Description

Key Responsibilities

• Design and implement enterprise Identity and Access Management (IAM) architecture.
• Lead IAM strategy, roadmap, and governance initiatives across hybrid cloud and on-premises environments.
• Architect and deploy SailPoint IdentityIQ, Active Directory, and Microsoft Entra ID solutions.
• Design and automate identity lifecycle management, provisioning, deprovisioning, access reviews, and certification processes.
• Implement and optimize Role-Based Access Control (RBAC) and Segregation of Duties (SoD).
• Design and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), Federation, PAM, OAuth, OIDC, SAML, and SCIM integrations.
• Develop security architecture, implementation plans, technical standards, and governance documentation.
• Evaluate and recommend IAM technologies, security controls, and vendor solutions.
• Collaborate with security, infrastructure, application, cloud, and business teams to deliver secure identity solutions.
• Support Azure IaaS security, Microsoft Purview, Conditional Access, Data Protection, Data Classification, and Encryption initiatives.
• Perform security assessments and ensure compliance with NIST, HIPAA, HITECH, and enterprise security policies.
• Troubleshoot complex IAM issues and provide technical leadership throughout the project lifecycle.

Required Qualifications

• 10+ years of experience designing and implementing enterprise Identity & Access Management solutions.
• Hands-on experience with SailPoint IdentityIQ (Required).
• Strong experience with Microsoft Active Directory and Microsoft Entra ID (Azure AD).
• Experience implementing enterprise IAM solutions in hybrid cloud and on-premises environments.
• Strong knowledge of:
  • Identity Governance & Administration (IGA)
  • Role-Based Access Control (RBAC)
  • Segregation of Duties (SoD)
  • Identity Lifecycle Management
  • Access Certification
• Hands-on experience implementing:
  • SSO
  • MFA
  • Federation
  • OAuth
  • OpenID Connect (OIDC)
  • SAML
  • SCIM
  • Privileged Access Management (PAM)
• Experience securing Microsoft Azure environments including Conditional Access, Microsoft Purview, Data Protection, and Azure Security.
• Strong knowledge of enterprise security architecture and cloud security.
• Experience creating technical architecture documents, implementation plans, and security standards.
• Excellent communication and stakeholder management skills.

Preferred Qualifications

• CISSP Certification (or ability to obtain within 12–24 months).
• Microsoft Azure Security certifications.
• SailPoint IdentityIQ Certification (Preferred).
• Experience with:
  • Microsoft Purview
  • Azure IaaS Security
  • Encryption
  • Data Loss Prevention (DLP)
  • Data Classification
• Healthcare or highly regulated industry experience.
• Knowledge of:
  • NIST Cybersecurity Framework (CSF)
  • HIPAA
  • HITECH
• Experience with scripting, automation, and enterprise security integrations.

Must-Have Skills

• SailPoint IdentityIQ
• Microsoft Entra ID (Azure AD)
• Active Directory
• Identity Governance & Administration (IGA)
• IAM Architecture
• RBAC & Segregation of Duties (SoD)
• SSO, MFA, Federation
• OAuth, OIDC, SAML, SCIM
• PAM (Privileged Access Management)
• Azure Security & Microsoft Purview
• Identity Lifecycle Management
• Enterprise Security Architecture
• NIST, HIPAA, HITECH
• Cloud Security (Hybrid Environments)
• CISSP (Preferred)

Key Skills

Education

Bachelor's degree