Identity and Access Management Engineer

We're building a world of health around every individual , shaping a more connected, convenient and compassionate health experience.

The Identity and Access Management Engineer is responsible for contributing to the design, engineering, and supporting identity capabilities across workforce, privileged, cloud, and customer-facing environments.

Responsibilities

Azure & Enterprise IAM

• Design, implement, and support identity and access solutions using Microsoft Entra ID and Azure.
• Engineer authentication, authorization, federation, SSO, MFA, Conditional Access, and role-based access control solutions.
• Support hybrid identity integrations between Microsoft Entra ID, Active Directory, cloud platforms, SaaS applications, and enterprise applications.
• Implement secure identity lifecycle processes supporting provisioning, access changes, and deprovisioning.
• Design and support privileged access controls, including Privileged Identity Management (PIM) and least-privilege access models.
• Implement service principal, workload identity, managed identity, and application identity controls within Azure environments.
• Support identity governance activities including access reviews, entitlement management, role governance, and remediation of excessive access.

Customer Identity & Access Management (CIAM)

• Design, implement, and support CIAM solutions for customer-facing web, mobile, and digital applications.
• Implement secure customer registration, sign-in, authentication, account recovery, and identity lifecycle patterns.
• Integrate customer identity services with applications and APIs using standards including OAuth 2.0 and OpenID Connect (OIDC).
• Partner with application engineering teams to integrate authentication and authorization into application architectures.
• Support federation and external identity integrations across customer and partner ecosystems.
• Troubleshoot complex login, token, federation, authorization, and application integration issues.
• Ensure CIAM implementations balance security, customer experience, availability, scalability, and privacy requirements.

Cloud Identity & Security

• Implement identity controls for Azure cloud resources following least privilege and zero-standing-privilege principles.
• Design Azure RBAC models and access patterns for cloud infrastructure, applications, APIs, workloads, and administrative functions.
• Review identity configurations to identify excessive permissions, unused access, privileged roles, and other identity-related risk.
• Partner with Cloud Security and DevSecOps teams to embed identity controls into cloud engineering practices.
• Support Infrastructure-as-Code and automated identity configuration using technologies such as Terraform, PowerShell, Microsoft Graph, APIs, and CI/CD pipelines.
• Build monitoring and operational capabilities for cloud identity services and authentication failures.

Engineering & Operations

• Serve as a technical escalation point for complex identity and authentication issues.
• Participate in incident response involving compromised identities, authentication failures, privileged access, or unauthorized access.
• Develop reusable engineering patterns, technical standards, runbooks, and reference architectures.
• Automate provisioning, access management, reporting, and identity governance processes where practical.
• Support production availability and operational reliability of business-critical identity services.
• Partner with Security, Infrastructure, Architecture, GRC, Application Development, and business teams to deliver secure identity solutions.

Requirements

• 3+ years of experience in Identity & Access Management, security engineering, cloud engineering, or a related discipline.
• 3+ years of hands-on experience with Microsoft Entra ID and Azure identity services.
• 3+ years of experience implementing CIAM or external/customer identity solutions.
• 3+ years of experience implementing enterprise SSO, MFA, Conditional Access, RBAC, federation, and identity lifecycle management.
• 3+ years with OAuth 2.0, OpenID Connect (OIDC), SAML, authentication, authorization, tokens, and federation.
• 2+ years of experience integrating IAM capabilities with enterprise web applications, APIs, and cloud-native applications.
• 2+ years of experience working with APIs, scripting, or automation technologies such as Microsoft Graph, PowerShell, Python, or Terraform.

Benefits

• Medical, dental, and vision coverage
• Paid time off
• Retirement savings options
• Wellness programs
• Other resources, based on eligibility