Job Details

POSITION SUMMARY

This position designs, develops, configures, implements, and maintains enterprise Identity Governance & Administration (IGA) solutions, with a primary focus on SailPoint. The Cybersecurity Engineer – Identity & Access Management is responsible for resolving technical and business issues related to identity lifecycle management, access governance, role modeling, provisioning/deprovisioning, certifications, and compliance.

This role partners closely with Cybersecurity Architects, IAM, Infrastructure, Application, and Business teams to execute strategic identity initiatives, evaluate access controls across applications and platforms, and ensure identity solutions meet regulatory, security, and operational standards. The engineer participates in root-cause analysis to identify improvement opportunities and ensures SailPoint platforms are properly tuned, maintained on supported releases, and managed through formal change management processes across IT and the business.

CORE FUNCTIONS

1. Leads the design and implementation of SailPoint Identity Governance solutions, including identity lifecycle management, access requests, certifications, and policy enforcement.
2. Leads technical expertise and operational support for SailPoint platforms, including integrations with HR systems, directories (AD/Azure AD), cloud platforms, and enterprise applications.
3. Leads the design, implementation, and enforcement of secure identity configurations, including access models, roles, entitlements, and separation-of-duties (SoD) controls.
4. Leads technical assessments of identity and access controls to ensure compliance with organizational policy, security standards, and regulatory requirements.
5. Leads the ongoing evaluation and development of identity governance policies, procedures, and standards, including periodic review and updates as required.
6. Serves as the technical lead for IAM and SailPoint initiatives, including scope definition, requirements gathering, solution design, implementation, tuning, and operational support model development.
7. Under general direction, is responsible for enterprise IAM capabilities across multiple departments system-wide, requiring collaboration with cross-functional IT teams, application owners, and business stakeholders at all levels.

PREFERRED QUALIFICATIONS

• Experience with SailPoint IdentityIQ and/or SailPoint IdentityNow in large, complex enterprise environments.
• Certifications such as SailPoint Certified Engineer, CISSP, CISA, Security+, HCISPP, or related IAM/security certifications.
• Three or more years of experience in IAM, security operations, system administration, or IT operations, preferably within a healthcare environment.
• Experience supporting audits, access reviews, and regulatory reporting tied to identity and access governance.