IT Analyst II - Access and Provisioning Specialist

Duly Health and Care; Downers Grove (IL); On-site; USD 68,000 - 102,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

Mental health support

Life & Disability insurance

Tuition reimbursement

401(k) match

Volunteer time off

Parental leave

Adoption & surrogacy benefit

Job summary

Duly Health and Care is seeking an experienced IT Access & Provisioning Specialist to design, implement, and maintain automated identity lifecycle management across the enterprise, with a focus on onboarding and offboarding automation using SailPoint, AD, and Entra ID.

You will partner with Cybersecurity, IT Network & Infrastructure, application owners, and compliance teams on access reviews, RBAC, and process improvements, while ensuring HIPAA compliance and least-privilege principles.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field (or equivalent work experience).
• 5+ years' hands on experience in identity and access management and privileged access management.
• 5+ years of experience with complex, cloud-based enterprise environments
• Strong working knowledge of Active Directory (OUs, group policy, group management) and Azure AD / Microsoft Entra ID (users, groups, conditional access, licensing).
• Experience building or supporting automated provisioning/deprovisioning workflows tied to HR systems of record.
• Familiarity with identity lifecycle concepts: joiner/mover/leaver processes, RBAC, SoD, access certifications.
• Basic scripting/automation skills (Java, PowerShell, Python, or similar) for extending or troubleshooting integrations.
• Understanding of directory synchronization tools (Azure AD Connect / Entra Connect) and SSO/federation concepts (SAML, OAuth, OIDC).
• Strong analytical and troubleshooting skills, with attention to detail in high-volume, process-driven environments.
• Excellent communication skills and ability to work cross-functionally with HR, security, and application teams.

Responsibilities

• Design, build, and maintain automated onboarding and offboarding workflows using SailPoint (or equivalent IGA tools) integrated with Active Directory and Azure AD/Entra ID.
• Manage identity lifecycle events (joiners, movers, leavers) by automating account creation, role/group assignment, license provisioning, and deprovisioning.
• Deep experience managing IAM solutions (e.g. Azure AD, Okta, Imprivata, Ping, AuthX, etc.) in a cloud-centric environment (e.g. Epic, D365, WorkDay, Salesforce, Five9, etc.).
• Develop and maintain connectors, rules, and workflows between SailPoint, HRIS systems (e.g., Workday), AD, Azure AD, and downstream applications.
• Configure and manage access certification campaigns, role-based access control (RBAC), and segregation of duties (SoD) policies within the IGA platform.
• Troubleshoot provisioning/deprovisioning failures, sync errors, and connector issues across AD, Azure AD, and SailPoint.
• Partner with HR, IT Service Desk, and business units to ensure timely and accurate identity data flows and lifecycle triggers.
• Create and maintain documentation for IAM processes, workflows, and standard operating procedures.
• Monitor identity-related audit logs and compliance reports to ensure adherence to internal policies and regulatory requirements (e.g., HIPAA).
• Support access request and approval workflows, ensuring least-privilege principles are enforced.
• Participate in IAM tool upgrades, testing, and continuous improvement initiatives, including scripting enhancements (PowerShell, Python, or similar) to extend automation capabilities.
• Assist in incident response related to identity and access issues, including emergency account disablement and access reviews.

Skills

Identity & Access Mgmt

Privileged Access Mgmt

Active Directory

Azure AD / Entra ID

Automation scripting

RBAC SoD

HRIS integration

Education

Bachelor's degree in IT / CS / Cybersecurity

Tools

SailPoint IdentityIQ

Okta

Imprivata

Ping Identity

SailPoint IdentityNow

Azure AD Connect

Job description

At Duly Health and Care, you are supported to do your best work and make a meaningful impact every day. You will be part of a collaborative, physician-led team that works as one and puts patients at the center of everything we do.

With a connected network of providers, care teams, and services across primary and specialty care, surgery centers, imaging, lab, and therapy, you are part of a system designed to deliver high-quality, coordinated care. Together, we create an environment where you can grow, contribute, and help improve the experience and outcomes for every patient we serve.

Benefits

• Comprehensive medical, dental, and vision benefits that include healthcare navigation assistance.
• Access to a mental health benefit at no cost.
• Employer provided life and disability insurance.
• $5,250 Tuition Reimbursement per year.
• Immediate 401(k) match.
• 40 hours paid volunteer time off.
• A culture committed to community engagement and social impact.
• Up to 12 weeks parental leave at 100% pay and a financial benefit for adoption and surrogacy for non-physician team members once eligibility requirements are met.

JOB DESCRIPTION

We are seeking an experienced IT Access & Provisioning Specialist to design, implement, and maintain automated identity lifecycle management across the enterprise with a strong focus on onboarding/offboarding automation using tools like SailPoint IdentityIQ/IdentityNow, Active Directory, and Azure AD (Entra ID).

The Specialist partners closely with Cybersecurity, IT Network & Infrastructure, application owners, business stakeholders, and compliance teams on access reviews, role-based access controls, provisioning workflows, and process improvement initiatives.

Key Responsibilities

• Design, build, and maintain automated onboarding and offboarding workflows using SailPoint (or equivalent IGA tools) integrated with Active Directory and Azure AD/Entra ID.
• Manage identity lifecycle events (joiners, movers, leavers) by automating account creation, role/group assignment, license provisioning, and deprovisioning.
• Deep experience managing IAM solutions (e.g. Azure AD, Okta, Imprivata, Ping, AuthX, etc.) in a cloud-centric environment (e.g. Epic, D365, WorkDay, Salesforce, Five9, etc.).
• Develop and maintain connectors, rules, and workflows between SailPoint, HRIS systems (e.g., Workday), AD, Azure AD, and downstream applications.
• Configure and manage access certification campaigns, role-based access control (RBAC), and segregation of duties (SoD) policies within the IGA platform.
• Troubleshoot provisioning/deprovisioning failures, sync errors, and connector issues across AD, Azure AD, and SailPoint.
• Partner with HR, IT Service Desk, and business units to ensure timely and accurate identity data flows and lifecycle triggers.
• Create and maintain documentation for IAM processes, workflows, and standard operating procedures.
• Monitor identity-related audit logs and compliance reports to ensure adherence to internal policies and regulatory requirements (e.g., HIPAA).
• Support access request and approval workflows, ensuring least-privilege principles are enforced.
• Participate in IAM tool upgrades, testing, and continuous improvement initiatives, including scripting enhancements (PowerShell, Python, or similar) to extend automation capabilities.
• Assist in incident response related to identity and access issues, including emergency account disablement and access reviews.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field (or equivalent work experience).
• 5+ years' hands on experience in identity and access management and privileged access management.
• 5+ years of experience with complex, cloud-based enterprise environments
• Strong working knowledge of Active Directory (OUs, group policy, group management) and Azure AD / Microsoft Entra ID (users, groups, conditional access, licensing).
• Experience building or supporting automated provisioning/deprovisioning workflows tied to HR systems of record.
• Familiarity with identity lifecycle concepts: joiner/mover/leaver processes, RBAC, SoD, access certifications.
• Basic scripting/automation skills (Java, PowerShell, Python, or similar) for extending or troubleshooting integrations.
• Understanding of directory synchronization tools (Azure AD Connect / Entra Connect) and SSO/federation concepts (SAML, OAuth, OIDC).
• Strong analytical and troubleshooting skills, with attention to detail in high-volume, process-driven environments.
• Excellent communication skills and ability to work cross-functionally with HR, security, and application teams.

Preferred Qualifications

• Experience with SailPoint IdentityIQ
• SailPoint certifications (e.g., SailPoint Certified IdentityNow Engineer/Administrator).
• Experience with additional IAM/IGA/PAM tools (Okta, Ping Identity, CyberArk, Saviynt).
• Knowledge of ITSM platforms (Zendesk) for access request/ticketing integration.
• Experience supporting compliance frameworks (PCI, GLBA, HIPAA, GDPR, SOC 2 etc.).
• Familiarity with cloud platforms (AWS, Azure) IAM constructs beyond Azure AD.
• Prior experience in a regulated industry (finance, healthcare, insurance).
• Experience supporting IAM automation, APIs, integrations, or workflow enhancements.

If you are committed to putting our patients first and helping shape the future of care, you belong at Duly.

The compensation for this role includes a base pay range of 67,953 - 101,930, with the actual pay determined by factors such as skills, experience, education, certifications, geographic location, and internal equity. Additional compensation may be available through shift differentials, bonuses, and other incentives. Base pay is only a portion of the total rewards package.

Artificial Intelligence Disclosure

Artificial Intelligence (AI) tools may be used in some portions of the candidate review process for this position, however, all employment decisions will be made by a person.