identity and access management engineer

Cone Health

The Identity and Access Management Engineer - Intermediate is technically proficient at managing the Identity and Access Mgmt (IAM) system service. They have extensive knowledge about how IAM system enables advanced User Lifecycle Management scenarios involving mobile devices, security policy frameworks, supported SSO options, and advanced directory integration for cloud and on-premises access. Engineers use the IAM System Policy framework to control user access, understand how to map identity attributes and data transformations using Universal Directory, and troubleshoot issues.Essential Job Function
<br><ul>
<li>Develop, implement and maintain IAM system solutions.</li>
<li>Implement and manage Single Sign-On (SSO), Multi-Factor Authentication (MFA), and User Provisioning across various platforms and systems.</li>
<li>Integration management with ServiceNow.</li>
<li>Develop and maintain technical documentation related to IAM System configurations and workflows.</li>
<li>Provide technical guidance and training to other team members and stakeholders on IAM System solutions and IAM best practices.</li>
<li>Assist with Active Directory management and integration, including user and group management, policy configuration and troubleshooting.</li>
<li>Performs other duties as assigned.</li>
</ul>
Education
<br><ul>
<li>Required: Bachelor's Degree andor equivalent experience (10 years experience in IT with 5 years in IT Security is needed for equivalent experience)</li>
</ul>
Experience
<br><ul>
<li>Required: 5 years</li>
</ul>
LicensureCertificationListing
<br><ul>
<li>Required: Okta Administrator (current IAM system) or equivalent Obtain within 12 months.</li>
</ul>
"

Identity and Access Management Engineer Intermediate

Guidehouse

<div><p>Job Family:</p>
Cyber Consulting<p><br>
Travel Required:</p>
Up to 10%<p><br>
Clearance Required:</p>
Ability to Obtain Public Trust<p>
What You Will Do:</p><div><p>
The IAM Engineer will be responsible for designing, implementing, and supporting enterprise Identity and Access Management solutions that protect systems, applications, and data. Bridge security, infrastructure, and business operations to enforce least‑privilege access, automate identity lifecycle processes, and support compliance requirements.</p><p>
IAM Engineers typically work across identity governance, access management (SSO/MFA), and privileged access management (PAM) platforms, supporting both on‑premises and cloud environments. Play a critical role in improving security posture, audit readiness, and user experience through automation and standardized access controls.</p><p><br>
What You Will Need:</p></div><ul><li>
US Citizenship is required</li><li>
Bachelor's Degree in Information Technology, Computer Science, Cybersecurity or related field.</li><li>
Minimum of SIX (6) years of relevant experience, with a minimum of THREE (3) years of experience with Identity and Credential Managment</li><li>
Proficiency with SailPoint, Okta, myID, or other IAM tools</li><li>
Strong understanding of stakeholder requirements and expectations, system architecture, infrastructure build and documentation, configuration and deployment, as well as existing and emerging federal policy including HSPD-12 and NIST documents.</li><li>
Recent experience with deployment of identity and credential management solutions; knowledge of federal cybersecurity and zero trust policies, requirements and standards.</li></ul><p><br>
What Would Be Nice To Have:</p><ul><li>
An ACTIVE and CURRENT SECRET federal or DOD security clearance</li></ul>
The annual salary range for this position is $113,000.00-$188,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.<p><br>
What We Offer:</p><p>
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.</p><p>
Benefits include:</p><ul><li><p>
Medical, Rx, Dental &amp; Vision Insurance</p></li><li><p>
Personal and Family Sick Time &amp; Company Paid Holidays</p></li><li><p>
Position may be eligible for a discretionary variable incentive bonus</p></li><li><p>
Parental Leave and Adoption Assistance</p></li><li><p>
401(k) Retirement Plan</p></li><li><p>
Basic Life &amp; Supplemental Life</p></li><li><p>
Health Savings Account, Dental/Vision &amp; Dependent Care Flexible Spending Accounts</p></li><li><p>
Short-Term &amp; Long-Term Disability</p></li><li><p>
Student Loan PayDown</p></li><li><p>
Tuition Reimbursement, Personal Development &amp; Learning Opportunities</p></li><li><p>
Skills Development &amp; Certifications</p></li><li><p>
Employee Referral Program</p></li><li><p>
Corporate Sponsored Events &amp; Community Outreach</p></li><li><p>
Emergency Back-Up Childcare Program</p></li><li><p>
Mobility Stipend</p></li></ul><p>
About Guidehouse</p><p>
Guidehouse is an Equal Opportunity Employer&ndash;Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.</p><p>
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.</p><p>
If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.</p><p>
All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.</p><p>
If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse&rsquo;s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant&rsquo;s dealings with unauthorized third parties.</p><p>
Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.</p></div>

Identity and Access Management (IAM) Engineer

Accenture Federal Services

<div></div><div><div><div><div>At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.</div>
<div></div>
<div>Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more.</div>
<div></div>
<div>Join us to drive positive, lasting change that moves missions and the government forward!</div><br>
<div></div>
</div></div><p><b>
Job Description:</b></p>
<p>
As an IGA Implementation Engineer, you will design and implement an IGA solution for a federal organization. You will work closely with an Agile delivery team and organizational stakeholders to understand requirements, design solutions, and deploy functionality through a continuous integration/continuous delivery (CI/CD) pipeline.</p>
<p><b>
Key Responsibilities:</b></p>
<ul>
<li>Collaborate with the team to define and meet IGA system requirements.</li>
<li>Develop and implement processes to:</li>
<li><ul><li>Establish user identities and provision information to connected systems.</li>
<li>Enable end-user requests for accounts and entitlements in information systems.</li>
<li>Govern user access to enforce the principle of least privilege.</li>
<li>Create end-user training material.</li>
</ul></li><li>Implement security policies, standards, and procedures related to IGA.</li>
</ul>
<p><b>Basic Qualifications:</b></p>
<ul>
<li>US citizenship</li>
<li>Bachelor's degree; or Associates degree plus additional two years' experience</li>
</ul><ul><li>At least 3 years of experience developing, designing and implementing IAM solutions.</li>
<li>At least 1 year of experience implementing enterprise IGA solutions, such as:</li>
<li><ul><li>Saviynt Security Manager (SSM) or Enterprise Identity Cloud (EIC)</li>
<li>SailPoint Identity IQ (IIQ) or IdentityNow</li>
<li>IBM Security Verify Governance</li>
</ul></li></ul><ul><li>Proficient experience with at least one of the following:</li>
<li><ul><li>Java programming language</li>
<li>Windows PowerShell scripting</li>
<li>System for Cross-domain Identity Management (SCIM)</li>
<li>Representational State Transfer (REST) APIs</li>
</ul></li>
</ul><p><b>Preferred Qualifications:</b></p>
<ul>
<li>Active Secret clearance</li>
<li>Experience implementing Saviynt Enterprise Identity Cloud (EIC).</li>
<li>Possession of a Saviynt IGA Professional certification.</li>
<li>Experience integrating Saviynt IGA with ServiceNow.</li>
<li>Possession of a cybersecurity certification, such as:</li>
<li><ul><li>CompTIA Security+</li>
<li>(ISC)&sup2; SSCP</li>
</ul></li>
</ul><div></div><div><div><div><div><b><i>What We Believe</i></b><b><i>
</i></b></div><div><i>As a company wholly dedicated to serving the US federal government, we bring together the best talent to help reinvent how federal agencies operate and deliver greater value for their mission and the American people. We have an unwavering commitment to creating a culture in which all our people are respected, feel a sense of belonging, and have equal opportunity. As a business imperative, every person at Accenture Federal Services has the responsibility to create and sustain a culture where everyone feels welcomed and included. This is grounded in our core values and our experience that hiring and developing great people who reflect different perspectives, experiences, and backgrounds is key to driving innovation and delivering the results that our clients and the country count on.</i></div>
</div>
<div></div><div><b><i>Equal Employment Opportunity Statement</i></b></div>
<div><i>We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities. For details, view a copy of the</i><i> Accenture Federal Services Equal Opportunity Policy Statement.</i></div>
<div></div>
<div><i>Accenture Federal Services is an Equal Employment Opportunity employer. Additionally, as an Affirmative Action Employer for Veterans and Individuals with Disabilities, Accenture Federal Services is committed to providing veteran employment opportunities to our service men and women.</i></div>
<div></div>
<div><b><i>Requesting An Accommodation</i></b></div>
<div><i>Accenture Federal Services is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture Federal Services and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired.</i></div>
<div></div>
<div><i>If you</i><b><i> </i></b><i>are being considered for employment opportunities with Accenture Federal Services and need an accommodation for a disability or religious observance during the interview process or for the job you are interviewing for, please speak with your recruiter.</i></div>
<div></div>
<div><b><i>Other Employment Statements</i></b></div>
<div><i>Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.</i></div>
<div></div>
<div><i>Candidates who are currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration.</i></div>
<div></div>
<div><i>Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.</i></div>
<div></div>
<div><i>The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.</i></div>
<div></div>
<div><i>California requires additional notifications for applicants and employees. If you are a California resident, live in or plan to work from Los Angeles County upon being hired for this position, please </i><i>click here</i><i> for additional important information.</i></div></div></div></div><p></p>

Identity and Access Management Implementation Engineer

Deloitte

<div>
 <strong>
  Identity and Access Management, Senior Engineer, Cairo, Egypt
  <br/>
  <br/>
 </strong>
 <strong>
  Connect to your career at Deloitte.
  <br/>
  <br/>
 </strong>
 Deloitte drives progress. Using our vast range of expertise, that covers audit, risk advisory, and consulting services across tax, legal, business, technology, and corporate finance, we help our clients&rsquo; become leaders wherever they choose to compete. To do this, we invest in outstanding people. We build teams of future thinkers, with diverse talents and backgrounds, and empower them all to reach for and achieve more.
 <br/>
 <br/>
 What brings us all together at Deloitte? It&rsquo;s how we approach the thousands of decisions we make every day. How we behave, our beliefs and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.Collaborate for measurable impact.
 <br/>
 <br/>
 <strong>
  Connect to your opportunity.
  <br/>
  <br/>
 </strong>
 <strong>
  Implement IAM Solutions
  <br/>
  <br/>
 </strong>
 We are seeking Identity and Access Management (IAM) architects and engineers. The candidate will have a strong background in architecture and engineering, with the ability to design and implement identity and access solutions, conduct testing of the solution, and optionally maintain and operate the technology. This role will involve working closely with cross-functional teams to ensure seamless deployment and integration of identity solutions, as well as contributing to the ongoing operation and maintenance of IAM technologies across our clients. As part of this role, you will be expected to:
 <br/>
 <br/>
 <ul>
  <li>
   Install solution components in on-premise environments where relevant, or configuration of cloud components (and scripting / coding of plug-ins / extensions for cloud solutions).
  </li>
  <li>
   Work with IT infrastructure teams (e.g, Networks, Entpoints) to ensure pre-requisites and dependencies have been met and are in place.
  </li>
  <li>
   Integrate IAM solutions with existing enterprise applications/systems such as directories, cloud applications, HR systems and third party identity providers.
  </li>
  <li>
   Execute unit, integration, functional and non-functional testing for IAM solutions. As part of this, troubleshoot and resolve issues (e.g, authentication failures, access policy conflicts, user provisioning errors etc.) by working with vendors.
  </li>
  <li>
   Deliver services post-implementation, from hyper-care support, resolving additional issues in production through advanced troubleshooting and debugging to ensure smooth operation.
  </li>
  <li>
   Conduct knowledge transfer to client IAM teams through technical training sessions on operating and maintaining the solution, empowering clients to effectively manage and support the IAM environment.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Connect To Your Skills And Professional Experience.
  <br/>
  <br/>
 </strong>
 To succeed in this role, you will need the following:
 <br/>
 <br/>
 <ul>
  <li>
   Experience &mdash; 3 to 6 years of hands-on experience in the identity domain.
  </li>
  <li>
   Bachelor&rsquo;s degree in information technology, Cybersecurity, computer science or a related field.
  </li>
  <li>
   Experience in design and architecture, development, testing, deployment, and application support across one or more IAM technologies (e.g, SailPoint, Saviynt, ForgeRock, CyberArk, Beyond Trust, Okta, Active Directory, Azure AD, Angular, Springboot, and PingFederate etc). Note that experience in all technologies is not mandatory, but experience with some of them is expected.
  </li>
  <li>
   Experience in carrying out advanced integration with the IAM solution, and developing, configuring, leveraging out of the box and custom connectors to onboard applications (e.g., AD, LDAP, Exchange etc).
  </li>
  <li>
   Understanding of the software development life cycle processes.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  The Following Skills Are Also Relevant
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Understanding of OAUTH, JSON, REST, SOAP, and Network Protocols (e.g., SSL, SSH, FTP, SMTP, HTTP and HTTPS etc).
  </li>
  <li>
   Experience in identity and access configuration of container-based architectures and implementations (e.g., Kubernetes, Docker, etc.).
  </li>
  <li>
   Technical skills including scripting - Python/JAVA/ASP/C#/PowerShell, Coding frameworks.
  </li>
  <li>
   We welcome candidates with various security certifications and exposure to other security domains (e.g. Cloud).
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Personal independence.
  <br/>
  <br/>
 </strong>
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 <br/>
 <br/>
 <strong>
  Connect to your Industry.
  <br/>
  <br/>
 </strong>
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, Consulting
 <br/>
 <br/>
 <strong>
  Connect with your colleagues.
  <br/>
  <br/>
 </strong>
 Location: Cairo. Egypt
 <br/>
 <br/>
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 <br/>
 <br/>
 <strong>
  Our commitment to you.
  <br/>
  <br/>
 </strong>
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 <br/>
 <br/>
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 <br/>
 <br/>
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 <br/>
 <br/>
 <strong>
  Connect to your next step.
  <br/>
  <br/>
 </strong>
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 <br/>
 <br/>
</div>


Deloitte Innovation Hub I Cyber Security I Identity and Access Management Senior Engineer, Cairo, Egypt

Sanford Health

<div><b>Careers With Purpose</b><br>
<br>
<b>Sanford Health is one of the largest and fastest-growing not-for-profit health systems in the United States. We're proud to offer many development and advancement opportunities to our nearly 50,000 members of the Sanford Family who are dedicated to the work of health and healing across our broad footprint.</b><br>
<br>
<b>Facility:</b> Bismarck Business Center
<br>
<b>Location:</b> Bismarck, ND
<br>
<b>Address:</b> 3451 N 14th St, Bismarck, ND 58503, USA
<br>
<b>Shift:</b> 8 Hours - Day Shifts
<br>
<b>Job Schedule:</b> Full time
<br>
<b>Weekly Hours:</b> 40.00
<br>
<b>Salary Range:</b> $46.00 - $76.00<br>
<br>
<b>Department Details</b><br>
<br>
Experience with Saviynt is highly preferred.<br>
<br>
<b>Job Summary</b><br>
<br>
The Lead Identity Systems Engineer is responsible for designing, implementing, and securing enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments. Engineers in this family ensure that users, systems, and applications are authenticated, authorized, and protected in alignment with security standards, regulatory requirements, and business needs. The Lead Identity Systems Engineer is a leadership role that combines deep technical expertise with operational oversight, ensuring that enterprise identity platforms are secure, scalable, and reliable across on-premises and cloud environments. This position leads the deployment, configuration, and lifecycle management of Active Directory, Entra ID, PKI, and hybrid identity services, while overseeing governance processes such as access reviews, audits, and compliance reporting. The Lead Identity Systems Engineer defines operational standards, playbooks, and escalation paths, serving as the technical lead for identity projects, integrations, and cross-platform authentication initiatives. Responsibilities include enforcing least privilege, securing sensitive systems, managing certificate lifecycles, and automating provisioning and access governance workflows. In addition, this role partners with Information Security leadership to align identity services with organizational policy, mentors and develops engineering team members, and monitors operational KPIs to drive efficiency, resilience, and continuous improvement. Balancing technical delivery with administrative leadership and strategic input, the Lead Identity Systems Engineer plays a pivotal role in maturing the enterprise's identity ecosystem while enabling secure business operations.<br>
<br>
Works under limited guidance due to previous experience/breadth of knowledge of processes and organizational knowledge. Acts independently to determine methods and procedures on new assignments. Regularly presented with new assignments and projects that require the application of independent judgement and interpretation of policies and practices. Consistently checks the work of other team members and provides performance feedback. Assist the team Manager with the following: Adherence with Sanford Health policies and procedures is maintained by the team (e.g., timecards are submitted on time, etc.), prioritize work to all team members, assign team members to projects based on experience, workload, and growth opportunities, and ensures deadlines for projects are met.<br>
<br>
This role requires deep technical expertise in Active Directory, Entra ID, authentication protocols, Identity Governance Administration (IGA), Privileged Access Management (PAM) and PKI with a strong focus on information security, compliance, strong problem-solving skills, a security-first mindset, and least-privilege enforcement. The Lead Identity Systems Engineer ensures the organization's identity platforms are resilient, scalable, and secure to support business operations and protect sensitive data. The Lead Identity Systems Engineer will work closely with cross-functional IT, application, and security teams to ensure alignment with business objectives, regulatory requirements, and industry best practices.<br>
<br>
<b>Qualifications</b><br>
<br>
Bachelor&rsquo;s degree required, in lieu of education, leadership may consider an Associate&rsquo;s Degree plus 3 years of applicable experience in computer science or related field.<br>
<br>
Minimum of 5 years applicable work experience required. Including but not limited to:<br>
<br>
<ul><li>Supporting Active Directory, Domain Services, Hybrid Identities, &amp; Entra ID</li></ul>
<br>
<ul><li>Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC</li></ul>
<br>
<ul><li>Maintaining Public Key Infrastructure (PKI)</li></ul>
<br>
<ul><li>Supporting Identity Lifecycle &amp; Access Governance workflows and technical integrations</li></ul>
<br>
<ul><li>Implementation of information security standards and procedures including HIPAA and PCI</li></ul>
<br>
Security Certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are highly desired.<br>
<br>
<b>Benefits</b><br>
<br>
Sanford Health offers an attractive benefits package for qualifying full-time and part-time employees. Depending on eligibility, a variety of benefits include health insurance, dental insurance, vision insurance, life insurance, a 401(k) retirement plan, work/life balance benefits, and a generous time off package to maintain a healthy home-work balance. For more information about Total Rewards, visit https://sanfordcareers.com/benefits .<br>
<br>
Sanford is an EEO/AA Employer M/F/Disability/Vet. If you are an individual with a disability and would like to request an accommodation for help with your online application, please call 1-877-673-0854 or send an email to talent@sanfordhealth.org .<br>
<br>
Sanford Health has a Drug Free Workplace Policy. An accepted offer will require a drug screen and pre-employment background screening as a condition of employment.<br>
<br>
<b>Req Number:</b> R-0253940
<br>
<b>Job Function:</b> Information Technology
<br>
<b>Featured:</b> No</div>

Lead Identity System Engineer

PROOFOPS

<p><b>Role Purpose</b></p><p>The Microsoft Security Engineer will be responsible for day-to-day administration, monitoring, support, and optimization of Microsoft security technologies within the customer environment. The role covers Identity &amp; Access Security, Endpoint Security, Email &amp; Collaboration Security, Cloud &amp; SaaS Security, and Data Protection controls across the Microsoft ecosystem.</p><p>The engineer will provide operational support, investigate alerts, recommend and implement approved changes, maintain documentation, and support continuous improvement of the customer&rsquo;s Microsoft security posture in line with agreed service scope and change management processes.</p><p><b>Key Responsibilities</b></p><p>1. Identity &amp; Access Security</p><ul><li>Support and administer Microsoft Entra ID security controls.</li><li>Monitor and review MFA, Conditional Access, sign-in events, and identity-related risks.</li><li>Support Privileged Identity Management activities and privileged role governance processes.</li><li>Assist with access reviews, role review activities, and identity security hygiene improvements.</li><li>Investigate suspicious login activity, risky users, and anomalous authentication patterns.</li></ul><p>2. Endpoint Security</p><ul><li>Monitor and manage Microsoft Defender for Endpoint alerts where deployed.</li><li>Perform initial triage, investigation, and coordination for endpoint-related incidents.</li><li>Recommend and implement approved policy tuning to reduce false positives and improve detection quality.</li><li>Coordinate with customer stakeholders for endpoint isolation, containment, and remediation actions where delegated.</li><li>Track endpoint security posture improvements and recurring security issues.</li></ul><p>3. Email &amp; Collaboration Security</p><ul><li>Monitor and handle alerts from Microsoft Defender for Office 365.</li><li>Investigate phishing, spam, malware, suspicious email, and BEC-related incidents.</li><li>Support quarantine review, message analysis, user-reported phishing workflows, and submission processes.</li><li>Assist in tuning anti-phishing, anti-spam, safe links, and safe attachments policies where delegated.</li><li>Coordinate with customer teams on email-related incident response and user impact assessment.</li></ul><p>4. Cloud &amp; SaaS Security</p><ul><li>Monitor and investigate alerts from Microsoft Defender for Cloud and Defender for Cloud Apps where enabled.</li><li>Review exposed risks, misconfigurations, suspicious cloud activity, and SaaS security alerts.</li><li>Support secure score review and track remediation/improvement initiatives.</li><li>Provide recommendations to improve cloud security posture and reduce exposure.</li></ul><p>5. Data Protection &amp; Compliance Support</p><ul><li>Support Purview audit visibility and investigation of relevant audit events.</li><li>Monitor DLP alerts and assist in tuning DLP policies where enabled and delegated.</li><li>Review data protection trends, policy hits, and recurring false positives.</li><li>Support reporting and evidence gathering related to security and compliance operations.</li></ul><p><b>BAU / Operational Activities</b></p><ul><li>Handle service requests related to Microsoft security administration within agreed guardrails.</li><li>Perform approved configuration changes such as policy adjustments, onboarding of users/groups/domains, and security configuration updates.</li><li>Maintain operational documentation, change records, implementation notes, and runbooks.</li><li>Participate in peer review and controlled deployment during agreed change windows.</li><li>Prepare monthly operational reports covering alerts, incidents, trends, posture changes, tuning activities, and improvement backlog.</li><li>Conduct monthly secure score reviews and support quarterly roadmap discussions.</li><li>Continuously identify opportunities for optimization, false-positive reduction, and security maturity improvement.</li></ul><p><b>Required Skills &amp; Experience</b></p><p>Hands-on experience with <b>Microsoft Entra ID</b>, <b>Conditional Access</b>, <b>MFA</b>, and <b>PIM</b>.</p><p>Experience with <b>Microsoft Defender for Endpoint</b>.</p><p>Experience with <b>Microsoft Defender for Office 365</b>, including phishing and BEC investigations.</p><ul><li>Familiarity with <b>Microsoft Defender for Cloud</b>, <b>Defender for Cloud Apps</b>, and <b>Microsoft Purview</b>.</li><li>Experience in alert investigation, incident handling, policy tuning, and operational security support.</li><li>Good understanding of Microsoft 365 security architecture and administrative controls.</li><li>Experience in change management, documentation, and customer-facing support activities.</li><li>Ability to coordinate with customer IT, security, and compliance teams.</li></ul><p><b>Preferred Qualifications</b></p><p><b>Microsoft security certifications such as:</b></p><ul><li>Microsoft Certified: Security Operations Analyst Associate</li><li>Microsoft Certified: Identity and Access Administrator Associate</li><li>Microsoft Certified: Cybersecurity Architect Expert</li><li>Microsoft 365 / Azure security-related certifications</li></ul><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>Salary Expectations </li></ul><p>Experience:</p><ul><li>Security Operations : 3 years (Required)</li></ul><p>Work Location: In person</p>

Microsoft Security Engineer

Openkyber

<div><p><b>Title:</b> IAM Engineer(PingOne)</p>
<p><b>Location:</b> - Bethesda, MD, (Remote)</p>
<p><b>Hire Type:</b> Contract</p>
<p>Job Description: Leads the Identity &amp; Access Management (IAM) function in Global Information Security organization through subject matter expertise (L3) on multi-factor authentication (MFA), Web Access Management (WAM) technologies. Functions as the Security Engineer in the team providing engineering support for MFA and SSO service offerings, daily operations, and continuous improvements. Hands-on MFA implementation experience with PingOne SaaS products (DaVinci, Protect, Verify, Directory) including integrations with Ping Federate for SSO services. Analyzes and implements changes to the MFA and SSO infrastructure including configurations and customizations to address application, security, and performance requirements. Works with stakeholders to integrate and onboard new applications and helps troubleshoot integrations with existing applications and systems. Responsible for directing L2/L1 technical staff to address application security issues.</p>
<p><b>Core Work Activities :</b></p>
<ul><li>Functions as an MFA and WAM point of contact for IT system administrators, Service Desk, service providers and application owners.</li>
<li>Works closely with senior engineers and other team members for MFA and SSO services and operational needs.</li>
<li>Routinely collaborates with different security team members including, but not limited to architecture, infrastructure, network, compliance, and incident response</li>
<li>Manages the MFA and WAM services including requirements gathering, design, building, testing, deployment, and operationalization.</li>
<li>Collaborates with multiple stakeholders to support implementation of new applications and services.</li>
<li>Defines and documents MFA and WAM policies and procedures</li>
<li>Creates test cases to ensure cross platform interoperability.</li>
<li>Implements and validates security controls for the MFA and WAM solution.</li>
<li>Designs security solutions to address risks throughout the SDLC process and confirm that the level of risk is acceptable in accordance with policies.</li>
<li>Provides guidance and oversight for L2/L1 troubleshooting of operational issues.</li>
<li>Leads the identification and remediation of relative security events</li>
</ul><p><b>Maintaining Goals:</b> Submits reports in a timely manner, ensuring delivery deadlines are met. Promotes the documenting of project progress accurately. Provides input and assistance to other teams regarding projects.</p>
<p><b>Managing Work, Projects, and Policies:</b> Manages and implements work and projects as assigned. Generates and provides accurate and timely results in the form of reports, presentations, etc. Analyzes information and evaluates results to choose the best solution and solve problems. Provides timely, accurate, and detailed status reports as requested.</p>
<p><b>Demonstrating and Applying Discipline Knowledge:</b> Provides technical expertise and support to persons inside and outside of the department. Demonstrates knowledge of job-relevant issues, products, systems, and processes. Demonstrates knowledge of function-specific procedures. Keeps up-to-date technically and applies new knowledge to job. Uses computers and computer systems (including hardware and software) to enter data and/ or process information.</p>
<p><b>Delivering on the Needs of Key Stakeholders:</b> Understands and meets the needs of key stakeholders. Develops specific goals and plans to prioritize, organize, and accomplish work. Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule. Collaborates with internal partners and stakeholders to support business/initiative strategies Communicates concepts in a clear and persuasive manner that is easy to understand. Generates and provides accurate and timely results in the form of reports, presentations, etc. Demonstrates an understanding of business priorities</p>
<p><b>Additional Responsibilities:</b> Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner. Demonstrates self-confidence, energy and enthusiasm. Informs and/or updates leaders on relevant information in a timely manner. Manages time effectively and conducts activities in an organized manner. Presents ideas, expectations and information in a concise, organized manner. Uses problem solving methodology for decision making and follow up. Performs other reasonable duties as assigned by manager.</p>
<p><b>Candidate Profile :</b></p>
<ul><li>Required Education and Experience: Undergraduate degree in Computer Sciences or related field or equivalent work experience and certifications</li>
<li>Minimum 5+ years of information security or infrastructure engineering experience including - 4+ years of experience in managing MFA offerings - Passkeys, Biometrics, FIDO tokens, various authenticators, Implementation experience of PingOne products like DaVinci, Verify, Protect, Neo</li>
<li>4+ years' experience of Federation/SSO services, protocols, and technologies - OAuth/OIDC, SAML, WS-FED, Browsers, MDM/MAM, X509 cert-based authentication (user &amp; device)</li>
<li>2+ years' experience with Ping Access and Ping Federate architecture, design, and implementation - Policy design and implementation, Ping Fed custom adapter development, Integration of custom applications</li>
<li>2+ years of experience in Development - JAVA, HTML/JavaScript/JSON, scripting (Ansible, Shell, Perl, Expect)</li>
<li>2+ years of experience translating business requirements to technical requirements with strong written and verbal communication skills</li>
<li>2+ years of experience with LDAP and directory Services using Radiant logic or Ping Directory</li>
</ul><ul><li>Preferred: 5+ years of experience with integrating IAM solutions with infrastructure and applications</li>
<li>2+ years of experience in designing &amp; implementing API services and data transformation layers</li>
<li>2+ years of experience on containerized deployment environments</li>
<li>Current information security certification, including Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified SCADA Security Architect (CSSA) or Certified Secure Software Lifecycle Professional (CSSLP)</li>
<li>Technical knowledge of industry best practices pertaining to MFA/WAM services</li>
<li>Experience with defining &amp; fulfilling Key Performance Indicators for MFA infrastructure</li>
<li>Experience in the IAM domain with user lifecycle management, authentication, authorization, federation, and privileged access management</li>
<li>Experience in implementing the capabilities such as Passwordless or adaptive authentication</li>
<li>Experience with cloud/SaaS IAM/WAM services</li>
<li>Experience with Zero-Trust Framework</li>
<li>Experience with CASB and WAF technologies.</li>
<li>Experience doing business analysis and requirements gathering for complex business systems</li>
<li>Responsible for identifying, evaluating, and participating in decision making around new and emerging IAM/MFA technologies and should be able to support other areas of Information Security as needed</li>
<li>Strong understanding of PKI, certificate management, security, and provisioning of identity data.</li>
</ul><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

OCI IAM Engineer

Search 10000+ Identity and access management engineer jobs near you this March. New roles added regularly across leading industries. Apply today.