Principal Identity System Engineer

Good Samaritan Society; North Dakota; Hybrid; USD 68,000 - 113,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) retirement plan

Work/life balance benefits

Generous time off

Job summary

Sanford Health in remote ND is seeking a Principal Identity Systems Engineer to set strategy and design secure IAM infrastructure across on‑prem and cloud environments. You will lead enterprise‑wide identity programs, modernize Active Directory and Entra ID, enforce least‑privilege, and collaborate with executives to align with regulatory requirements.

The role requires deep expertise, mentoring, and governance across certifications and audits; a security‑first mindset is essential.

Qualifications

• Bachelor’s degree required; in lieu of education, leadership may consider an Associate’s Degree plus 3 years of applicable experience in computer science or related field.
• Minimum of 8 years applicable work experience required.
• Supporting Active Directory, Domain Services, Hybrid Identities, & Entra ID.
• Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC.
• Maintaining Public Key Infrastructure (PKI).
• Supporting Identity Lifecycle & Access Governance workflows and technical integrations.
• Implementation of information security standards and procedures including HIPAA and PCI.
• Expert knowledge of Cloud security principles.

Responsibilities

• Architect identity platforms across on‑premises and cloud environments.
• Set IAM roadmap and architectural standards for hybrid identity, Zero Trust, and cloud integrations.
• Lead modernization efforts around AD, Entra ID, PKI, and authentication services.
• Automate access governance, provisioning, and privileged access management.
• Monitor KRIs and perform expert‑level troubleshooting and audits.

Skills

Active Directory

Entra ID

SSO/MFA

SAML/OIDC

PKI

IGA

PAM

HIPAA/PCI

Cloud security

Education

Bachelor's degree

Associate degree + 3 years experience

Job description

Careers With Purpose

Sanford Health, the largest rural health system in the United States, is dedicated to transforming the health care experience and providing access to world‑class health care in America’s heartland.

Facility: Remote ND (Central Time)
Location: Remote, ND
Address:
Shift: 8 Hours - Day Shifts
Job Schedule: Full time
Weekly Hours: 40.00
Salary Range: $49.50 - $81.50
Pay Info: Pay starts at $49.50 and increases according to applicable experience.

Job Summary

The Principle Identity Systems Engineer is responsible for setting strategy and designing secure enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments. Engineers in this family ensure that users, systems, and applications are authenticated, authorized, and protected in alignment with security standards, regulatory requirements, and business needs. The Principal Identity Systems Engineer is a senior technical leader responsible for setting the vision and driving enterprise‑wide strategies for identity platforms across on‑premises and cloud environments. This role defines and champions the IAM roadmap, establishes architectural standards for hybrid identity, Zero Trust, and cloud integrations, and collaborates closely with executives, architects, and security leadership to ensure alignment with business objectives and regulatory requirements. The Principal Identity Systems Engineer leads modernization efforts around Active Directory, Entra ID, PKI, and authentication services while evaluating emerging technologies to strengthen enterprise identity security. Core responsibilities include architecting domain and forest structures, overseeing hybrid identity synchronization, enforcing secure authentication protocols, and automating access governance, provisioning, and privileged access management. This role also monitors and enhances KRIs to proactively identify risks, conducts expert‑level troubleshooting and root cause analysis, and provides guidance on audit and compliance initiatives. In addition, the Principal Identity Systems Engineer mentors senior and lead engineers, develops standards and playbooks, and represents identity services as a strategic enabler of secure, scalable business operations. Balancing deep technical execution with enterprise strategy, this position ensures the identity ecosystem is resilient, future‑ready, and integral to the organization’s long‑term security posture.

This role requires deep technical expertise in Active Directory, Entra ID, authentication protocols, Identity Governance Administration (IGA), Privileged Access Management (PAM) and PKI with a strong focus on information security, compliance, strong problem-solving skills, a security‑first mindset, and least‑privilege enforcement. The Principal Identity Systems Engineer ensures the organization’s identity platforms are resilient, scalable, and secure to support business operations and protect sensitive data. The Principal Identity Systems Engineer will work closely with cross‑functional IT, application, and security teams to ensure alignment with business objectives, regulatory requirements, and industry best practices.

Qualifications

Bachelor’s degree required, in lieu of education, leadership may consider an Associate’s Degree plus 3 years of applicable experience in computer science or related field.

Minimum of 8 years applicable work experience required. Including but not limited to:

• Supporting Active Directory, Domain Services, Hybrid Identities, & Entra ID

• Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC

• Maintaining Public Key Infrastructure (PKI)

• Supporting Identity Lifecycle & Access Governance workflows and technical integrations

• Implementation of information security standards and procedures including HIPAA and PCI

• Expert knowledge of Cloud security principles

One or more security certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are required

Benefits

Sanford offers an attractive benefits package for qualifying full‑time and part‑time employees. Depending on eligibility, a variety of benefits include health insurance, dental insurance, vision insurance, life insurance, a 401(k) retirement plan, work/life balance benefits, and a generous time off package to maintain a healthy home‑work balance. For more information about Total Rewards, visit https://sanfordcareers.com/benefits .

Sanford is an EEO/AA Employer M/F/Disability/Vet. If you are an individual with a disability and would like to request an accommodation for help with your online application, please call 1-877-673-0854 or send an email to [e-mail] .

Sanford has a Drug Free Workplace Policy. An accepted offer will require a drug screen and pre‑employment background screening as a condition of employment.

Req Number: R-0274948
Job Function: Information Technology
Featured: No