identity governance engineer

Sanford Health

<div><b>Careers With Purpose</b><br>
<br>
<b>Sanford Health is one of the largest and fastest-growing not-for-profit health systems in the United States. We're proud to offer many development and advancement opportunities to our nearly 50,000 members of the Sanford Family who are dedicated to the work of health and healing across our broad footprint.</b><br>
<br>
<b>Facility:</b> Bismarck Business Center
<br>
<b>Location:</b> Bismarck, ND
<br>
<b>Address:</b> 3451 N 14th St, Bismarck, ND 58503, USA
<br>
<b>Shift:</b> 8 Hours - Day Shifts
<br>
<b>Job Schedule:</b> Full time
<br>
<b>Weekly Hours:</b> 40.00
<br>
<b>Salary Range:</b> $46.00 - $76.00<br>
<br>
<b>Department Details</b><br>
<br>
Experience with Saviynt is highly preferred.<br>
<br>
<b>Job Summary</b><br>
<br>
The Lead Identity Systems Engineer is responsible for designing, implementing, and securing enterprise identity and access management infrastructure that enables reliable authentication, authorization, and access management across hybrid environments. Engineers in this family ensure that users, systems, and applications are authenticated, authorized, and protected in alignment with security standards, regulatory requirements, and business needs. The Lead Identity Systems Engineer is a leadership role that combines deep technical expertise with operational oversight, ensuring that enterprise identity platforms are secure, scalable, and reliable across on-premises and cloud environments. This position leads the deployment, configuration, and lifecycle management of Active Directory, Entra ID, PKI, and hybrid identity services, while overseeing governance processes such as access reviews, audits, and compliance reporting. The Lead Identity Systems Engineer defines operational standards, playbooks, and escalation paths, serving as the technical lead for identity projects, integrations, and cross-platform authentication initiatives. Responsibilities include enforcing least privilege, securing sensitive systems, managing certificate lifecycles, and automating provisioning and access governance workflows. In addition, this role partners with Information Security leadership to align identity services with organizational policy, mentors and develops engineering team members, and monitors operational KPIs to drive efficiency, resilience, and continuous improvement. Balancing technical delivery with administrative leadership and strategic input, the Lead Identity Systems Engineer plays a pivotal role in maturing the enterprise's identity ecosystem while enabling secure business operations.<br>
<br>
Works under limited guidance due to previous experience/breadth of knowledge of processes and organizational knowledge. Acts independently to determine methods and procedures on new assignments. Regularly presented with new assignments and projects that require the application of independent judgement and interpretation of policies and practices. Consistently checks the work of other team members and provides performance feedback. Assist the team Manager with the following: Adherence with Sanford Health policies and procedures is maintained by the team (e.g., timecards are submitted on time, etc.), prioritize work to all team members, assign team members to projects based on experience, workload, and growth opportunities, and ensures deadlines for projects are met.<br>
<br>
This role requires deep technical expertise in Active Directory, Entra ID, authentication protocols, Identity Governance Administration (IGA), Privileged Access Management (PAM) and PKI with a strong focus on information security, compliance, strong problem-solving skills, a security-first mindset, and least-privilege enforcement. The Lead Identity Systems Engineer ensures the organization's identity platforms are resilient, scalable, and secure to support business operations and protect sensitive data. The Lead Identity Systems Engineer will work closely with cross-functional IT, application, and security teams to ensure alignment with business objectives, regulatory requirements, and industry best practices.<br>
<br>
<b>Qualifications</b><br>
<br>
Bachelor&rsquo;s degree required, in lieu of education, leadership may consider an Associate&rsquo;s Degree plus 3 years of applicable experience in computer science or related field.<br>
<br>
Minimum of 5 years applicable work experience required. Including but not limited to:<br>
<br>
<ul><li>Supporting Active Directory, Domain Services, Hybrid Identities, &amp; Entra ID</li></ul>
<br>
<ul><li>Implementing SSO/MFA workflows using SAML 2.0 and/or OIDC</li></ul>
<br>
<ul><li>Maintaining Public Key Infrastructure (PKI)</li></ul>
<br>
<ul><li>Supporting Identity Lifecycle &amp; Access Governance workflows and technical integrations</li></ul>
<br>
<ul><li>Implementation of information security standards and procedures including HIPAA and PCI</li></ul>
<br>
Security Certifications (CISSP, CISA, CISM, Security+, CEH, etc.) are highly desired.<br>
<br>
<b>Benefits</b><br>
<br>
Sanford Health offers an attractive benefits package for qualifying full-time and part-time employees. Depending on eligibility, a variety of benefits include health insurance, dental insurance, vision insurance, life insurance, a 401(k) retirement plan, work/life balance benefits, and a generous time off package to maintain a healthy home-work balance. For more information about Total Rewards, visit https://sanfordcareers.com/benefits .<br>
<br>
Sanford is an EEO/AA Employer M/F/Disability/Vet. If you are an individual with a disability and would like to request an accommodation for help with your online application, please call 1-877-673-0854 or send an email to talent@sanfordhealth.org .<br>
<br>
Sanford Health has a Drug Free Workplace Policy. An accepted offer will require a drug screen and pre-employment background screening as a condition of employment.<br>
<br>
<b>Req Number:</b> R-0253940
<br>
<b>Job Function:</b> Information Technology
<br>
<b>Featured:</b> No</div>

Lead Identity System Engineer

Agoda

<div>
 <strong>
  About Agoda
  <br/>
  <br/>
 </strong>
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 <br/>
 <br/>
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 <br/>
 <br/>
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 <br/>
 <br/>
 <strong>
  Role Overview:
  <br/>
  <br/>
 </strong>
 We are looking for a hands on Identity Security Engineer to design, build, and operate Okta platform. This role owns the implementation and evolution of Okta Identity Governance, lifecycle automation, and identity centric security controls across the enterprise.
 <br/>
 <br/>
 <strong>
  Key Responsibilities:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Okta Identity Governance (OIG) &amp; Lifecycle: Design and deploy Okta Identity Governance modules, including Access Requests, Certifications, and Entitlement Management.
  </li>
  <li>
   Develop and maintain custom workflows and policies within Okta IGA to enforce Segregation of Duties (SOD) rules during provisioning and access requests
  </li>
  <li>
   Design access certification campaigns and remediation workflows to satisfy audit requirements.
  </li>
  <li>
   Okta Platform Engineering: Manage Okta organization architecture (Groups, Rules, Policies) using Infrastructure-as-Code (Terraform) to ensure version control and reduce drift.
  </li>
  <li>
   Build and maintain Okta Workflows for lifecycle automation, custom notifications, and advanced logic beyond native features. Implement and enforce Multi-Factor Authentication (MFA) policies, Risk-Based Authentication, and Global Session Policies.
  </li>
  <li>
   Automation &amp; Integration: Develop automation using Okta APIs, Event Hooks, and Workflows. Integrate Okta OIG with downstream applications for seamless provisioning.
  </li>
  <li>
   Partner with Detection Engineering to ingest Okta System Logs into the SIEM for threat monitoring.
  </li>
  <li>
   Governance, Risk &amp; Compliance: Partner with GRC and Audit teams to support SOX, NIST requirements.
  </li>
  <li>
   Ensure identity controls are measurable, auditable, and enforced consistently.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Skills &amp; Experience:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   6+ years of hands-on experience operating Okta in a production environment.
  </li>
  <li>
   Experience with Okta Identity Governance (OIG): Setting up Access Requests, Review Campaigns, and Entitlements.
  </li>
  <li>
   Experience with Terraform (specifically the Okta Provider) for managing configuration as code.
  </li>
  <li>
   Ability to write scripts in Python or JavaScript/TypeScript for custom API integrations.
   <br/>
   <br/>
  </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester  #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 <br/>
 <br/>
 <strong>
  Discover More About Working At Agoda
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Agoda Careers https://careersatagoda.com
  </li>
  <li>
   Facebook https://www.facebook.com/agodacareers/
  </li>
  <li>
   LinkedIn https://www.linkedin.com/company/agoda
  </li>
  <li>
   YouTube https://www.youtube.com/agodalife
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Equal Opportunity Employer
  <br/>
  <br/>
 </strong>
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 <br/>
 <br/>
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 <br/>
 <br/>
 <strong>
  Disclaimer
  <br/>
  <br/>
 </strong>
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 <br/>
 <br/>
</div>


Identity Security Engineer (Okta & Identity Governance) - Bangkok Based, Relocation provided

GEICO

<div><p><b>At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.</b></p><p><b>
Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive through relentless innovation to exceed our customers&rsquo; expectations while making a real impact for our company through our shared purpose.</b></p><p></p><p><b>
When you join our company, we want you to feel valued, supported and proud to work here. That&rsquo;s why we offer The GEICO Pledge: Great Company, Great Culture, Great Rewards and Great Careers.</b></p><p></p><div><div><p><b>
Position Summary</b></p></div><div><p>
GEICO is seeking an experienced Engineer to play a pivotal role in ensuring the security and efficiency of our digital infrastructure. The ideal Identity Governance Administration Engineer proactively and holistically leads and supports Identity Governance activities that guide the design, development, and security of Identities in the cloud and on-prem. You will participate in the resolution of complex problems, facilitate the implementation of solutions and improvements, and collaborate across teams to promote GEICO&rsquo;s vision.</p></div><div><p><b><br>
Position description</b></p></div><div><p>
Our Senior Engineer is a key member of the engineering staff, working across the organization to provide friction-less experience for our customers and maintain the highest standards of compliance, protection and availability. You will be part of a team that thrives and succeeds in delivering high quality technology products and services in a hyper-growth environment where priorities shift quickly. The ideal candidate has broad and deep technical knowledge of Identity Lifecycle and Directory Services solutions that ensure secure authorization to GEICO&rsquo;s data assets.</p></div><div><p><b><br>
Position Responsibilities</b></p></div><div><p>
As a Senior Engineer, you will:</p></div><div><ul><li><p>
Scope, design, and build scalable, resilient Identity Governance solutions</p></li></ul></div><div><ul><li><p>
Implement Identity and Access Management requirements, such as SOD, RBAC, JIT, etc.</p></li></ul></div><div><ul><li><p>
Engage in cross-functional collaboration throughout the entire project lifecycle</p></li></ul></div><div><ul><li><p>
Participate in design sessions and technology reviews with peers to elevate the quality of engineering across the organization</p></li></ul></div><div><ul><li><p>
Perform routine operational tasks to ensure availability while maintaining least privilege, privileged access management, JIT, and Zero Trust</p></li></ul></div><div><ul><li><p>
Consistently share best practices and improve processes within and across teams</p></li></ul></div><div><ul><li><p>
Develop and maintain professional level system design, processes, and program documentation for Identity and Access Management</p></li></ul></div><div><ul><li><p>
Support a team environment that fosters innovation, diversity, and inclusion</p></li></ul></div><div><ul><li><p>
Stay at the forefront of emerging identity trends, technologies, and best practices, and apply this knowledge to enhance GEICO&rsquo;s data protection strategies</p></li></ul></div><div><ul><li><p>
Provide technical guidance and mentorship to the team, fostering a culture of innovation, collaboration, and continuous improvements</p></li></ul></div><div><ul><li><p>
Work closely with cross-functional teams&mdash;such as security, compliance, and application groups&mdash;to facilitate smooth integration and ensure solutions are aligned with organizational objectives.</p></li></ul></div><div><ul><li><p>
Build resilient and scalable architecture, driving innovation and cost efficiency</p></li></ul></div><div><p><b><br>
Qualifications</b></p></div><div><ul><li><p>
Experience with identity governance platforms such as Sailpoint, Saviynt, or Okta, including identity lifecycle management, access certification and entitlement management</p></li></ul></div></div><div><div><ul><li><p>
Experience with the implementation of identify lifecycle processes, such as provisioning, de-provisioning and access reviews</p></li></ul></div><div><ul><li><p>
Experience developing workflows for joiner, mover and leaver scenarios and automating identity tasks</p></li></ul></div><div><ul><li><p>
Experience in security protocols and products: Understanding of Active Directory, Kerberos, LDAP, SAML, OAuth, and OIDC</p></li></ul></div><div><ul><li><p>
Experience integrating identity governance platforms with systems such as ServiceNow, Workday, Oracle, and cloud platforms, including AWS and Azure</p></li></ul></div><div><ul><li><p>
Fluency in DevOps Concepts, Cloud Architecture, and the Software Development Lifecycle</p></li></ul></div><div><ul><li><p>
Knowledge of developer tooling across the software development life cycle (task management, source code, building, deployment, operations, real-time communication)</p></li></ul></div><div><ul><li><p>
Experience with micro-services oriented architecture and extensible REST APIs</p></li></ul></div><div><ul><li><p>
Fluency and specialization with at least one modern language such as Java, Go, or Python</p></li></ul></div><div><ul><li><p>
Proficiency in scripting languages such as PowerShell, Perl, or Bash</p></li></ul></div><div><ul><li><p>
Strong problem-solving abilities and a proactive approach to identifying and mitigating security risks and vulnerabilities</p></li></ul></div><div><ul><li><p>
Excellent communication skills, able to communicate complete technical concepts to technical and non-technical stakeholders</p></li></ul></div><div><p><b><br>
Experience</b></p></div><div><ul><li><p>
4+ years of experience in developing Identity Governance and Access Management solutions for large enterprises at scale</p></li></ul></div><div><ul><li><p>
3+ years of experience with architecture and design</p></li></ul></div><div><ul><li><p>
3+ years of experience with AWS, GCP, Azure, or another cloud service</p></li></ul></div><div><ul><li><p>
2+ years of experience in open-source frameworks is desired</p></li></ul></div><p></p><div><p><b>
Education</b></p></div><div><ul><li><p>
Bachelor&rsquo;s degree in computer science, Information Systems, or equivalent education or work experience</p></li></ul></div></div><p></p><p><b><br>
Annual Salary</b></p>
$105,000.00 - $215,000.00<p>
The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include, but are not limited to, the scope and responsibilities of the role, the selected candidate&rsquo;s work experience, education and training, the work location as well as market and business considerations.</p><br>
<p></p>
GEICO will consider sponsoring a new qualified applicant for employment authorization for this position.<p></p><p><b><br>
The GEICO Pledge:</b></p><p></p><p><b>
Great Company:</b> At GEICO, we help our customers through life&rsquo;s twists and turns. Our mission is to protect people when they need it most and we&rsquo;re constantly evolving to stay ahead of their needs.</p><p>
We&rsquo;re an iconic brand that thrives on innovation, exceeding our customers&rsquo; expectations and enabling our collective success. From day one, you&rsquo;ll take on exciting challenges that help you grow and collaborate with dynamic teams who want to make a positive impact on people&rsquo;s lives.</p><p></p><p><b>
Great Careers:</b> We offer a career where you can learn, grow, and thrive through personalized development programs, created with your career &ndash; and your potential &ndash; in mind. You&rsquo;ll have access to industry leading training, certification assistance, career mentorship and coaching with supportive leaders at all levels.</p><p></p><p><b>
Great Culture:</b> We foster an inclusive culture of shared success, rooted in integrity, a bias for action and a winning mindset. Grounded by our core values, we have an an established culture of caring, inclusion, and belonging, that values different perspectives. Our teams are led by dynamic, multi-faceted teams led by supportive leaders, driven by performance excellence and unified under a shared purpose.</p><p>
As part of our culture, we also offer employee engagement and recognition programs that reward the positive impact our work makes on the lives of our customers.</p><p></p><p><b>
Great Rewards:</b> We offer compensation and benefits built to enhance your physical well-being, mental and emotional health and financial future.</p><ul><li>
Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family&rsquo;s overall well-being.</li><li>
Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.</li><li>
Access to additional benefits like mental healthcare as well as fertility and adoption assistance.</li><li>
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.</li></ul><p></p><p>
The equal employment opportunity policy of the GEICO Companies provides for a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religious creed, national origin, ancestry, age, gender, pregnancy, sexual orientation, gender identity, marital status, familial status, disability or genetic information, in compliance with applicable federal, state and local law. GEICO hires and promotes individuals solely on the basis of their qualifications for the job to be filled.</p><p></p><p>
GEICO reasonably accommodates qualified individuals with disabilities to enable them to receive equal employment opportunity and/or perform the essential functions of the job, unless the accommodation would impose an undue hardship to the Company. This applies to all applicants and associates. GEICO also provides a work environment in which each associate is able to be productive and work to the best of their ability. We do not condone or tolerate an atmosphere of intimidation or harassment. We expect and require the cooperation of all associates in maintaining an atmosphere free from discrimination and harassment with mutual respect by and for all associates and applicants.</p></div>

Senior Engineer, Identity and Access Management

Search 10000+ Identity governance engineer jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 identity governance engineer jobs Near Me

Lead Identity System Engineer

Identity Security Engineer (Okta & Identity Governance) - Bangkok Based, Relocation provided

Senior Engineer, Identity and Access Management

Senior Engineer, Identity and Access Management

Senior Engineer, Identity and Access Management

Identity Security Engineer (Okta & Identity Governance) - Bangkok Based, Relocation provided

Identity Security Engineer (Okta & Identity Governance) - Bangkok Based, Relocation provided