IT Analyst II - Access and Provisioning Specialist

Duly Health and Care; Chicago (IL); On-site; USD 68,000 - 102,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

Mental health benefit

401(k) with match

Tuition reimbursement

Volunteer time off

Parental leave

Job summary

At Duly Health and Care, we seek an experienced IT Access & Provisioning Specialist to design, implement, and maintain automated identity lifecycle management across the enterprise, focusing on onboarding/offboarding automation with SailPoint, Active Directory, and Azure AD. You will collaborate with Cybersecurity, IT Networking, and compliance teams to strengthen access controls and data integrity.

You will lead provisioning workflows, manage joiners/movers/leavers, and help mature IAM

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field (or equivalent work experience).
• 5+ years’ hands on experience in identity and access management and privileged access management.
• 5+ years of experience with complex, cloud-based enterprise environments.
• Strong working knowledge of Active Directory (OUs, group policy, group management) and Azure AD / Microsoft Entra ID (users, groups, conditional access, licensing).
• Experience building or supporting automated provisioning/deprovisioning workflows tied to HR systems of record.
• Familiarity with identity lifecycle concepts: joiner/mover/leaver processes, RBAC, SoD, access certifications.
• Basic scripting/automation skills (Java, PowerShell, Python, or similar) for extending or troubleshooting integrations.
• Understanding of directory synchronization tools (Azure AD Connect / Entra Connect) and SSO/federation concepts (SAML, OAuth, OIDC).
• Strong analytical and troubleshooting skills, with attention to detail in high-volume, process-driven environments.
• Excellent communication skills and ability to work cross-functionally with HR, security, and application teams.

Responsibilities

• Design, build, and maintain automated onboarding and offboarding workflows using SailPoint integrated with Active Directory and Azure AD/Entra ID.
• Manage identity lifecycle events by automating account creation, role/group assignment, license provisioning, and deprovisioning.
• Deep experience managing IAM solutions in a cloud-centric environment.
• Develop and maintain connectors, rules, and workflows between SailPoint, HRIS systems (Workday), AD, Azure AD, and downstream applications.
• Configure and manage access certification campaigns, RBAC, and SoD policies within the IGA platform.
• Troubleshoot provisioning and deprovisioning failures, sync errors, and connector issues across AD/Azure AD and SailPoint.
• Collaborate with HR, IT Service Desk, and business units to ensure timely identity data flows.
• Create and maintain documentation for IAM processes, workflows, and SOPs.
• Monitor identity-related audit logs and compliance reports to ensure policies and regulatory requirements (HIPAA).
• Assist in incident response related to identity and access issues, including emergency account disablement and access reviews.

Skills

IAM

Azure AD / Entra ID

Active Directory

PowerShell

Python

Education

Bachelor's degree in IT/CS/Cybersecurity or equivalent

Tools

SailPoint

IdentityIQ/IdentityNow

HRIS integrations (Workday)

Azure AD Connect / Entra Connect

Job description

At Duly Health and Care, you are supported to do your best work and make a meaningful impact every day. You will be part of a collaborative, physician-led team that works as one and puts patients at the center of everything we do. With a connected network of providers, care teams, and services across primary and specialty care, surgery centers, imaging, lab, and therapy, you are part of a system designed to deliver high-quality, coordinated care. Together, we create an environment where you can grow, contribute, and help improve the experience and outcomes for every patient we serve.

Benefits:

• Comprehensive medical, dental, and vision benefits that include healthcare navigation assistance.
• Access to a mental health benefit at no cost.
• Employer provided life and disability insurance.
• $5,250 Tuition Reimbursement per year.
• Immediate 401(k) match.
• 40 hours paid volunteer time off.
• A culture committed to community engagement and social impact.
• Up to 12 weeks parental leave at 100% pay and a financial benefit for adoption and surrogacy for non-physician team members once eligibility requirements are met.

JOB DESCRIPTION

We are seeking an experienced IT Access & Provisioning Specialist to design, implement, and maintain automated identity lifecycle management across the enterprise with a strong focus on onboarding/offboarding automation using tools like SailPoint IdentityIQ/IdentityNow, Active Directory, and Azure AD (Entra ID). The Specialist partners closely with Cybersecurity, IT Network & Infrastructure, application owners, business stakeholders, and compliance teams on access reviews, role-based access controls, provisioning workflows, and process improvement initiatives.

Key Responsibilities

• Design, build, and maintain automated onboarding and offboarding workflows using SailPoint (or equivalent IGA tools) integrated with Active Directory and Azure AD/Entra ID.
• Manage identity lifecycle events (joiners, movers, leavers) by automating account creation, role/group assignment, license provisioning, and deprovisioning.
• Deep experience managing IAM solutions (e.g. Azure AD, Okta, Imprivata, Ping, AuthX, etc.) in a cloud-centric environment (e.g. Epic, D365, WorkDay, Salesforce, Five9, etc.).
• Develop and maintain connectors, rules, and workflows between SailPoint, HRIS systems (e.g., Workday), AD, Azure AD, and downstream applications.
• Configure and manage access certification campaigns, role-based access control (RBAC), and segregation of duties (SoD) policies within the IGA platform.
• Troubleshoot provisioning/deprovisioning failures, sync errors, and connector issues across AD, Azure AD, and SailPoint.
• Partner with HR, IT Service Desk, and business units to ensure timely and accurate identity data flows and lifecycle triggers.
• Create and maintain documentation for IAM processes, workflows, and standard operating procedures.
• Monitor identity-related audit logs and compliance reports to ensure adherence to internal policies and regulatory requirements (e.g., HIPAA).
• Support access request and approval workflows, ensuring least-privilege principles are enforced.
• Participate in IAM tool upgrades, testing, and continuous improvement initiatives, including scripting enhancements (PowerShell, Python, or similar) to extend automation capabilities.
• Assist in incident response related to identity and access issues, including emergency account disablement and access reviews.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field (or equivalent work experience).
• 5+ years’s hands on experience in identity and access management and privileged access management.
• 5+ years of experience with complex, cloud-based enterprise environments.
• Strong working knowledge of Active Directory (OUs, group policy, group management) and Azure AD / Microsoft Entra ID (users, groups, conditional access, licensing).
• Experience building or supporting automated provisioning/deprovisioning workflows tied to HR systems of record.
• Familiarity with identity lifecycle concepts: joiner/mover/leaver processes, RBAC, SoD, access certifications.
• Basic scripting/automation skills (Java, PowerShell, Python, or similar) for extending or troubleshooting integrations.
• Understanding of directory synchronization tools (Azure AD Connect / Entra Connect) and SSO/federation concepts (SAML, OAuth, OIDC).
• Strong analytical and troubleshooting skills, with attention to detail in high-volume, process-driven environments.
• Excellent communication skills and ability to work cross-functionally with HR, security, and application teams.

Preferred Qualifications

• Experience with SailPoint IdentityIQ SailPoint certifications (e.g., SailPoint Certified IdentityNow Engineer/Administrator).
• Experience with additional IAM/IGA/PAM tools (Okta, Ping Identity, CyberArk, Saviynt).
• Knowledge of ITSM platforms (Zendesk) for access request/ticketing integration.
• Experience supporting compliance frameworks (PCI, GLBA, HIPAA, GDPR, SOC 2 etc.).
• Familiarity with cloud platforms (AWS, Azure) IAM constructs beyond Azure AD.
• Prior experience in a regulated industry (finance, healthcare, insurance).
• Experience supporting IAM automation, APIs, integrations, or workflow enhancements.

The compensation for this role includes a base pay range of 67,953 - 101,930, with the actual pay determined by factors such as skills, experience, education, certifications, geographic location, and internal equity. Additional compensation may be available through shift differentials, bonuses, and other incentives. Base pay is only a portion of the total rewards package.

Artificial Intelligence Disclosure: Artificial Intelligence (AI) tools may be used in some portions of the candidate review process for this position, however, all employment decisions will be made by a person.

Let’s start with what matters. People. Purpose. Care. At Duly Health and Care, we believe healthcare works best when it’s personal, connected, and led by people who truly care. We are a physician-led medical group built on trusted relationships, teamwork, and a shared commitment to putting patients first in every decision we make. Our team members are caregivers, collaborators, problem-solvers, and leaders. Together, we show up with compassion, act with purpose, and take ownership of the care we deliver and the experience we create. Whether you’re caring directly for patients or supporting the teams who do, your role matters here, and your voice is valued. We listen with intention, work as one, and challenge ourselves to keep improving, not for recognition, but because our patients, families, and communities count on us.

Innovation at Duly isn’t about chasing what’s next for its own sake. It’s about finding better ways to deliver high-quality, affordable, and accessible care, today and into the future. If you’re looking for meaningful work, supportive teammates, and the opportunity to help shape the future of care while staying grounded in compassion and community, you’ll find your place at Duly.

If you have questions, please connect with your leader or HR Business Partner for support.