[Hiring] Sr IAM Security Engineer @HealthEquity

Role Description

Join our team as an Sr IAM Engineer and help design next-generation detection, prevention, automation, and governance capabilities for identity and access management, cybersecurity, and cloud identity operations. This role will drive innovation by building GenAI-enabled tools and AI agents that:

• Identify access patterns
• Detect anomalous activity
• Summarize complex issues
• Recommend remediation before risk impacts the organization

You will help advance IAM automation across core platforms including:

• SailPoint Identity Security Cloud
• Microsoft Entra
• Cloud identity services
• Secrets management

This position provides an opportunity to collaborate with IAM engineering, cloud engineering, security, audit, compliance, application owners, and business stakeholders to mature identity and access processes while reducing manual effort and improving operational effectiveness.

Qualifications

• Bachelor’s degree, or the equivalent years related experience required
• 10+ years of experience in Information Security, specifically in IAM
• Experience leveraging automation, analytics, AI-assisted capabilities, or emerging technologies within cybersecurity, IAM, or cloud environments
• Experience using scripting, APIs, reporting tools, and automation technologies to improve operational efficiency and effectiveness

Requirements

• Familiarity with secure implementation and governance of AI-enabled solutions in enterprise environments
• Ability to evaluate emerging technologies and apply them appropriately to business and security challenges
• Proficiency in Python, SQL, Azure, OpenAI and Anthropic (Claude) frameworks, Langchain, and retrieval-augmented generation patterns
• Experience with AI development lifecycle (e.g. Claude.code) using skills, commands, and sub-agents
• Knowledge of Model Context Protocol, Agent-to-Agent Protocol, and AI agent design patterns
• Strong understanding of IAM concepts, including lifecycle management, access requests, certifications, and entitlement management
• Experience with or working knowledge of SailPoint ISC, including identity profiles, sources, applications, access profiles, roles, dimensions, lifecycle states, certifications, workflows, and governance reporting
• Working knowledge of Microsoft Entra identity services, including enterprise applications, SSO, SCIM provisioning, conditional access, authentication methods, MFA, passkeys, app registrations, service principals, and cloud identity governance
• Experience with cloud identity engineering tasks in Azure or Microsoft Entra environments, including configuration review, automation, policy analysis, and integration support
• Experience with secrets management concepts and platforms such as HashiCorp Vault
• Ability to work with APIs, logs, configuration exports, identity datasets, access models, and platform reporting data to identify issues and recommend improvements
• Ability to partner with IAM engineering, cloud engineering, application owners, audit, compliance, security operations, infrastructure, and business stakeholders to translate identity and access challenges into actionable solutions
• Excellent problem-solving skills and judgment

Benefits

• Medical, dental, and vision
• HSA contribution and match
• Dependent care FSA match
• Uncapped paid time off
• Paid parental leave
• 401(k) match
• Personal and healthcare financial literacy programs
• Ongoing education & tuition assistance
• Gym and fitness reimbursement
• Wellness program incentives