POS1442 - Cybersecurity Engineer - Identity Automation [Veza/ sailpoint[

Summary: As a Cybersecurity Identity Automation Engineer, you will be responsible for exhibiting a forward-thinking vision and executing on tasks in support of this discipline area in the Cybersecurity program at envision. As a core member of the Cyber GRC department, the Cybersecurity Identity Automation Engineer will serve as a subject matter expert and the primary implementor related to identity automation efforts. This role will actively partner with IT leadership and peers to implement improvements to the Identity automation process that help achieve business objectives. The right candidate for this role must have strong communication skills, with the ability to coordinate among varying teams and departments to implement standard processes and procedures in support of identity automation operational efficiencies.

Company Overview: Envision is a leading national medical group focused on delivering high-quality care to patients when and where they need it most. You’ll find clinicians and clinical support professionals across the nation who are proud to call Envision home. We welcome teammates of every background and work in communities that reflect the racial, ethnic, gender, sexual orientation, and economic diversity of our country.

Benefits: At Envision, we offer benefits at the speed of your life. Our wide range of health and welfare benefits allow you to choose the right ones for you and your family. Best of all, qualifying employees are eligible to enroll from day one, so you can rest easy knowing you and your loved ones are protected. Envision offers a variety of health and welfare benefit options to help protect your health and promote your wellbeing. The benefits offered include but not limited to: Medical, Dental, Vision, Life, Disability, Healthcare FSA, Dependent Care FSA, Limited Healthcare FSA, FSAs for Transportation and Parking & HSAs.

Paid Time Off: Envision offers paid time off, 9 observed holidays and paid family leave. You accrue Paid Time Off (PTO) each pay period and depending on your position and can earn a minimum of 20 days and up to 25 days per calendar year.

Responsibilities

• Works with the Principal Architect of Identity Governance, the Director of Cyber GRC, and the VP of Cybersecurity to define, document and present an execution plan to automate Identity and Access Management (IAM) and Privileged Access Management (PAM) workflows across the enterprise using existing platforms and dedicated cybersecurity tools.
• Identifies, designs and implements automated entitlement provisioning and JML (Joiner-Mover-Leaver) workflows in Okta, Service Now, Veza, Active Directory, Redhat IAM, and Entra AD.
• Designs automation for privileged account onboarding/offboarding in Idira (formerly CyberArk).
• With guidance from the Principal Architect of Identity Governance, works to define core RBAC models that support automation efforts.
• Educates IT leaders, peers, and application owners on industry best practices and cybersecurity standards regarding identity automation, identifies roadblocks that inhibit success, and work across the organization to educate on improvement efforts to mitigate existing functionality gaps with identities and access provisioning.
• Articulates a forward-thinking vision for identity automation and develops a supporting roadmap to implement new processes and functions.
• Aligns with NIST CSF frameworks and other regulatory requirements related to identity automation discipline.
• Ensures capabilities and focus of identity automation align with the business objectives.
• Participates in security audits and compliance initiatives related to systems access.
• Supports other security initiatives and tools as needed.

Qualifications

Okta, Auth0, Service Now, Veza, Idira, AWS IAM, Active Directory (AD), Entra AD, Redhat IAM, RBAC, ABAC, Python programming or other scripting languages (for automation/scripting functions)

• Expert knowledge of audit methodologies and standard deliverables.
• Deep expertise in IAM/PAM solutions and identity lifecycle management.
• Familiarity with modern identity and access constructs, controls, and configurations
• Strong working experience with a senior level understanding of network security, NIST CSF, and Zero Trust architecture
• Ability to work independently and collaboratively in a fast-paced environment.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Bachelor’s degree in computer science, Cybersecurity, Information Assurance, or related field.
• 4+ years’ experience in cybersecurity as a practitioner and at least 6+ years of working experience in identity related roles.
• Working experience with Okta and Service Now.
• Working experience with Identity Governance and Administration platforms like SailPoint, Savyint, Veza, etc. – Veza experience a plus
• Experience with regulatory standards such as HIPAA, PCI-DSS, NIST.
• Healthcare Cybersecurity experience a plus
• To perform this job successfully, an individual should have knowledge of:
• Working experience with Okta, Active Directory, and other identity sources and platforms.
• Ability to diagram and document using common tools (Visio, Lucid chart, Smartsheet, Word/PowerPoint)
• Working experience with scripting or automation tools (e.g., PowerShell, Python)
• CompTIA Sec+, GSEC, or similar required.
• Okta Professional / Administrator / Architect/ Developer certification(s), Service Now/Veza certification are preferred.
• CISSP or CISM are a plus.

If you are ready to join an exciting, progressive company and have a strong work ethic, join our team of experts! We offer a highly competitive salary and a comprehensive benefits package.

Envision uses E-Verify to confirm the employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit .

Envision is an Equal Opportunity Employer.