Senior IAM Architect for Enterprise Access

Baptist Health; Town of Florida (NY); On-site; USD 86,000 - 112,000; Full time

Job summary

Baptist Health, a leading not-for-profit healthcare system, seeks an Identity and Access Management professional to design, implement, and maintain security controls protecting data, applications, and networks.

You will lead IAM initiatives, troubleshoot authentication issues, and mentor junior engineers while collaborating with IT, security, and clinical teams to safeguard patient information and support reliable operations.

Qualifications

• Bachelor's degree required or equivalent experience.
• Experience with IAM design, architecture, and maintenance.
• Strong knowledge of Active Directory, LDAP, Azure/Entra.
• Familiarity with cloud IAM tools (Delinea/Thycotic, Okta).
• Experience with cloud platforms (GCP/AWS/OCI).
• Knowledge of SSO, MFA, RBAC, access provisioning and certs.
• Familiarity with OAuth 2, OpenID Connect, SAML, SCIM, U2F/UAF/FIDO2 and related protocols.
• Proficiency in HTTP(S), TCP/IP, SSL/TLS and cryptographic protocols.

Responsibilities

• Design, implement, and maintain IAM security controls for data, systems, and networks.
• Identify and resolve authentication and access issues; guide troubleshooting.
• Respond to security incidents and breaches; ensure proper reporting and remediation.
• Mentor and train Associate IAM Engineers; collaborate with IT, security, and clinical teams.

Skills

Windows servers

Unix/Linux

IAM design

Active Directory

LDAP

Azure/Entra

Okta

Delinea/Thycotic

OAuth 2

Education

Bachelor's

Tools

Delinea/Thycotic Suite

Okta

Certificate Authority (KeyFactor)

GCP

AWS

OCI

Job description

Baptist Health, a leading not-for-profit healthcare system, seeks an Identity and Access Management professional to design, implement, and maintain security controls protecting data, applications, and networks.

You will lead IAM initiatives, troubleshoot authentication issues, and mentor junior engineers while collaborating with IT, security, and clinical teams to safeguard patient information and support reliable operations.