Senior IAM Engineer: Zero-Trust Identity & Automation

Lantern; Dallas (TX); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Lantern, a specialty care platform, is hiring a Principal IAM Engineer. You will own the identity control plane end-to-end, design the identity standard, and drive automation across platform, cloud, and service delivery teams. This hands-on role reports to the CISO with growth potential as the identity function expands.

Hybrid role with at least 3 days per week in our Dallas, TX office. The security model is open by default, secure by design, enabling rapid business progress while maintaining

Qualifications

• Experience implementing IAM architectures and security controls.
• Strong understanding of identity governance, RBAC/ABAC, and access management.
• Familiarity with Entra ID, SAML, OIDC, OAuth2 and federated identity.

Responsibilities

• Own the identity lifecycle: joiner, mover, leaver provisioning and deprovisioning, automated from role- and attribute-based models.
• Own access management, including Conditional Access, MFA, and privileged access in a Zero Trust model.
• Own directory and federation across Entra ID, SSO, SAML, OIDC, OAuth2.
• Own secrets/non-human identities including API keys and service accounts; maintain owner registry.
• Own key access governance and separation of duties with another team handling key management.
• Own identity automation/identity-as-code with Terraform and policy-as-code.
• Own the identity-verification standard for password/MFA resets and device enrollment.
• Key Deliverables in Your First Year: Conditional Access for PHI-facing apps; automated lifecycle provisioning; a secrets golden path; MFA coverage on privileged accounts.

Job description

Lantern, a specialty care platform, is hiring a Principal IAM Engineer. You will own the identity control plane end-to-end, design the identity standard, and drive automation across platform, cloud, and service delivery teams. This hands-on role reports to the CISO with growth potential as the identity function expands.

Hybrid role with at least 3 days per week in our Dallas, TX office. The security model is open by default, secure by design, enabling rapid business progress while maintaining