Senior Cybersecurity Infrastructure Engineer - Remote

Sentara Health; Charlotte (NC); Remote; USD 126,000 - 198,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans

401k/403B with Employer Match

Tuition Assistance - Guild Education

Job summary

Sentara Health is seeking a Senior Cybersecurity Infrastructure Engineer to design, implement and support enterprise IAM/IGA solutions using Saviynt, with REST APIs, RBAC and SoD controls. The role emphasizes collaboration with IT and security teams to meet regulatory requirements.

The position is fully remote with on-call production support, offering competitive compensation and benefits. Strong development and scripting skills in Java, JavaScript, PowerShell, Python, and SQL are required.

Qualifications

• 5+ years IAM/IGA or Cybersecurity Engineering experience
• 3+ years hands-on Saviynt Identity Governance implementation experience
• Experience integrating IAM/IGA with AD, Azure AD, LDAP, HR systems, and cloud apps
• Strong programming/scripting in Java, JavaScript, PowerShell, Python, SQL
• Experience with RBAC, SoD, privileged access governance and related controls
• Experience supporting security audits and regulatory compliance

Responsibilities

• Design, develop, implement, test, enhance and support enterprise IAM/IGA solutions.
• Develop and maintain integrations between Saviynt and enterprise systems.
• Analyze requirements to design scalable identity lifecycle management.
• Develop REST APIs, web services and ETL processes for identity data exchange.
• Create dashboards, reports and analytics on identity governance and access metrics.
• Collaborate with engineers, architects and stakeholders to align with enterprise standards.
• Prepare technical documents and participate in audits and certification activities.
• Research and implement emerging IAM and cybersecurity technologies.

Skills

IAM

Software development

Scripting

REST APIs

RBAC

SoD

Python

Java

PowerShell

SQL

Education

Bachelor's degree in Computer Science / Information Systems / Cybersecurity / Software Engineering (Required)

7+ years' experience without a degree (Required)

Tools

Saviynt

Active Directory

Azure AD / Entra ID

LDAP

REST APIs

Job description

Location

Virginia Beach, VA.

Work Shift

First (Days).

Overview

Sentara is hiring a Senior Cybersecurity Infrastructure Engineer! This position is fully remote.

Responsibilities

• Managing projects/processes, and working independently with limited supervision.
• Coaching and reviewing the work of lower-level professionals.
• Problems faced are difficult and sometimes complex.

Responsible for the design, development, implementation, testing, enhancement, and support of enterprise Identity and Access Management (IAM) solutions utilizing Saviynt and related security technologies. Applies advanced knowledge of software engineering principles, identity governance, access management, cybersecurity, system integration, and automation to support enterprise security initiatives and business objectives.

• Designing, developing, configuring, testing, and implementing complex IAM and Identity Governance Administration (IGA) solutions using the Saviynt platform to support enterprise security, compliance, and access management requirements.
• Developing and maintaining custom software components, workflows, connectors, and application integrations between Saviynt and enterprise systems, including Active Directory, Azure AD/Entra ID, LDAP directories, cloud applications, databases, HR systems, and other business-critical platforms.
• Analyzing business and technical requirements to design scalable identity lifecycle management solutions, including user provisioning, deprovisioning, role management, access certification, segregation of duties (SoD), and privileged access controls.
• Performing software engineering activities related to identity governance, including coding, scripting, debugging, testing, deployment, and lifecycle management of IAM applications and integrations.
• Designing and implementing automated identity management processes, including account provisioning workflows, role-based access controls (RBAC), policy management, and access review campaigns.
• Developing and maintaining REST APIs, web services, and ETL/integration processes to facilitate secure exchange of identity and access data across enterprise environments.
• Engineering and supporting Saviynt security controls, identity repositories, access governance solutions, and compliance monitoring capabilities to meet organizational and regulatory requirements.
• Conducting complex data analysis of identity, entitlement, access, and authorization information to improve security posture, operational efficiency, and compliance with internal policies and regulatory frameworks.
• Performing system design reviews, troubleshooting complex technical issues, conducting root cause analysis, and implementing system enhancements to improve IAM platform performance, scalability, reliability, and security.
• Developing dashboards, reports, and analytics related to identity governance, user access, compliance, audit findings, policy violations, and security metrics using Saviynt reporting capabilities and related technologies.
• Collaborating with software engineers, cybersecurity architects, infrastructure teams, application owners, and business stakeholders to design and implement IAM solutions aligned with enterprise architecture standards.
• Preparing and maintaining functional specifications, software design documents, technical architecture diagrams, configuration standards, implementation procedures, and operational support documentation.
• Supporting security audits, compliance assessments, and certification activities by providing technical expertise, evidence gathering, access reviews, and remediation recommendations.
• Researching, evaluating, and implementing emerging IAM, cybersecurity, cloud identity, and software engineering technologies to continuously improve identity governance capabilities and operational effectiveness.
• Pursuing continuous improvement of IAM processes, security controls, automation frameworks, software development practices, system performance, and overall quality of service.
• Must be part of on call production support schedule.

Education

5+ years of relevant experience with a bachelor's degree in Computer Science, Information Systems, Cybersecurity, Software Engineering, or a related field (Required)or7+ years of relevant experience without a degree (Required)

Experience

• 5+ years of experience in Identity and Access Management (IAM), Identity Governance and Administration (IGA), or Cybersecurity Engineering.
• 3+ years of hands-on experience implementing and supporting Saviynt Identity Governance solutions.
• Experience designing, configuring, and supporting identity lifecycle management processes, including user provisioning, deprovisioning, role management, and access certifications.
• Experience integrating IAM/IGA platforms with enterprise systems such as Active Directory, Microsoft Entra ID (Azure AD), LDAP, HR systems, databases, and cloud applications.
• Experience developing and supporting application integrations using REST APIs, web services, and automation frameworks.
• Strong software development and scripting experience using technologies such as Java, JavaScript, PowerShell, Python, SQL, or similar programming languages.
• Experience with Role-Based Access Control (RBAC), Segregation of Duties (SoD), privileged access management, and access governance best practices.
• Experience troubleshooting complex IAM platform issues, conducting root cause analysis, and implementing system enhancements.
• Experience supporting security audits, compliance reviews, and regulatory requirements related to identity and access management.
• Experience working in cross-functional environments with cybersecurity, infrastructure, application, and business teams.

Compensation and Benefits

We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $126,152.00 - $198,161.60 annually. Additional compensation may be available for this role, such as shift differentials, on-call pay, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually.

Benefits

• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Caregiver Leave
• Emergency Backup Care
• Long-Term, Short-Term Disability, and Critical Illness plans
• Life Insurance
• 401k/403B with Employer Match
• Tuition Assistance - $5,250/year and discounted educational opportunities through Guild Education
• Student Debt Pay Down - $10,000
• Pet Insurance
• Legal Resources Plan
• Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.

About Us

Sentara Independence provides quality outpatient services to the surrounding community. The facility includes an ambulance-accessible emergency room that is supported by board-certified physicians. Sentara Independence houses state-of-the-art medical equipment and highly-skilled physicians and staff. Sentara Independence is now an extension of the quality services at Sentara Virginia Beach General Hospital including advanced imaging and physical therapy.

Equal Opportunity

Sentara Health is an equal-opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves.

Work Environment

In support of our mission to improve health every day, this is a tobacco-free environment.

Remote Work Policy

For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.