Note: The job is a remote job and is open to candidates in USA. HealthEquity is a healthcare-focused company committed to empowering healthcare consumers. The Senior IAM Security Engineer will design and improve identity and access management, cybersecurity, cloud identity, governance, automation, and AI-enabled capabilities across enterprise platforms. The role also supports IAM security audits, compliance, integrations, lifecycle processes, and data-driven operational improvements.
Responsibilities
- Lead the design, implementation, and ongoing improvement of robust IAM solutions using SailPoint Identity Security Cloud, Microsoft Entra, Silverfort, and related IAM technologies
- Maintain IAM strategies and roadmaps to ensure alignment with organizational goals, security requirements, regulatory expectations, and industry best practices
- Function as a subject matter expert for IAM technologies, identity lifecycle processes, access governance, authentication controls, and enterprise IAM integrations
- Clearly articulate IAM initiatives, technical recommendations, risks, and implementation considerations to stakeholders and decision makers at leadership levels
- Identify opportunities to responsibly apply AI-assisted automation, analytics, and summaries to improve IAM operations, governance visibility, and decision support without replacing required engineer review or formal approval processes
- Configure, administer, and support IAM platforms including SailPoint Identity Security Cloud, Microsoft Entra, Silverfort, and related identity services
- Partner closely with the IAM Governance team to implement IAM policies, standards, procedures, controls, and workflows using enterprise IAM tools and processes
- Ensure seamless integration of IAM systems with enterprise applications, cloud services, access request workflows, provisioning processes, and authentication services
- Drive timely execution of IAM initiatives in alignment with strategic and tactical plans
- Develop and support automation that improves access request support, lifecycle event processing, provisioning issue triage, certification support, source/application onboarding, and IAM operational reporting
- Use scripting, APIs, platform reporting, logs, configuration exports, and identity datasets to identify issues, improve IAM processes, and recommend enhancements
- Utilize secure Generative AI technologies and AI-assisted tools in enterprise IAM environments to support identity administration, access governance, authentication analysis, authorization review, and operational efficiency
- Design, build, and deploy AI solutions that enhance IAM administration, governance, provisioning, authentication, and access management capabilities
- Develop or configure retrieval-augmented tools, intelligent summaries, or AI-assisted workflows that help answer IAM queries, summarize observations, identify access patterns, and recommend potential remediation actions for engineer review
- Refine prompts, retrieval strategies, and supporting data structures to improve the quality and precision of AI-assisted IAM insights, including identification of non-standard access, configuration issues, access model gaps, and governance opportunities
- Support AI-assisted use cases for SailPoint Identity Security Cloud, including access request insights, entitlement cleanup, role and access model analysis, certification support, source/application onboarding, and governance configuration review
- Support AI-assisted workflows for Microsoft Entra and related cloud identity services, including enterprise application review, SSO/SCIM validation, conditional access analysis, authentication method insights, MFA/passkey review, app registration analysis, and cloud identity hygiene
- Apply appropriate judgment regarding AI model security, prompt engineering risks, data handling, review requirements, and mitigation techniques when using AI tools in IAM environments
- Collaborate with the AI COE and AI Engineering team for best practices, technology, and AI support needs
- Monitor IAM systems for security vulnerabilities, configuration issues, anomalous access patterns, and compliance with relevant regulations and internal standards
- Conduct regular IAM security audits, access reviews, assessments, and control validation activities, and implement corrective actions as needed
- Collaborate with compliance teams, internal audit, enterprise risk management, security, and IAM Governance to ensure IAM processes meet regulatory requirements and internal control expectations
- Partner with functional owners, business stakeholders, and technical teams to develop reporting, KPIs, KRIs, and data-driven insights related to access governance, access hygiene, provisioning, authentication, and identity lifecycle processes
Skills
- * Bachelor's degree, or the equivalent years related experience required
- * 10+ years of experience in Information Security, specifically in IAM
- * Experience leveraging automation, analytics, AI-assisted capabilities, or emerging technologies within cybersecurity, IAM, or cloud environments
- * Experience using scripting, APIs, reporting tools, and automation technologies to improve operational efficiency and effectiveness
- * Familiarity with secure implementation and governance of AI-enabled solutions in enterprise environments
- * Ability to evaluate emerging technologies and apply them appropriately to business and security challenges
- * Proficiency in Python, SQL, Azure, OpenAI and Anthropic (Claude) frameworks, Langchain, and retrieval-augmented generation patterns
- * Experience with AI development lifecycle (e.g. Claude.code) using skills, commands, and sub-agents
- * Knowledge of Model Context Protocol, Agent-to-Agent Protocol, and AI agent design patterns
- * Strong understanding of IAM concepts, including lifecycle management, access requests, certifications, and entitlement management
- * Experience with or working knowledge of SailPoint ISC, including identity profiles, sources, applications, access profiles, roles, dimensions, lifecycle states, certifications, workflows, and governance reporting
- * Working knowledge of Microsoft Entra identity services, including enterprise applications, SSO, SCIM provisioning, conditional access, authentication methods, MFA, passkeys, app registrations, service principals, and cloud identity governance
- * Experience with cloud identity engineering tasks in Azure or Microsoft Entra environments, including configuration review, automation, policy analysis, and integration support
- * Experience with secrets management concepts and platforms such as HashiCorp Vault, including secrets lifecycle, access policies, vault paths, ownership, rotation, privileged access, and secure application integration patterns
- * Ability to work with APIs, logs, configuration exports, identity datasets, access models, and platform reporting data to identify issues and recommend improvements
- * Ability to partner with IAM engineering, cloud engineering, application owners, audit, compliance, security operations, infrastructure, and business stakeholders to translate identity and access challenges into actionable solutions
- * Excellent problem-solving skills and judgment, including the ability to distinguish AI-assisted recommendations from engineer-reviewed actions and changes requiring formal governance, change management, or audit validation
- This is a remote position
- Relevant certifications such as CISSP, CISM, or IAM-related certifications are highly desirable
- Relevant certifications such as CISSP, CISM, or IAM-related certifications are highly desirable
Benefits
- Performance-based incentives as part of the total compensation package
- Medical, dental, and vision
- HSA contribution and match
- Dependent care FSA match
- Uncapped paid time off
- Paid parental leave
- 401(k) match
- Personal and healthcare financial literacy programs
- Ongoing education & tuition assistance
- Gym and fitness reimbursement
- Wellness program incentives
- HealthEquity covers all required travel and accommodations for the onsite Trailhead onboarding session
- Remote position
Company Overview
Company H1B Sponsorship