Senior Identity & Access Architect for Hybrid IAM

sanford; Sioux Falls (SD); On-site; USD 69,000 - 113,000; Full time

Job summary

Sanford Health, based in Sioux Falls, seeks a Principal Identity Systems Engineer to define and drive enterprise-wide identity platform strategy across on‑prem and cloud environments. You will architect hybrid identity, Zero Trust, and authentication services while guiding architecture standards and cross‑functional collaboration with IT and security leadership.

The role emphasizes modernization of Active Directory and Entra ID, PKI, and IAM governance, with mentoring responsibilities and focus

Qualifications

• Bachelor’s degree or higher in computer science or related field.
• 8+ years of experience in identity/security engineering role.
• Experience with Active Directory, Entra ID, hybrid identities.
• Experience implementing SSO/MFA with SAML 2.0 / OIDC.
• Public Key Infrastructure (PKI) administration and identity lifecycle.
• Compliance with HIPAA and PCI in security controls.

Responsibilities

• Set IAM strategy and roadmap for enterprise environments.
• Architect hybrid identity, Zero Trust, and cloud integrations.
• Lead modernization of AD/Entra ID and authentication services.
• Define standards, playbooks, and governance for identity platforms.
• Mentor senior engineers and collaborate with security leadership.
• Proactively identify risks and drive audit/compliance efforts.

Education

Bachelor's degree in CS or related field

Associate's Degree + 3 years relevant experience

Tools

Active Directory

Entra ID

PKI

SSO/MFA (SAML 2.0 / OIDC)

Identity Governance Administration (IGA)

Privileged Access Management (PAM)

Cloud security principles

Job description

Sanford Health, based in Sioux Falls, seeks a Principal Identity Systems Engineer to define and drive enterprise-wide identity platform strategy across on‑prem and cloud environments. You will architect hybrid identity, Zero Trust, and authentication services while guiding architecture standards and cross‑functional collaboration with IT and security leadership.

The role emphasizes modernization of Active Directory and Entra ID, PKI, and IAM governance, with mentoring responsibilities and focus