Sr. Identity & Access Management (IAM) Engineer

NKC Health; Kansas City (MO); On-site; USD 100,000 - 130,000; Full time

Job summary

NKC Health is seeking a Senior IAM Engineer in Kansas City, Missouri. The role involves designing, implementing, and maintaining IAM systems, ensuring security compliance and operational integrity. Ideal candidates will have 5+ years in IAM engineering, strong knowledge of cloud IAM platforms like Azure and AWS, and expertise in authentication and authorization. Certifications such as CISSP and SC-300 are preferred. This role supports cross-functional teams and adopts best practices in identity lifecycle management.

Qualifications

• 5+ years’ experience in Identity and Access Management engineering.
• Strong expertise with IAM platforms and cloud services.
• In-depth knowledge of authentication, authorization, and directory services.

Responsibilities

• Leads the design and architecture of IAM solutions.
• Deploys and integrates identity provider platforms with enterprise applications.
• Ensures compliance and audit readiness, enforcing policies and remediating vulnerabilities.

Skills

Identity and Access Management engineering

Scripting and automation (PowerShell, Python)

Authentication and authorization concepts

Regulatory compliance knowledge

Excellent communication skills

Education

Bachelor’s degree in Computer Science, Information Systems, or related field

Tools

Azure AD

AWS

GCP

LDAP

SAML

OAuth

OIDC

Job description

Summary

The Senior IAM (Identity and Access Management) Engineer is responsible for the design, implementation, and ongoing maintenance of the organization’s IAM systems. This role ensures that employees, vendors, and partners have appropriate access to systems and data, in alignment with business needs and security requirements. The Senior IAM Engineer collaborates with cross-functional IT teams, leads IAM-related projects, and develops standards and best practices for identity lifecycle management and must be prepared to respond to security incidents outside of regular business hours. This position demands a deep understanding of authentication, authorization, and privileged access concepts, as well as regulatory frameworks and compliance standards.

Duties and Responsibilities

• Design and Architecture: Leads the design and architecture of IAM solutions, including SSO, MFA, PAM, and federation services.
• Implementation and Integration: Deploys and integrates identity provider platforms such as Azure AD, MS Entra, Imprivata with enterprise applications and cloud services.
• IAM Operations: Manages identity lifecycle processes, access reviews, and provisioning/deprovisioning automation.
• Monitor, Incident Response & Threat Mitigation: Monitor sign-in activity, threats, vulnerabilities, and anomalies using security analytics and reporting tools. Investigate and remediate security incidents related to identities. Collaborate with the SOC and IT support teams for escalation and rapid response.
• Security and Compliance: Enforce policies, audit configurations, remediate vulnerabilities, and ensure compliance (e.g., SOX, GDPR, HIPAA).
• Troubleshooting and Support: Provides advanced troubleshooting and support for IAM-related issues, working with IT teams and end users.
• Documentation: Develops and maintains technical documentation, standards, and procedures for IAM systems and processes.
• Guidelines: Provides guidance to application owners and administrators, and adherence to best practices.
• Continuous Improvement: Monitors emerging technologies, evaluate new tools, and recommends enhancements to IAM architecture and workflows.

Specific Experience and Skills

• Bachelor’s degree in Computer Science, Information Systems, or related field
• 5+ years’ experience in Identity and Access Management engineering
• Expertise with IAM platforms including cloud (Azure, AWS, GCP)
• In-depth knowledge of authentication, authorization, and directory services (LDAP, AD, SAML, OAuth, OIDC)
• Strong scripting and automation skills (PowerShell, Python, etc.)
• Knowledge of Zero Trust architecture
• Experience with regulatory compliance frameworks and audit processes
• Excellent communication, documentation, and mentoring abilities

Licensure / Certifications

Preferred: CISSP (Certified Information Systems Security Professional), Microsoft Identity & Access Management Administrator (SC-300), or similar

Education

Required: Bachelors - Computer Science