekend hours may berequiredat times for conversions, training, etc. Access to verbal,writtenand electronic PHI for this job has been determined based on job level and job responsibility within the organization. Will limit access to protected health information (PHI) to the informationreasonably necessaryto do the job. Will share information only on aneed-to-knowbasis for work purposes. Each employee has the responsibility towork in a safe manner. Employee doesnot have direct patient contact. Must be able to lift objects that weigh up to 35 lbs.

Preferred Job Requirements

Preferred Certification / License:

Certifications in IAM, security or Epic are a plus.

DISCLAIMER

All responsibilities and requirements are subject to possible modification to reasonably accommodate individuals with disabilities. This job description in no way states or implies that these are the only responsibilities to be performed by an employee occupying this job or position. Employees must follow any other job-related instructions and perform any other job-related duties requested by their leaders.

Our CommitmenttoYou

Advocate Health offers a comprehensive suite of Total Rewards: benefits and well-being programs, competitive compensation, generous retirement offerings, programs that invest in your career development and so much more – so you can live fully at and away from work, including:

• Base compensation listed within the listed pay range based on factors such as qualifications, skills, relevant experience, and/or training
• Premium pay such as shift, on call, and more based on a teammate's job
• Incentive pay for select positions
• Opportunity for annual increases based on performance

Benefits And More

• Paid Time Off programs
• Health and welfare benefits such as medical, dental, vision, life, andShort- and Long-Term Disability
• Flexible Spending Accounts for eligible health care and dependent care expenses
• Family benefits such as adoption assistance and paid parental leave
• Defined contribution retirement plans with employer match and other financial wellness programs
• Educational Assistance Program

Note: Eligibility for programs listed above may depend on your FTE or status (e.g., full-time, part-time, per diem, temporary, etc.); please ask a Recruiter for more information during an interview.

About Advocate Health

Advocate Health is the third-largest nonprofit, integrated health system in the United States, created from the combination of Advocate Aurora Health and Atrium Health. Providing care under the names Advocate Health Care in Illinois; Atrium Health in the Carolinas, Georgia and Alabama; and Aurora Health Care in Wisconsin, Advocate Health is a national leader in clinical innovation, health outcomes, consumer experience and value-based care. Headquartered in Charlotte, North Carolina, Advocate Health services nearly 6 million patients and is engaged in hundreds of clinical trials and research studies, with Wake Forest University School of Medicine serving as the academic core of the enterprise. It is nationally recognized for its expertise in cardiology, neurosciences, oncology, pediatrics and rehabilitation, as well as organ transplants, burn treatments and specialized musculoskeletal programs. Advocate Health employs 155,000 teammates across 69 hospitals and over 1,000 care locations, and offers one of the nation’s largest graduate medical education programs with over 2,000 residents and fellows across more than 200 programs. Committed to providing equitable care for all, Advocate Health provides more than $6 billion in annual community benefits.

The Enterprise Identity & Access Management (IAM) Intermediate Engineer is responsible for designing, implementing, and maintaining IAM solutions, including Identity Governance and Administration (IGA), Privileged Access Management (PAM, and Single Sign-On (SSO), that meet the security and compliance requirements of Advocate Health. Using specialized technical knowledge, work with various teams and stakeholders to understand their business needs, security requirements and provide them with effective and scalable solutions. Provides high-level technical support, planning, configuration, installation, and system administration. Troubleshoot and resolve any IAM-related issues and incidents and ensure compliance with industry standards and best practices. Monitor security related events and perform initial evaluation and response to alarms and incidents.