[Hiring] IAM Engineer @Envision Healthcare

Role Description

The IAM Engineer is responsible for implementing, maintaining, and optimizing identity and access management solutions across the enterprise, with a strong emphasis on automation, security, and compliance. This role will focus on the technical administration and integration of our IDP and PAM platforms, supporting secure access to clinical systems, enterprise applications, and infrastructure in a healthcare environment.

• Configures, maintains, and troubleshoots Okta Identity Cloud and CyberArk PAM solutions.
• Configure and support single sign-on (SSO), multi-factor authentication (MFA), passwordless authentication, authentication policies, access controls, device assurance, and identity security controls.
• Configure, maintain, and troubleshoot integrations using SAML, OAuth, OIDC, SCIM, APIs, and other modern identity standards.
• Investigate and resolve authentication, federation, provisioning, application access, and directory synchronization issues.
• Proactively identify, recommend, and support practical improvements to identity services, security controls, platform adoption, operational efficiency, supportability, and user experience.
• Develop and maintain automation scripts and workflows for identity lifecycle management (e.g., provisioning, deprovisioning, access reviews).
• Integrate IAM solutions with enterprise applications and directories (e.g., Active Directory).
• Collaborate with cross-functional teams (HR, IT, Compliance) to streamline access processes and enforce least privilege.
• Monitor and respond to IAM-related incidents, alerts, and audit findings.
• Participate in the design and implementation of IAM policies, standards, and controls aligned with HIPAA, HITECH, and NIST frameworks.
• Support the development of self-service capabilities and user-friendly access request workflows.
• Maintain documentation for IAM configurations, procedures, and technical standards.
• Stay current with emerging IAM technologies, security threats, and best practices.

Qualifications

• 3+ years of hands-on experience in IAM engineering or similar IT roles.
• Proficiency with Okta (SSO, MFA, Lifecycle Management) and CyberArk (PAM, PSM, CPM).
• Strong scripting skills (e.g., PowerShell, Python, or similar) for automation and integration.
• Experience with identity governance, RBAC, and directory services (Active Directory, Entra ID, Okta).
• Familiarity with healthcare IT systems and regulatory requirements (HIPAA, HITECH).
• Strong analytical, troubleshooting, and communication skills.
• Bachelor’s degree in Information Security, Computer Science, or related field.
• Relevant certifications preferred (e.g., Okta Certified Professional, CyberArk Defender, CISSP, or similar).

Benefits

• Wide range of health and welfare benefits available from day one.
• Options include Medical, Dental, Vision, Life, Disability, Healthcare FSA, Dependent Care FSA, Limited Healthcare FSA, FSAs for Transportation and Parking & HSAs.
• Paid Time Off (PTO) accrual each pay period, with a minimum of 20 days and up to 25 days per calendar year.
• 9 observed holidays and paid family leave.

Company Description

Envision is a leading national medical group focused on delivering high-quality care to patients when and where they need it most. You’ll find clinicians and clinical support professionals across the nation who are proud to call Envision home. We welcome teammates of every background and work in communities that reflect the racial, ethnic, gender, sexual orientation, and economic diversity of our country.