Identity and Access Management (IAM) SailPoint Administrator

Atos; Chicago (IL); Ibrido; USD 100.000 - 125.000; Tempo pieno

Vantaggi offerti da questo lavoro

Remote and hybrid working options

Wellbeing programs

Career development opportunities

Descrizione del lavoro

Atos is seeking an IAM SailPoint Administrator to manage SailPoint ISC and NERM for Cook County Health, ensuring secure identity lifecycle operations in a HIPAA/NIST-aligned environment.

You will configure provisioning workflows, RBAC/ABAC models, and ongoing access governance, coordinating with IAM leadership, HRIS, and application owners. This role supports a secure, compliant identity program in a healthcare setting.

Competenze

• Strong understanding of IGA methodologies and IAM best practices.
• 3-5+ years of experience supporting Identity & Access Management or IGA platforms.
• Hands-on experience with SailPoint Identity Security Cloud and NERM.
• Experience with Active Directory user administration, Entra ID, LDAP, SCIM, SSO, MFA, and HRIS systems.
• Ability to work in a complex, unionized healthcare environment.

Mansioni

• Administer SailPoint ISC configurations, including identity profiles, access profiles, roles, policies, and lifecycle event triggers.
• Configure provisioning workflows, approval chains, and automated lifecycle events (Joiner–Mover–Leaver).
• Develop and maintain SailPoint Rules (Before/After Provisioning, Aggregation, Correlation).
• Maintain identity attribute mappings, correlation logic, authoritative source configurations, and identity data quality.
• Monitor and troubleshoot provisioning failures, connector alerts, and identity synchronization issues.
• Support connector configuration for AD, Entra ID, Epic, FreshService, HRIS, and other apps.
• Maintain documentation for configurations, workflows, and procedures.

Conoscenze

IGA methodologies

IAM best practices

data accuracy

multi-tasking

clear communication

cross-functional collaboration

explain IAM concepts

healthcare environment

Formazione

Bachelor’s degree in IT/CS/Cybersecurity or related field

Strumenti

SailPoint Identity Security Cloud

Non-Employee Risk Management (NERM)

Active Directory

Entra ID

LDAP

SCIM

SSO

MFA

HRIS

Descrizione del lavoro

Identity and Access Management (IAM) SailPoint Administrator

Ref. No: 551642

Location: Chicago, US

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

Atos also provides consulting and advisory services through its Atos Amplify brand.
A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.

Atos Group is a global leader in digital transformation with c. 54,000 employees and annual revenue of c. €7.2 billion, operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.

The IAM SailPoint Administrator is responsible for the day-to-day administration, configuration, and operational support of Cook County Health’s Identity Governance & Administration (IGA) platforms, including SailPoint Identity Security Cloud (ISC) and Non-Employee Risk Management (NERM). This role ensures secure, compliant, and efficient identity lifecycle operations by managing provisioning workflows, entitlement governance, certification campaigns, and user-access–level directory operations.

The IAM SailPoint Administrator partners with IAM leadership, HRIS, IT, and application owners to maintain accurate identity data, streamline access processes, and support the modernization of the IAM program in alignment with HIPAA, NIST, Zero Trust, and internal governance requirements

What will you be doing:

SailPoint Identity Security Cloud (ISC) Administration:

• Administer and maintain SailPoint ISC configurations, including Identity Profiles, Access Profiles, Roles, Policies, and Lifecycle Event triggers.
• Configure and support provisioning workflows, approval chains, and automated lifecycle events (Joiner–Mover–Leaver).
• Develop and maintain SailPoint Rules (Before/After Provisioning, Aggregation, Correlation).
• Maintain identity attribute mappings, correlation logic, authoritative source configurations, and identity data quality.
• Monitor and troubleshoot provisioning failures, connector alerts, and identity synchronization issues.
• Support connector configuration and maintenance for Active Directory, Entra ID, Epic, FreshService, HRIS, and other enterprise applications (cloud/on-prem).
• Maintain documentation for configurations, workflows, and operational procedures.

Application Onboarding & Integration:

• Assist with onboarding new applications into SailPoint, including schema review, entitlement harvesting, and basic connector configuration.
• Collaborate with application owners to define entitlements, roles, and access policies.
• Validate provisioning, deprovisioning, and access governance readiness for onboarded applications.
• Support testing of SAML, OAuth2, OIDC, SCIM, and REST-based integrations (no engineering or custom development).
• Identity Governance and Compliance: Configure and support access certification campaigns (manager, application owner, role-based).
• Maintain RBAC/ABAC models and support role lifecycle activities.
• Monitor identity risks such as orphaned accounts, excessive access, and stale entitlements.
• Support audit and compliance activities (HIPAA, SOX, PCI, ISO 27001) through evidence collection, reporting, and remediation tracking.
• Ensure IAM processes align with internal governance, regulatory requirements, and Zero Trust principles.

Active Directory and Entra ID – User Access Administration:

• Manage user-access-level AD and Entra ID operations, including:
• group membership updates
• directory attribute maintenance
• Support identity data flows between SailPoint, AD, Entra ID, HRIS, and downstream systems.
• Troubleshoot user-level directory synchronization issues and access discrepancies.
• Maintain clean, accurate directory structures for identity lifecycle operations.

Operational Excellence and Monitoring:

• Monitor SailPoint system health, job schedules, queue performance, and connector throughput.
• Maintain dashboards and reporting for identity lifecycle metrics and operational KPIs.
• Document operational procedures, troubleshooting steps, and configuration changes.

Requirements

• Strong understanding of IGA methodologies and IAM best practices.
• High attention to detail and data accuracy
• Ability to manage multiple priorities in a fast-paced environment
• Clear and professional communication skills
• Commitment to secure, compliant, and efficient identity operations
• Collaborative mindset with cross-functional teams
• Ability to explain IAM concepts to technical and non-technical individuals.
• Bachelor’s degree in information technology (IT), Computer Science, Cybersecurity, or a related field OR equivalent experience.
• 3-5+ years of experience supporting Identity & Access Management or IGA platforms.
• Hands-on experience with SailPoint Identity Security Cloud and Non-Employee Risk Management (NERM).
• Strong understanding of identity lifecycle management, RBAC/ABAC, SoD, and access governance.
• Experience with Active Directory user administration, Entra ID, LDAP, SCIM, SSO, MFA, and HRIS systems.
• Strong analytical and troubleshooting skills.
• Ability to work in a complex, unionized healthcare environment.

Preferred Qualifications

• SailPoint Identity Security Administrator certification.
• Experience with Cerner, Epic or other EMR identity models.
• Experience with cloud identity platforms (Entra ID, AWS IAM, GCP IAM).
• Experience with PowerShell for operational automation (light scripting only).
• Experience with Postman.Familiarity with healthcare regulatory requirements (HIPAA, HITECH).
• Experience supporting identity operations in regulated industries (healthcare or financial).

Schedule:

• Monday-Friday 7:00am-4pm CST
• May require nights and/or weekends for implementation, upgrades, etc. while project is active.

The total compensation range for this role is $100,000 – $125,000 USD.

The compensation range listed for this position reflects the minimum and maximum target compensation that Atos, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.

The actual compensation offered to any candidate may fall outside the posted range and will be determined based on multiple factors permitted by applicable law. These may include, but are not limited to, geographic location, education and qualifications, certifications and licenses, relevant experience and skills, seniority and performance, market and business considerations, and internal pay equity.

It is not typical for candidates to be hired at or near the top of the posted compensation range.

Rewards and benefits:

• Wellbeing programs & work-life balance - integration and passion sharing events.
• Opportunities for professional growth and career advancement.
• Remote and hybrid working possibilities.
• Continuous learning programs and online courses.
• Possibility to participate to charity and eco initiatives.

Career Path

At Atos, as a global leader in secure and decarbonized digital business technology, our purpose is to help design the future of the information space.
Together we bring the diversity of our people’s skills and backgrounds to make the right choices with our clients, for our company and for our own futures.
At Atos, the future is our choice.

Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.

Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment.