[Hiring] Senior Identity Engineer @Versant Health

Role Description

The Sr. Identity Engineer is a senior technical leader within Information Security's Identity & Access Management function, responsible for designing, implementing, and evolving identity security capabilities across various user types.

• Maintain authoritative records, ownership information, classification, and lifecycle status for enterprise human and non-human identities.
• Lead the design, implementation, and support of enterprise identity lifecycle automation across joiner, mover, leaver, transfer, and termination processes.
• Engineer HRIS-driven identity lifecycle workflows integrating the enterprise HR platform with Active Directory, Microsoft Entra ID, Entra ID Governance, ServiceNow, and downstream business applications.
• Build and maintain automated provisioning, modification, and deprovisioning processes using Microsoft Graph API, PowerShell, SCIM, REST APIs, access packages, lifecycle workflows, group-based automation, and documented request/evidence records.
• Develop reusable automation patterns that improve accuracy, reduce manual access handling, and support secure, timely access changes.
• Establish and maintain governance standards, onboarding requirements, lifecycle controls, ownership requirements, review processes, and registry capabilities for non-human identities.
• Define ownership, purpose, scope, lifecycle, credential rotation, access review, monitoring, and decommissioning requirements for non-human identities.
• Partner with application, infrastructure, cloud, and security teams to ensure non-human identities are created, secured, documented, reviewed, and retired.
• Support privileged and sensitive non-human identity use cases through vaulting, least privilege, credential management, and privileged access controls.
• Serve as a senior engineering resource for Microsoft Entra ID, Active Directory, and related hybrid identity capabilities.
• Design and support Entra ID Governance capabilities including lifecycle workflows, entitlement management, access packages, and access reviews.
• Engineer identity platform configurations, automation, access control patterns, and governance controls that support identity lifecycle management.
• Provide advanced troubleshooting and technical guidance for identity issues involving Entra ID, Active Directory, SSO, and related identity protection controls.
• Design and maintain scalable entitlement models including role-based access and least-privilege assignments.
• Lead identity engineering support for application onboarding and integration patterns.
• Partner with application owners and business teams to design secure authentication and authorization models.
• Support Entra External ID engineering for various identity use cases.
• Design and govern identity controls for healthcare and business integration patterns.
• Provision and govern AI-enabled agent and automation identities.
• Support access certification, entitlement review, and remediation processes through automation.
• Ensure identity controls and automation processes support HIPAA, HITRUST, SOX, and SOC 2.
• Ensure identity platforms generate appropriate security telemetry and make required logs available to Security Operations.
• Partner with Security Operations to provide identity context and support incident containment and remediation.
• Document reusable identity engineering patterns, integration standards, and operational procedures.
• Serve as a senior technical advisor for identity engineering initiatives and mentor engineers.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field preferred; equivalent engineering experience considered.
• 7+ years of IAM, identity security, security engineering, or related enterprise technology experience; healthcare or other regulated industry experience preferred.
• Demonstrated experience leading complex IAM or identity security initiatives from design through implementation.
• Hands-on experience with Microsoft Entra ID and Active Directory required; experience with Entra ID Governance preferred.
• Proficiency with PowerShell and Microsoft Graph API required; Python, REST API, SCIM, LDAP, and ServiceNow workflow experience preferred.
• Experience with privileged access management and non-human identity governance.
• Familiarity with SIEM/log management and identity-related incident response activities.
• Understanding of HIPAA, HITECH, HITRUST, NIST, and audit/evidence expectations.
• Strong written and verbal communication skills.

Requirements

• All Associates must comply with the Health Insurance Portability Accountability Act of 1996 (HIPAA).
• Associates may have access to covered information, cardholder data, or other confidential customer information.

Benefits

• Medical, dental, and paid vision coverage.
• Paid time off and company holidays.
• Retirement savings with employer contribution.
• Employee wellness resources and professional development opportunities.
• Flexible work arrangements and employee assistance programs.