Identity & Access Management Engineer

Powershell C# SailPoint SQL

Pay Range:

Major Responsibilities:

Design implement andmaintaincomplex IAM solutions including IGA PAM and SSO using various tools and technologies suchas SailPoint Active Directory IBM Verify Azure AD Okta MFA SAML OAuth and in testing validation and quality assurance of IAM solutions ensuring functionality performance securitymonitorandauditIAM systems activities and developing andimplementprocess improvement initiatives backup and recovery procedures and security optimization tasks within troubleshooting analysis and remediation of access and permissions issues. Assist working collaboratively with vendors attechnicallevel to resolve problems and manage escalation.

Manage the identity lifecycle and access policies for users groups roles and applications across the investigations and responses to high-impact IAM incidentsassistteamtocontainand mitigate access reviews risk assessments vulnerabilityanalysisand audits to ensure compliance with IAM policies and standards and provide audit privacy legal and compliance support for IAM security/access related to all procedures necessary to protect information systems from intentional or inadvertent modification disclosure or destruction.

Provide technical support and guidance to clients and internal teams on IAM-related matters such as user provisioning access requests password resets authentication issues identity governance identity and audit the IAM management systems and processes make recommendations takeappropriate actionto ensure the best performance and generate reports and for developing and reporting on overall metrics of assigned areas of and implement improvements creating andmaintainingcomprehensive IAM documentation including architecture designs IAM policies process workflows procedures configurations and compliance reports and ensure they align with the best practices and industry standards.

Identify implement securitycontrolsand remediate any IAM vulnerabilities risks or gaps and implement corrective actions and preventive ensuring IAM practices align with regulatory requirements ( PCI DSS FFIEC HIPAA) conduct security audits and support compliance efforts. Support security/access related records in all phases including build configuration testing implementation go-live support and optimization and perform process improvement and security optimization as escalation for the application teams for security/access issues and asIAMpoint of contact for assigned audits and security related activities with other departments. Document all disaster recovery and business continuance configurations and recovery and businesscontinuanceconfigurations and procedures.

Analyze and resolve IAM issues and incidents and provide root cause analysis and recommendations for issues/tickets working with customers as needed. Recommend and implement solutions for problems within the team.

Participate incomplexIAM projects and initiatives and collaborate with other engineers analysts and managers to deliver high-quality IAM business requirements and creates technical the resolution of project issues and recording time against tasks accurately and work plan development and management. Ensure successful completion of assigned projects on schedule within budget andin accordance withAdvocate Health standards.

Collaborate with the IAM team application owners and business stakeholders to understand and document IAM requirements and integrity for application delivery creates tasks work estimates and resource requirementsonthose tasks. Communicates with teammates and customersin order tokeep them informedwith regard toactivity status and potential problem areas and provides recommendations to understandbusinessimpact of decisions made to fulfill customer expectations.

Contribute to team effort bysharing ofknowledge aiding and mentor other IAM protocol for working with customers and appropriately balance needs and resources.

Maintain knowledge of applicable technologies job/system related forumsroadmapsand/or related documentation. Research and evaluate new IAM technologies and best practices and recommend improvements and enhancements to the IAM architecture and processes.

Licensure Registration and/or Certification Required:

IAM certification (SailPoint Okta or other IAM engineering related certification) withinoneyearemployment.

Education Required:

Bachelors Degree (or equivalent knowledge) in Information Systems ComputerScienceor related field

Experience Required:

Typically requires at least three years of experience in IAM Engineering administration or support preferably in a large and complex environment and 5 yearsofexperience in IT fields such as Cyber Security Epic Security or other technical areas;oran equivalent combination of education and knowledge and skills in IAM concepts principlesbestpracticesand standards such as identity lifecycle management access management authentication authorizationprovisioning deprovisioning auditingand identity in IAM tools and technologies such as Active Directory Azure AD SSO MFA SAML OAuthLDAPand SCIM. Experience in scripting and automation using PowerShell PythonBash JavaScript JavaC#or other languages. Experience in cloud computing platforms and services such as Azure AWS or Google Cloud.

Fully Remote Role from these states: AL AK AR AZ DE FL GA IA ID IN IL (Only WI/IL Division) LA KS KY ME MI MO MS MT NC ND NE NH NM NV OH OK PA SC SD TN TX UT VA WI WV WY.

Due to complex requirements remote work is NOT permitted for short or long periods in: CA DC CO CT HI MA MD MN NJ NY OR RI VT WA. and working Internationally (this includes working while on vacation).

Knowledge Skills & Abilities Required:

Strong technical skills inIAM toolsscripting languages (PowerShell Python Bash JavaScript Java C# or other languages) and a deep understanding of security controls and industry an understanding of IAM technology process and procedures and the ability to apply that understanding to supporting existing systems and/or implementing new systems that directlybenefitthe patientcare education and research and/or business functions of Advocate knowledge of user provisioning procedures and role-based access control.

Detailed knowledge of security as it relates to application ofsecurity mechanisms with clinical and hospital information of industry standard frameworks and controls such asNISTCIS SOX and Zero Trust principles.

Advanced knowledge of operating systems vendor-specific environments and other system understanding of tools and technologies from end user devices through the database knowledge is a plus.

Strong data analytical critical thinking reasoning deduction inference and problem-solving to learnnew technologiesand skills quickly.

Ability tomaintaina high levelof verbal and written communication skills and the demonstrated ability to communicate well with all levels of the organization.

Ability to work ina fast-paced dynamic team environment. Highly organized with the ability to work onnumeroussimultaneous activities while paying attentionto detail and in project management and agile methodologies such as Scrum or Kanban is a plus.

Proven experience working in ateam-oriented collaborative a cooperative work environment by usingeffectivecommunication skills interpersonalrelationshipsand team building.

Demonstrates experience in developing processes and documents to ensure quality delivery of services.

Clearand strong understanding of customer service requirements and facilitation skills and ability to explain technical subjects to non-technical ability to translate user requirements into system specifications.

Self-motivated able to work independently to complete tasks and respond to department requests and to collaborate with others toutilizetheir resources and knowledge toidentifyhigh qualitysolutions.

ProficiencyinMicrosoftSuite (Word PowerPoint Excel AccessOutlook) or similar products.

Physical Requirements and Working Conditions:

Work is subject to high-level visibility through verbal and written communications with senior management.

This position requires travel therefore will be exposed to weather and road conditions.

Operates all equipment necessary to perform the job.

Exposed to a normal office environment.

Position will require off-hourssupport and on-call to project requirements and schedules in Advocate Health overtimeeveningand weekend hours may berequiredat times for conversions training etc.

Access to verbalwrittenand electronic PHI for this job has beendeterminedbased on job level and job responsibility within the organization. Will limit access to protected health information (PHI) to the informationreasonably necessaryto do the job.

Will share information only on aneed-to-knowbasis for work purposes.

Each employee has the responsibility towork in a safe manner.

Employee doesnot have direct patient contact.

Must be able to lift objects that weigh up to 35 lbs.

Preferred Job Requirements

Preferred Certification / License:

Certifications in IAM security or Epic are a plus.

DISCLAIMER

All responsibilities and requirements are subject to possible modification to reasonably accommodate individuals with disabilities.

This job description in no way states or implies that these are the only responsibilities to be performed by an employee occupying this job or position. Employees must follow any other job-related instructions and perform any other job-related duties requested by their leaders.

Our CommitmenttoYou:

Advocate Health offers a comprehensive suite of Total Rewards: benefits and well-being programs competitive compensation generous retirement offerings programs that invest in your career development and so much more so you can live fully at and away from work including:

Compensation

• Base compensation listed within the listed pay range based on factors such as qualifications skills relevant experience and/or training

• Premium pay such as shift on call and more based on a teammates job

• Incentive pay for select positions

• Opportunity for annual increases based on performance

Benefits and more

• Paid Time Off programs

• Health and welfare benefits such as medical dental vision life andShort- and Long-Term Disability

• Flexible Spending Accounts for eligible health care and dependent care expenses

• Family benefits such as adoption assistance and paid parental leave

• Defined contribution retirement plans with employer match and other financial wellness programs

• Educational Assistance Program

Note: Eligibility for programs listed above may depend on your FTE or status (e.g. full-time part-time per diem temporary etc.); please ask a Recruiter for more information during an interview.