Senior Enterprise Identity & Access Architect

10000 Sanford; South Dakota; Hybrid; USD 103,000 - 170,000; Full time

Job summary

Sanford Health in Sioux Falls, South Dakota, seeks a Principal Identity Systems Engineer to set the vision and drive enterprise IAM across on‑prem and cloud environments. You will architect hybrid identity, enforce least privilege, and lead modernization of Active Directory, Entra ID, PKI, and authentication services.

You will collaborate with executives, governance teams, and security leadership to align with business objectives and regulatory requirements while mentoring engineers and shaping

Qualifications

• Bachelor's degree required, in lieu of education, leadership may consider an Associate's Degree plus 3 years of applicable experience in computer science or related field.
• Minimum of 8 years applicable work experience required.
• Including but not limited to: supporting Active Directory, Domain Services, Hybrid Identities, & Entra ID; implementing SSO/MFA workflows using SAML 2.0 and/or OIDC; maintaining Public Key Infrastructure (PKI); supporting Identity Lifecycle & Access Governance workflows and technical integrations; implementing information security standards and procedures including HIPAA and PCI; expert knowledge of cloud security principles.

Responsibilities

• Set strategy and drive enterprise IAM programs across on‑prem and cloud environments.
• Architect domain/forest structures and hybrid identity synchronization; enforce secure authentication protocols.
• Mentor senior engineers, develop standards/playbooks, and lead audit/compliance initiatives.

Skills

Active Directory

Entra ID

Hybrid Identities

SSO/MFA

PKI

Identity Governance

Privileged Access Management

Automation

Education

Bachelor's degree in computer science or related field

Associate's Degree + 3 years of applicable experience

Tools

SAML/OIDC tooling

IAM tooling

PKI tooling

Job description

Sanford Health in Sioux Falls, South Dakota, seeks a Principal Identity Systems Engineer to set the vision and drive enterprise IAM across on‑prem and cloud environments. You will architect hybrid identity, enforce least privilege, and lead modernization of Active Directory, Entra ID, PKI, and authentication services.

You will collaborate with executives, governance teams, and security leadership to align with business objectives and regulatory requirements while mentoring engineers and shaping