Identity and Access Management Architect

Role Summary

This role involves leading the design, development, and implementation of identity and access management (IAM) systems within a complex healthcare environment. The architect provides strategic direction and technical expertise to ensure secure, scalable, and compliant identity management solutions across cloud and on-premises infrastructures. The position requires collaboration with cross-functional teams to integrate security architectures that align with enterprise goals and address evolving threat landscapes.

Responsibilities

• Develop and maintain comprehensive security architecture strategies, roadmaps, and design documents for IAM systems.
• Evaluate, recommend, and lead the implementation of advanced security solutions, controls, and capabilities aligned with business objectives and security best practices.
• Manage the lifecycle of IAM projects, including planning, execution, testing, and deployment of secure identity and access management technologies.
• Collaborate with vendors and internal teams to assess and improve security controls, ensuring compliance with industry standards such as HIPAA and NIST.
• Conduct security assessments, gap analyses, and recommendations related to IAM, cloud security, and data protection.
• Translate business requirements and risk management strategies into technical processes and security services.
• Develop and enforce security standards for operating systems, applications, and network configurations.
• Monitor and analyze developments in digital security threats and technology advancements to adapt security controls proactively.
• Document security solutions, changes, and policies, ensuring proper communication across teams and management.
• Coordinate technical efforts across departments to ensure timely and effective security operations and project delivery.

Qualifications

• Minimum of ten (10) years of experience in a technical services environment within large enterprise networks and application landscapes.
• Hands-on expertise in managing and designing IAM platforms, such as SailPoint IdentityIQ, Active Directory, or EntraID.
• Proven ability to automate complex access management and authentication processes for hybrid cloud and on-premises environments.
• Strong understanding of security architecture, protocols (SSO, MFA, Federation, PAM, OIDC, OAuth, SAML, SCIM), and cloud security controls, particularly Microsoft Azure.
• Experience in implementing security solutions within hybrid hosting models, including RBAC optimization and workflow automation.
• Bachelor’s degree in Computer Science, Information Technology, or a related field; relevant technical training and certifications preferred.
• Certifications such as CISSP, SailPoint IdentityIQ, and Microsoft Azure security certifications are highly desirable.
• Excellent collaboration, communication, and problem-solving skills, with the ability to work under pressure in a fast-paced environment.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire. Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Publishing Pay Range: $70.00 - $72.00 hourly

This position offers a hybrid schedule, with time split between the office and remote work.