[Hiring] Principal Identity Systems Engineer @Sanford Health

Role Description

The Principal Identity Systems Engineer is a senior technical leader responsible for setting the vision and driving enterprise-wide strategies for identity platforms across on-premises and cloud environments. This role defines and champions the IAM roadmap, establishes architectural standards for hybrid identity, Zero Trust, and cloud integrations, and collaborates closely with executives, architects, and security leadership to ensure alignment with business objectives and regulatory requirements.

• Leads modernization efforts around Active Directory, Entra ID, PKI, and authentication services.
• Evaluates emerging technologies to strengthen enterprise identity security.
• Architects domain and forest structures.
• Oversees hybrid identity synchronization.
• Enforces secure authentication protocols.
• Automates access governance, provisioning, and privileged access management.
• Monitors and enhances KRIs to proactively identify risks.
• Conducts expert-level troubleshooting and root cause analysis.
• Provides guidance on audit and compliance initiatives.
• Mentors senior and lead engineers.
• Develops standards and playbooks.
• Represents identity services as a strategic enabler of secure, scalable business operations.

This position ensures the identity ecosystem is resilient, future-ready, and integral to the organization's long-term security posture.

Qualifications

• Bachelor’s degree required; in lieu of education, leadership may consider an Associate’s Degree plus 3 years of applicable experience in computer science or related field.
• Minimum of 8 years applicable work experience required, including but not limited to:
• Supporting Active Directory, Domain Services, Hybrid Identities, & Entra ID.
• Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC.
• Maintaining Public Key Infrastructure (PKI).
• Supporting Identity Lifecycle & Access Governance workflows and technical integrations.
• Implementation of information security standards and procedures including HIPAA and PCI.
• Expert knowledge of Cloud security principles.
• One or more security certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are required.

Requirements

• Deep technical expertise in Active Directory, Entra ID, authentication protocols, Identity Governance Administration (IGA), Privileged Access Management (PAM), and PKI.
• Strong focus on information security and compliance.
• Strong problem-solving skills and a security-first mindset.
• Least-privilege enforcement.

Benefits

• Salary Range: $49.50 - $81.50.
• Pay starts at $49.50 and increases according to applicable experience.
• Work Shift: 8 Hours - Day Shifts (United States of America).
• Scheduled Weekly Hours: 40.
• Union Position: No.

Company Description

Sanford Health, the largest rural health system in the United States, is dedicated to transforming the health care experience and providing access to world-class health care in America’s heartland.