IAM Security Engineer III

Security Engineer III - Identity And Access Management

Location: Illinois / Indiana / Wisconsin | Hybrid (Primarily Remote, Occasional Onsite)

Work Schedule: Remote 90% with some light travel on-site for meetings and go-live, and 1 week rotations of 24/7 support every 8 weeks or so.

Compensation & Schedule

• $46.64–$72.29/hour (up to ~$150K annually equivalent)
• Monday–Friday, 8:00 AM–4:30 PM
• Full-time, W2
• Rotational on-call: 1 week every 8 weeks

Benefits

• 401(k) with company match
• Medical, dental, vision coverage options
• Tuition reimbursement
• Paid time off
• Health savings account (HSA) options

Role Impact

Serve as the senior IAM engineering lead within a growing security program, owning design, implementation, and optimization of identity governance and access controls. Drive maturity of IAM practices across clinical and enterprise systems while ensuring compliance with healthcare security frameworks. Mentor junior team members and lead cross-functional IAM initiatives.

Key Responsibilities

• IAM platform engineering ownership for configuration, integration, and lifecycle management
• Access control architecture using RBAC and ABAC models for automated provisioning
• Privileged access management implementation for admin and clinical systems
• Identity lifecycle automation using APIs, scripts, and workflow orchestration
• Compliance alignment with HIPAA, HITRUST, NIST, and PCI DSS frameworks

Minimum Qualifications

• 8+ years IAM or Identity Governance & Administration (IGA) experience
• Bachelor's degree in technical discipline or equivalent experience
• Saviynt or SailPoint implementation and administration experience
• Advanced cybersecurity certification (e.g., CISSP, CISM, or equivalent)

Core Tech Environment

• Authentication: LDAP, OAuth 2.0, OpenID Connect, SAML 2.0
• IAM Platforms: Saviynt, SailPoint IdentityIQ, SailPoint IdentityNow
• PAM Tools: CyberArk, Delinea, Microsoft Entra PIM
• Directory Services: Active Directory, ADUC, Azure AD (Microsoft Entra ID)
• Cloud & Integrations: REST APIs, SCIM, JSON, PowerShell, Python
• Security Frameworks: HIPAA, HITRUST, NIST CSF, PCI DSS

Preferred Skills

• Access certification campaign design and execution
• Healthcare system integration (e.g., Epic EHR environments)
• Exposure to AI-driven IAM automation or analytics