Principal Identity System Engineer

10000 Sanford; United States; Remote; USD 103,000 - 170,000; Full time

Job summary

Sanford Health seeks a Principal Identity Systems Engineer to lead enterprise IAM strategy across on-premises and cloud environments. This senior role defines standards for hybrid identity, Entra ID, PKI, and secure authentication services while collaborating with IT leadership to align with regulatory requirements.

The position focuses on modernization of Active Directory, Entra ID, and authentication services, with a drive toward Zero Trust and scalable security across the organization.

Qualifications

• Bachelor’s degree required; leadership may consider alternative with 3 years experience.
• Minimum 8 years of applicable work experience.

Responsibilities

• Architect hybrid identity infrastructure and secure authn/authz across on-prem and cloud.
• Define IAM roadmap and standards for hybrid identity and cloud integrations.
• Mentor engineers and develop security playbooks and governance workflows.

Skills

Hybrid identity

Troubleshooting

Auditing

Education

Bachelor’s degree in CS or related field

Tools

Active Directory

Entra ID

PKI

SSO/MFA (SAML 2.0 / OIDC)

Job description

Work Shift: 8 Hours - Day Shifts (United States of America) Scheduled Weekly Hours: 40 Compensation: Salary Range: $49.50 - $81.50 Pay starts at $49.50 and increases according to applicable experience. Union Position: No Department Details

Summary

The Principle Identity Systems Engineer is responsible for setting strategy and designing secure enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments. Engineers in this family ensure that users, systems, and applications are authenticated, authorized, and protected in alignment with security standards, regulatory requirements, and business needs.

Job Description

The Principal Identity Systems Engineer is a senior technical leader responsible for setting the vision and driving enterprise-wide strategies for identity platforms across on-premises and cloud environments. This role defines and champions the IAM roadmap, establishes architectural standards for hybrid identity, Zero Trust, and cloud integrations, and collaborates closely with executives, architects, and security leadership to ensure alignment with business objectives and regulatory requirements. The Principal Identity Systems Engineer leads modernization efforts around Active Directory, Entra ID, PKI, and authentication services while evaluating emerging technologies to strengthen enterprise identity security.

Core responsibilities include:

• architecting domain and forest structures, overseeing hybrid identity synchronization, enforcing secure authentication protocols, and automating access governance, provisioning, and privileged access management.
• monitoring and enhancing KRIs to proactively identify risks, conducting expert-level troubleshooting and root cause analysis, and providing guidance on audit and compliance initiatives.
• mentoring senior and lead engineers, developing standards and playbooks, and representing identity services as a strategic enabler of secure, scalable business operations.

The Principal Identity Systems Engineer ensures the organization's identity platforms are resilient, scalable, and secure to support business operations and protect sensitive data. The Principal Identity Systems Engineer will work closely with cross-functional IT, application, and security teams to ensure alignment with business objectives, regulatory requirements, and industry best practices.

Qualifications

Bachelor’s degree required, in lieu of education, leadership may consider an Associate’s Degree plus 3 years of applicable experience in computer science or related field. Minimum of 8 years applicable work experience required.

• Supporting Active Directory, Domain Services, Hybrid Identities, and Entra ID
• Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC
• Maintaining Public Key Infrastructure (PKI)
• Supporting Identity Lifecycle & Access Governance workflows and technical integrations
• Implementation of information security standards and procedures including HIPAA and PCI
• Expert knowledge of Cloud security principles

One or more security certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are required.

Sanford is an EEO/AA Employer M/F/Disability/Vet.

If you are an individual with a disability and would like to request an accommodation for help with your online application, please call 1-877-949-5678 or send an email to [e-mail].

About Sanford Health

Sanford Health, the largest rural health system in the United States, is dedicated to transforming the health care experience and providing access to world-class health care in America’s heartland. Headquartered in Sioux Falls, South Dakota, the organization has 53,000 employees and serves over 2 million patients and nearly 425,000 health plan members across the upper Midwest including South Dakota, North Dakota, Minnesota, Wyoming, Iowa, Wisconsin and the Upper Peninsula of Michigan. The integrated nonprofit health system includes a network of 56 hospitals, 288 clinic locations, 147 senior care communities, 4,000 physicians and advanced practice providers and nearly 1,500 active clinical trials and studies. The organization’s transformational virtual care initiative brings patients closer to care with access to 78 specialties. Learn more about Sanford Health’s commitment to shaping the future of rural health care across the lifespan at sanfordhealth.org or Sanford Health News.

Good Samaritan, one of the nation’s largest nonprofit providers of senior care and services, is committed to transforming the aging experience through innovation, compassion and personalized care. As part of Sanford Health, an integrated nonprofit health system headquartered in Sioux Falls, South Dakota, Good Samaritan serves 10,000 seniors and offers access to a full continuum of care, including 94 rehabilitation and skilled nursing centers, 56 assisted living and memory care facilities, 44 independent living locations and 37 home health and hospice agencies. The senior care provider delivers services across the upper Midwest, with 70% of residents living in rural communities. Learn more about Good Samaritan’s mission and commitment to delivering high quality senior care in rural America at good-sam.com.