Identity Access Manager

PANTHERx Rare Pharmacy; Pittsburgh (Allegheny County); Hybride; USD 110 000 - 165 000; Plein temps

Avantages offerts par ce poste

Hybrid work

Medical

Dental

Vision

401K with employer matching

Life insurance

Disability coverage

Employee Assistance Program

Generous PTO

Paid holidays

Résumé du poste

PANTHERx Rare Pharmacy is seeking an Identity & Access Manager to lead the organization’s IAM program across on-premises, cloud, and hybrid environments. You will manage IAM staff, drive zero-trust initiatives, and ensure appropriate, auditable access with least-privilege controls.

You will collaborate with IT, Security Operations, HR, and Compliance to strengthen security posture and meet regulatory requirements, including HITRUST/HIPAA readiness.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field, or equivalent experience.
• 7+ years of experience in information technology or cybersecurity, including 5+ years in IAM and at least 2 years in a leadership role.
• Experience implementing and managing enterprise IAM platforms, including hybrid environments and SSO.
• Knowledge of authentication and federation standards (SAML, OAuth, OIDC) and MFA implementations.

Responsabilités

• Lead IAM program and roadmap, including zero trust initiatives.
• Oversee identity lifecycle and directory services in hybrid environments.
• Manage authentication, privileged access, and access governance with least-privilege controls.
• Coordinate access reviews, audits, and remediation with Compliance.
• Partner with HR, IT, and business units to align IAM with regulatory requirements.

Connaissances

IAM leadership

Identity platforms

Microsoft Entra ID

Active Directory

Authentication standards

Least privilege/RBAC

Security frameworks

Cross-functional collaboration

Communication skills

Formation

Bachelor's degree or equivalent experience

Outils

Microsoft Entra ID

Active Directory

Description du poste

7,000 Diseases - 500 Treatments - 1 Rare Pharmacy

PANTHERx is the nation’s largest rare disease pharmacy, and we put the patient experience at the top of everything that we do.

If you are looking for a career in the healthcare field that embraces authentic dedication to patient care, you don’t need to look beyond PANTHERx. In every line of service, in every position and area of expertise, PANTHERx associates are driven to provide the highest quality outcomes for our patients.

We Are Seeking Team Members Who

• Are inspired and compassionate problem solvers;
• Produce high quality work;
• Thrive in the excitement of the ever-challenging environment of modern medicine; and
• Are committed to achieving superior health outcomes for people living with rare and devastating diseases.

At PANTHERx, we know our employees are the driving force in what we do. We cultivate talent and encourage growth within PANTHERx so that our associates can continue to explore their interests and expand their careers. Guided by our mission to provide uncompromising quality every day, we continue our strategic growth to further reach those affected by rare diseases.

Join the PANTHERx team, and define your own RxARE future in healthcare!

Identity & Access Manager

Location: Pittsburgh, PA (Hybrid)

Classification: Exempt

Status: Full-Time

Reports to: Director of Information Security

Purpose

The Identity & Access Manager is responsible for leading the organization’s identity and access management (IAM) program, including identity lifecycle management, authentication, authorization, privileged access, and access governance across on-premises, cloud, and hybrid environments. This role manages IAM analysts, owns the strategy and operation of core identity platforms, and ensures that access to systems and sensitive data is appropriate, auditable, and aligned with least-privilege principles. The Identity & Access Manager partners closely with IT, Infrastructure, Security Operations, HR, Compliance, and business stakeholders to reduce identity-related risk, strengthen the organization’s security posture, and support compliance with applicable regulatory and organizational requirements.

Responsibilities

IAM Program Leadership

• Lead, mentor, and develop IAM staff, including setting priorities, assigning work, conducting performance reviews, and fostering a culture of accountability and continuous learning.
• Develop and execute the IAM strategy and roadmap, including zero trust identity principles and phishing-resistant authentication initiatives.
• Manage IAM vendors, licensing, and service providers, and provide input on budget and resource planning.
• Define, track, and report IAM metrics and key risk indicators, such as access review completion, privileged account counts, MFA coverage, and provisioning turnaround time, to security leadership.

Identity Lifecycle & Directory Services

• Oversee identity lifecycle processes, including onboarding, role changes, and offboarding, in partnership with HR and IT to ensure timely and accurate provisioning and deprovisioning.
• Provide leadership and oversight for hybrid Active Directory and Microsoft Entra ID environments, including synchronization, group management, device identity, and directory hygiene.
• Oversee the management of service accounts, application registrations, managed identities, and non-human identities.
• Partner with application owners to integrate applications with enterprise single sign-on and automated provisioning using standards such as SAML.

Authentication & Privileged Access

• Own authentication standards and technologies, including multi-factor authentication, conditional access policies, and the migration to phishing-resistant methods.
• Oversee privileged access management, including just-in-time access, separation of privileged and standard accounts, and privileged account monitoring and vaulting.
• Define and maintain role-based access control models, access request workflows, and approval processes that enforce least privilege and segregation of duties.
• Establish emergency access, break-glass, and exception handling procedures with appropriate controls and monitoring.

Access Governance & Compliance

• Lead periodic access reviews, entitlement certifications, and privileged access recertifications, and track remediation of findings to closure.
• Support security audits, assessments, and compliance initiatives, including HITRUST and HIPAA, by providing evidence and remediation for access control requirements.
• Maintain identity and access policies, standards, and procedures, and track remediation of audit findings and corrective action plan items.
• Partner with data owners and Compliance to ensure access to systems containing regulated data is appropriately restricted and reviewed.

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field, or equivalent experience.
• 7+ years of experience in information technology or cybersecurity, including 5+ years in identity and access management and at least 2 years in a team lead or management role.
• Experience implementing and managing enterprise identity platforms, including Microsoft Entra ID and Active Directory in hybrid environments.
• Experience with Microsoft security technologies, including Conditional Access, Privileged Identity Management, and Identity Protection.
• Knowledge of authentication and federation standards, including SAML, OAuth, OpenID Connect, Kerberos, and SCIM, and of multi-factor authentication and privileged access management solutions.
• Strong knowledge of IAM principles, including least privilege, role-based access control, segregation of duties, zero trust, and identity lifecycle management.
• Knowledge of security frameworks and regulations, including NIST CSF, CIS Controls, HIPAA, and HITRUST.
• Proven ability to lead, coach, and develop technical staff and to manage third-party vendors.
• Strong analytical, troubleshooting, and problem-solving skills.
• Strong written and verbal communication skills with the ability to communicate technical concepts to both technical and non-technical audiences, including executive leadership.
• Ability to manage multiple priorities and work effectively across cross-functional teams.

Preferred Qualifications

• CISSP, CISM, CCSP, CRISC, Microsoft SC-300, SC-100, or other relevant identity or cybersecurity certifications.
• Experience with identity governance and administration (IGA) platforms and in a healthcare or other highly regulated environment.

Work Environment

This job functions in a professional home or office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, and fax machines.

Physical Demands

While performing the duties of this job, the employee is regularly required to sit, see, talk, or hear. The employee frequently is required to stand; walk; use hands and fingers to handle or feel; and reach with hands and arms. Visual acuity is necessary for tasks such as reading or working with various forms of data for extended periods. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the job.

Benefits

• Hybrid, remote and flexible on-site work schedules are available, based on the position.
• Medical
• Dental
• Vision
• Health savings and flexible spending accounts
• 401K with employer matching
• Employer-paid life insurance
• Short/long term disability coverage
• Employee Assistance Program!
• Generous paid time off is also available to all full-time employees
• Limited paid time off for part-time employees
• Paid holidays

Equal Opportunity

PANTHERx Rare Pharmacy is an equal opportunity employer, and does not discriminate in recruiting, hiring, promotions or any term or condition of employment based on race, age, religion, gender, ethnicity, sexual orientation, gender identity, disability, protected veteran's status, or any other characteristic protected by federal, state or local laws.