Advisor Information Security Engineer
Overview:
In this role you will lead and shape the IAM program to secure access across multi-cloud and on-prem environments, aligning controls with business needs and regulatory requirements. You'll partner with cross-functional teams to implement lifecycle management, access governance, and strong authentication. The work spans design, automation, audits, and migrations, with a focus on least-privilege and scalable identity solutions. This is a mission-driven position at a company committed to growth, learning, and healthcare impact. Compensation / Benefitsremote-based opportunity in the United Statesgenerous, flexible vacation policyeducational assistance 401(k) employer matchcomprehensive health benefitsleadership and technical development academies
Responsibilities:
- Enforce IAM strategy, architecture and roadmap to align with business needs and compliance
- Oversee identity lifecycle processes: joiner-mover-leaver, provisioning/de-provisioning, access certifications, SoD reviews
- Design and review RBAC/ABAC, least-privilege policies, and just-in-time elevation
- Assess authentication and federation: SSO, SAML/OIDC/SCIM, MFA policies, conditional access
- Guide Privileged Access Management (PAM): vaulting, session management, credential rotation
- Manage Directory services: Active Directory, Microsoft Entra ID (Azure AD), LDAPOversee Cloud IAM: least privilege in AWS and Azure, service accounts, secret management
- Support audits and mapping identity controls to SOC 2, NIST, HIPPA, CMS; prepare evidence and remediate findings
- Drive automation and integrations: PowerShell, Python, APIs, SCIM provisioning, HR-as-source-of-truth
- Provide operations enablement: standards, runbooks, training, mentoring
- Evaluate vendors and tooling: IGA, PAM, IdP, IDB, CIAMPlan and lead IAM projects and migrations end-to-end (discovery to hypercare)
Key requirements:
- 10+ years in IT/security with 7+ years IAM experience
- Expert knowledge of IAM protocols (SAML, OAuth 2.0 / OIDC, SCIM, LDAP, Kerberos)
- Hands-on experience with Active Directory and Microsoft Entra ID (Azure AD)
- Experience running IGA programs and/or PAM implementations
- Experience enforcing least privilege across AWS and AzureStrong automation capability (PowerShell or Python) and API integration
- Experience supporting audits and mapping identity controls to SOC 2, NIST, HIPPA, CMSProject management experience leading IAM initiatives from planning to delivery
- Degree in a relevant field, or equivalent demonstrable experience
- Stakeholder management
- Mentoring and coaching team members
- Strong communication and collaborationSAML, OAuth 2.0 / OIDC, SCIM, LDAP, Kerberos
- Active Directory and Microsoft Entra ID (Azure AD)IGA and PAM implementations