[Hiring] Identity & Access Management Subject Matter Expert @Gainwell Technologies LLC

Role Description

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

• Enforce the IAM strategy, architecture, and roadmap, aligning access controls with business needs, risk appetite, and regulatory obligations.
• Identity lifecycle and governance:
  • Review and advise drive joiner-mover-leaver (JML) automation, account provisioning and de-provisioning, access certification campaigns, and segregation-of-duties (SoD) reviews.
• Access control design:
  • Review and advise design and review role-based (RBAC) and attribute-based (ABAC) access models, least-privilege policies, and just-in-time (JIT) elevation across applications and infrastructure.
• Authentication and federation:
  • Review and advise architecture and operational SSO, SAML/OIDC/SCIM integrations, federation trusts, MFA policies, and conditional access rules.
• Privileged access management (PAM):
  • Review and advise on implementation and run vaulting, session management, credential rotation, and privileged session monitoring.
• Directory services:
  • Review and advise on administer and secure Active Directory, Microsoft Entra ID (Azure AD), and LDAP directories, including synchronization and trust hygiene.
• Cloud IAM:
  • Review and advise with enforcement of least privilege on AWS, Azure, roles, policies, service accounts, workload identity, and secret management.
• Compliance and audit:
  • Review and advise on mapped identity controls to SOC 2, NIST, HIPPA, CMS and other frameworks; Review and advise with preparation of evidence; respond to audit requests and remediate findings.
• Automation and integration:
  • Review and advise on build and maintain identity automation (PowerShell, Python, APIs), SCIM-based provisioning, and HR-as-source-of-truth integrations.
• Operations and enablement:
  • Act as subject matter expert for document standards and runbooks, deliver training, and mentor team members.
• Vendor and tooling evaluation:
  • Review and advise on assessing and manage identity platforms (IGA, PAM, IdP, IDB and CIAM).
• Project delivery:
  • Plan, scope, and lead IAM projects and migrations end-to-end, timelines, dependencies, stakeholder coordination, risk tracking, and rollout, from discovery through hypercare.

Qualifications

• 10+ years in IT / information security, with 7+ years of hands-on IAM experience.
• Expert-level working knowledge of IAM protocols (SAML, OAuth 2.0 / OIDC, SCIM, LDAP, Kerberos).
• Deep hands-on experience with Active Directory and Microsoft Entra ID (Azure AD).
• Proven experience running IGA programs (access certifications, SoD) and/or PAM implementations.
• Experience enforcing least privilege across cloud environments (AWS, Azure).
• Strong automation capability (PowerShell or Python) and API integration experience.
• Experience supporting audits and mapping identity controls to frameworks such as SOC 2, NIST, HIPPA, CMS.
• Project management experience: leading IAM initiatives (migrations, IGA/PAM rollouts, SSO deployments) from planning through delivery, with clear timelines, dependencies, and stakeholder communication.
• Degree in a relevant field, or equivalent demonstrable experience.

Preferred & Certifications

• CISSP, CISM, or equivalent security certification.
• Microsoft Certified: Identity and Access Administrator Associate (SC-300).
• Vendor certifications: Okta, SailPoint, Saviynt, CyberArk, or equivalent.
• Cloud certifications (AWS, Azure) and zero trust architecture exposure.
• Experience with HRIS-to-directory integration and identity automation at scale.

What You Should Expect in This Role

• Remote-based opportunity within the United States.
• Opportunities to travel through your work (0-10%).
• Video cameras must be used during all interviews, as well as during the initial week of orientation.
• The deadline to submit applications for this posting is 10/30/2026.
• The pay range for this position is $95,100.00 - $135,800.00 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors.

Benefits

• Generous, flexible vacation policy.
• 401(k) employer match.
• Comprehensive health benefits.
• Educational assistance.
• A variety of leadership and technical development academies to help build your skills and capabilities.