[Hiring] Identity & Access Management Engineer @Advocate Health

Role Description

Design, implement, and maintain complex IAM solutions, including IGA, PAM, and SSO, using various tools and technologies, such as SailPoint, Active Directory, IBM Verify, Azure AD, Okta, MFA, SAML, OAuth, and LDAP.

• Participate in testing, validation, and quality assurance of IAM solutions, ensuring functionality, performance, and security.
• Monitor and audit IAM systems, activities, and processes.
• Assist in developing and implementing process improvement initiatives, backup and recovery procedures, and security optimization tasks within IAM.
• Perform troubleshooting, analysis, and remediation of access and permissions issues.
• Collaborate with vendors at a technical level to resolve problems and manage escalation.
• Manage the identity lifecycle and access policies for users, groups, roles, and applications across the organization.
• Assist with investigations and responses to high-impact IAM incidents.
• Perform access reviews, risk assessments, vulnerability analysis, and audits to ensure compliance with IAM policies and standards.
• Provide technical support and guidance to clients and internal teams on IAM-related matters.
• Monitor and audit the IAM management systems and processes, make recommendations, and generate reports and metrics.
• Evaluate and implement improvements to monitoring protocols.
• Assist in creating and maintaining comprehensive IAM documentation.
• Identify, implement security controls, and remediate IAM vulnerabilities, risks, or gaps.
• Support security/access related records in all phases including build, configuration, testing, implementation, go-live support, and optimization.
• Document all responses and facilitate disaster recovery and business continuance configurations and procedures.
• Analyze and resolve IAM issues and incidents, providing root cause analysis and recommendations for improvement.
• Participate in complex IAM projects and initiatives, collaborating with other engineers, analysts, and managers.
• Contribute to team effort by sharing knowledge, aiding, and demonstrating initiative.
• Maintain knowledge of applicable technologies, job/system related forums, and related documentation.

Qualifications

• IAM certification (SailPoint, Okta, or other IAM engineering related certification) within one year of employment.
• Bachelor's Degree (or equivalent knowledge) in Information Systems, Computer Science, or related field.
• Typically requires at least three years of experience in IAM Engineering, administration, or support.
• Strong knowledge and skills in IAM concepts, principles, best practices, and standards.
• Proficient in IAM tools and technologies, such as Active Directory, Azure AD, SSO, MFA, SAML, OAuth, LDAP, and SCIM.
• Experience in scripting and automation using PowerShell, Python, Bash, JavaScript, Java, C#, or other languages.
• Experience in cloud computing platforms and services, such as Azure, AWS, or Google Cloud.

Requirements

• Strong technical skills in IAM tools and scripting languages.
• Detailed knowledge of security as it relates to application support.
• Understanding of security mechanisms with clinical and hospital information systems.
• Knowledge of industry standard frameworks and controls such as NIST, CIS, SOX, and Zero Trust principles.
• Strong data analytical, critical thinking, reasoning, deduction, inference, and problem-solving skills.
• Ability to maintain a high level of confidentiality.
• Excellent verbal and written communication skills.
• Ability to work in a fast-paced, dynamic team environment.
• Proficiency in Microsoft Suite (Word, PowerPoint, Excel, Access, Outlook) or similar products.

Benefits

• Paid Time Off programs.
• Health and welfare benefits such as medical, dental, vision, life, and Short- and Long-Term Disability.
• Flexible Spending Accounts for eligible health care and dependent care expenses.
• Family benefits such as adoption assistance and paid parental leave.
• Defined contribution retirement plans with employer match and other financial wellness programs.
• Educational Assistance Program.