Remote Principal IAM Engineer: Identity & Zero-Trust

Lantern; United States; Remote; USD 180,000 - 210,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Disability Insurance

Life Insurance

401k with company match

Flexible Time Off

Job summary

Lantern is seeking a Principal IAM Engineer to own the identity control plane end-to-end, influencing who can access PHI and under what conditions. You will report to the CISO and collaborate with IAM, platform, cloud, and service delivery teams in a remote work environment.

This senior individual-contributor role emphasizes hands-on implementation, policy-as-code, and scalable, secure identity solutions across the enterprise.

Qualifications

• Eight+ years in identity and access management with senior ownership.
• Deep Microsoft Entra ID engineering, including CA, MFA, SSO, federation (SAML/OIDC/OAuth2).
• Automation of identity lifecycle across cloud, SaaS, and privileged systems (RBAC/ABAC).
• Identity governance, PAM, and policy-as-code with Terraform and GitHub.

Responsibilities

• Own the identity control plane end-to-end across org, ensuring PHI access governed by policy.
• Manage access with Conditional Access, phishing-resistant MFA, least privilege, JIT elevation.
• Oversee directory and federation across Entra ID, SSO, SAML, OIDC, OAuth2.
• Maintain secrets/non-human identities and an owner registry.

Skills

Zero Trust design

RBAC/ABAC provisioning

IAM automation

Identity governance

Education

Bachelor's degree or equivalent

Tools

Microsoft Entra ID

Terraform

PowerShell

Keeper

Saviynt

Job description

Lantern is seeking a Principal IAM Engineer to own the identity control plane end-to-end, influencing who can access PHI and under what conditions. You will report to the CISO and collaborate with IAM, platform, cloud, and service delivery teams in a remote work environment.

This senior individual-contributor role emphasizes hands-on implementation, policy-as-code, and scalable, secure identity solutions across the enterprise.