Senior Identity & Access Architect (IAM/Zero Trust)

Good Samaritan Society; Minnesota; Hybrid; USD 141,838,000 - 233,531,000; Full time

Job summary

Sanford Health is seeking a Principal Identity Systems Engineer to lead enterprise identity and access management initiatives across on-premises and cloud environments. You will set the IAM strategy, define standards for hybrid identity, Entra ID, PKI, and secure authentication services, and collaborate with executives and security leadership to align with regulatory requirements.

You will mentor engineers, develop playbooks, and drive automation for provisioning and privileged access, while

Qualifications

• Bachelor’s degree required; in lieu of education, leadership may consider an Associate’s Degree plus 3 years of applicable experience in computer science or related field.
• Minimum of 8 years applicable work experience required.
• Experience with Active Directory, Domain Services, Hybrid Identities, & Entra ID.
• SSO/MFA workflows using SAML 2.0 and/or OIDC.
• Maintaining PKI.
• Identity Lifecycle & Access Governance workflows and integrations.
• Implementation of information security standards including HIPAA and PCI.
• Expert knowledge of Cloud security principles.
• One or more security certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are required

Responsibilities

• Architect domain and forest structures for hybrid identity.
• Oversee hybrid identity synchronization.
• Enforce secure authentication protocols.
• Automate access governance, provisioning, and PAM.
• Monitor KRIs and perform root-cause analysis.
• Guide audit and compliance initiatives.
• Mentor senior engineers and develop standards/playbooks.
• Represent identity services as a strategic security enabler.

Skills

Active Directory

Entra ID

Hybrid Identities

SSO/MFA (SAML 2.0/OIDC)

PKI

Identity Lifecycle & Access Governance

HIPAA/PCI

Cloud security

Security certifications (CISSP/CISA/C|

Education

Bachelor’s degree; Associate’s Degree +3 years acceptable

Job description

Sanford Health is seeking a Principal Identity Systems Engineer to lead enterprise identity and access management initiatives across on-premises and cloud environments. You will set the IAM strategy, define standards for hybrid identity, Entra ID, PKI, and secure authentication services, and collaborate with executives and security leadership to align with regulatory requirements.

You will mentor engineers, develop playbooks, and drive automation for provisioning and privileged access, while