Lead IAM Engineer

bcbsma; Boston (MA); On-site; USD 160,000 - 210,000; Full time

Job summary

Blue Cross Blue Shield of Massachusetts in Boston is seeking a highly experienced Lead IAM Engineer to act as the senior technical authority for enterprise Identity and Access Management. The role leads the design, engineering, automation, and operational maturity of IAM across workforce, privileged, machine, application, and cloud identities.

The ideal candidate combines deep technical expertise with architectural thinking and hands-on engineering execution, mentoring engineers, establishing

Responsibilities

• Design and implement IAM solutions across SSO, MFA, IGA, PAM, and cloud identity platforms.
• Build integrations between IAM platforms and enterprise applications.
• Support onboarding applications into IAM services.
• Create reference architectures and design patterns.
• Review application architectures and provide IAM guidance.
• Develop enterprise standards for authentication, authorization, and privileged access.
• Support Zero Trust initiatives.
• Develop automation using Python, PowerShell, Terraform, APIs, and workflow engines.
• Act as escalation point for IAM production

Job description

Ready to help us transform healthcare? Bring your true colors to blue.

We are seeking a highly experienced Lead IAM Engineer to serve as the senior technical authority for enterprise Identity and Access Management. This role will lead the design, engineering, automation, and operational maturity of IAM capabilities across workforce, privileged, machine, application, and cloud identities.

The ideal candidate combines deep technical expertise with architectural thinking and hands-on engineering execution. This individual will drive modernization initiatives, mentor engineers, establish engineering standards, and partner with business and technology teams to strengthen the organization's identity security posture.

This role is eligible for our Flex persona, with candidates local to our Boston, MA or Hingham, MA offices preferred.

Your Day to Day:

• Design and implement IAM solutions across SSO, MFA, IGA, PAM, and cloud identity platforms.

• Build integrations between IAM platforms and enterprise applications.

• Support onboarding applications into IAM services.

• Create reference architectures and design patterns.

• Review application architectures and provide IAM guidance.

• Develop enterprise standards for authentication, authorization, and privileged access.

• Support Zero Trust initiatives.

• Develop automation using Python, PowerShell, Terraform, APIs, and workflow engines.

• Act as escalation point for IAM production