Summary: As a Cybersecurity Identity Automation Engineer, you will be
responsible for exhibiting a forward-thinking vision and executing on tasks in
support of this discipline area in the Cybersecurity program at Envision. As a
core member of the Cyber GRC department, the Cybersecurity Identity Automation
Engineer will serve as a subject matter expert and the primary implementor
related to identity automation efforts. This role will actively partner with IT
leadership and peers to implement improvements to the Identity automation
process that help achieve business objectives. The right candidate for this role
must have strong communication skills, with the ability to coordinate among
varying teams and departments to implement standard processes and procedures in
support of identity automation operational efficiencies.
Company Overview: Envision is a leading national medical group focused on
delivering high-quality care to patients when and where they need it most.
You’ll find clinicians and clinical support professionals across the nation who
are proud to call Envision home. We welcome teammates of every background and
work in communities that reflect the racial, ethnic, gender, sexual orientation,
and economic diversity of our country.
Benefits: At Envision, we offer benefits at the speed of your life. Our wide
range of health and welfare benefits allow you to choose the right ones for you
and your family. Best of all, qualifying employees are eligible to enroll from
day one, so you can rest easy knowing you and your loved ones are
protected. Envision offers a variety of health and welfare benefit options to
help protect your health and promote your wellbeing. The benefits offered
include but not limited to: Medical, Dental, Vision, Life, Disability,
Healthcare FSA, Dependent Care FSA, Limited Healthcare FSA, FSAs for
Transportation and Parking & HSAs.
Paid Time Off: Envision offers paid time off, 9 observed holidays and paid
family leave. You accrue Paid Time Off (PTO) each pay period and depending on
your position and can earn a minimum of 20 days and up to 25 days per calendar
year.
RESPONSIBILITIES
Works with the Principal Architect of Identity Governance, the Director of
Cyber GRC, and the VP of Cybersecurity to define, document and present an
execution plan to automate Identity and Access Management (IAM) and
Privileged Access Management (PAM) workflows across the enterprise using
existing platforms and dedicated cybersecurity tools.
Identifies, designs and implements automated entitlement provisioning and JML
(Joiner-Mover-Leaver) workflows in Okta, Service Now, Veza, Active Directory,
Redhat IAM, and Entra AD.
Designs automation for privileged account onboarding/offboarding in Idira
(formerly CyberArk).
With guidance from the Principal Architect of Identity Governance, works to
define core RBAC models that support automation efforts.
Educates IT leaders, peers, and application owners on industry best practices
and cybersecurity standards regarding identity automation, identifies
roadblocks that inhibit success, and work across the organization to educate
on improvement efforts to mitigate existing functionality gaps with
identities and access provisioning.
Articulates a forward-thinking vision for identity automation and develops a
supporting roadmap to implement new processes and functions.
Aligns with NIST CSF frameworks and other regulatory requirements related to
identity automation discipline.
Ensures capabilities and focus of identity automation align with the business
objectives.
Participates in security audits and compliance initiatives related to systems
access.
Supports other security initiatives and tools as needed.
QUALIFICATIONS
Okta, Auth0, Service Now, Veza, Idira, AWS IAM, Active Directory (AD), Entra AD,
Redhat IAM, RBAC, ABAC, Python programming or other scripting languages (for
automation/scripting functions)
Expert knowledge of audit methodologies and standard deliverables.
Deep expertise in IAM/PAM solutions and identity lifecycle management.
Familiarity with modern identity and access constructs, controls, and
configurations
Strong working experience with a senior level understanding of network
security, NIST CSF, and Zero Trust architecture
Ability to work independently and collaboratively in a fast-paced
environment.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.
Bachelor’s degree in computer science, Cybersecurity, Information Assurance,
or related field.
4+ years’ experience in cybersecurity as a practitioner and at least 6+ years
of working experience in identity related roles.
Working experience with Okta and Service Now.
Working experience with Identity Governance and Administration platforms like
SailPoint, Savyint, Veza, etc. – Veza experience a plus
Experience with regulatory standards such as HIPAA, PCI-DSS, NIST.
Healthcare Cybersecurity experience a plus
Working experience with Okta, Active Directory, and other identity sources
and platforms.
Ability to diagram and document using common tools (Visio, Lucid chart,
Smartsheet, Word/PowerPoint)
Working experience with scripting or automation tools (e.g., PowerShell,
Python)
CompTIA Sec+, GSEC, or similar required.
Okta Professional / Administrator / Architect/ Developer certification(s),
Service Now/Veza certification are preferred.
CISSP or CISM are a plus.
Annual Compensation- $102,000-$130,000 per year
Please note, this position is remote and the pay range presented is a full range
in the role specific to 100% national labor mkt avg. Salary bands across the
enterprise may differ due to cost of living adjustments and are specific to an
employee’s address and state and can vary for higher labor mkts.
If you are ready to join an exciting, progressive company and have a strong work
ethic, join our team of experts! We offer a highly competitive salary and a
comprehensive benefits package.
Envision uses E-Verify to confirm the employment eligibility of all newly hired
employees. To learn more about E-Verify, including your rights and
responsibilities, please visit www.dhs.gov/E-Verify
[https://urldefense.com/v3/__http:/www.dhs.gov/E-Verify__;!!OrxsNty6D4my!4ViUrURSMVkUyX7by4uKBAZ2HSPzNnUD6YEwBb__0fEvLReJSSE9wqBYHVNkZZ3tEhJ1piuxNoYZCcTUkGSIoRlPTEAke-d5bxyx6ZM$].
Envision is an Equal Opportunity Employer.