Senior IAM Engineer & Automation Architect

Blue Cross and Blue Shield of Massachusetts, Inc.; Boston (MA); On-site; USD 163,530 - 199,870; Full time

Benefits offered by this job

Paid time off

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

Blue Cross and Blue Shield of Massachusetts, Inc. seeks a Lead IAM Engineer to be the senior technical authority for enterprise IAM. You will design, build, and automate IAM across workforce, privileged, machine, application, and cloud identities, mentoring engineers and shaping engineering standards.

The role emphasizes modernizing IAM, integrating security controls into CI/CD, and guiding architecture decisions. Boston or Hingham offices preferred; on-site work expected.

Qualifications

• 8+ years of dedicated IAM engineering experience.
• Experience leading IAM initiatives in hybrid, multi-cloud, and SaaS environments.
• Expert‑level knowledge of SAML, OAuth 2.0, OpenID Connect.
• Hands‑on experience with enterprise IAM platforms (Ping, Delinea, SailPoint, Entra ID).
• Deep automation of Identity Governance (JML) and PAM controls.
• Proficient in scripting (Python, PowerShell, Terraform).
• Certifications such as CISSP, CISM, CCSP preferred.

Responsibilities

• Design and implement IAM solutions across SSO, MFA, IGA, PAM, and cloud identity platforms.
• Build integrations between IAM platforms and enterprise applications.
• Support onboarding applications into IAM services.
• Develop automation using Python, PowerShell, Terraform, APIs, and workflow engines.
• Mentor IAM engineers and conduct design/code reviews.
• Support audits and risk remediation, establish engineering standards.

Skills

IAM leadership

Identity protocols

CI/CD integration

Multi-cloud IAM

Automation scripting

Education

Bachelor's in CS/Engineering

Tools

Ping

Delinea

SailPoint

Entra ID

Job description

Blue Cross and Blue Shield of Massachusetts, Inc. seeks a Lead IAM Engineer to be the senior technical authority for enterprise IAM. You will design, build, and automate IAM across workforce, privileged, machine, application, and cloud identities, mentoring engineers and shaping engineering standards.

The role emphasizes modernizing IAM, integrating security controls into CI/CD, and guiding architecture decisions. Boston or Hingham offices preferred; on-site work expected.