POS1442 - Cybersecurity Engineer - Identity Automation [Veza/ sailpoint[

Envision Healthcare•Nashville, TN

About The Position

As a Cybersecurity Identity Automation Engineer, you will be responsible for exhibiting a forward-thinking vision and executing on tasks in support of this discipline area in the Cybersecurity program at envision. As a core member of the Cyber GRC department, the Cybersecurity Identity Automation Engineer will serve as a subject matter expert and the primary implementor related to identity automation efforts. This role will actively partner with IT leadership and peers to implement improvements to the Identity automation process that help achieve business objectives. The right candidate for this role must have strong communication skills, with the ability to coordinate among varying teams and departments to implement standard processes and procedures in support of identity automation operational efficiencies.

Requirements

Okta, Auth0, Service Now, Veza, Idira, AWS IAM, Active Directory (AD), Entra AD, Redhat IAM, RBAC, ABAC, Python programming or other scripting languages (for automation/scripting functions)
Expert knowledge of audit methodologies and standard deliverables.
Deep expertise in IAM/PAM solutions and identity lifecycle management.
Familiarity with modern identity and access constructs, controls, and configurations
Strong working experience with a senior level understanding of network security, NIST CSF, and Zero Trust architecture
Ability to work independently and collaboratively in a fast-paced environment.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.
Bachelor’s degree in computer science, Cybersecurity, Information Assurance, or related field.
4+ years’ experience in cybersecurity as a practitioner and at least 6+ years of working experience in identity related roles.
Working experience with Okta and Service Now.
Working experience with Identity Governance and Administration platforms like SailPoint, Savyint, Veza, etc. – Veza experience a plus
Experience with regulatory standards such as HIPAA, PCI-DSS, NIST.
Healthcare Cybersecurity experience a plus
Working experience with Okta, Active Directory, and other identity sources and platforms.
Ability to diagram and document using common tools (Visio, Lucid chart, Smartsheet, Word/PowerPoint)
Working experience with scripting or automation tools (e.g., PowerShell, Python)
CompTIA Sec+, GSEC, or similar required.

Nice To Haves

Veza experience a plus
Healthcare Cybersecurity experience a plus
Okta Professional / Administrator / Architect/ Developer certification(s), Service Now/Veza certification are preferred.
CISSP or CISM are a plus.

Responsibilities

Works with the Principal Architect of Identity Governance, the Director of Cyber GRC, and the VP of Cybersecurity to define, document and present an execution plan to automate Identity and Access Management (IAM) and Privileged Access Management (PAM) workflows across the enterprise using existing platforms and dedicated cybersecurity tools.
Identifies, designs and implements automated entitlement provisioning and JML (Joiner-Mover-Leaver) workflows in Okta, Service Now, Veza, Active Directory, Redhat IAM, and Entra AD.
Designs automation for privileged account onboarding/offboarding in Idira (formerly CyberArk).
With guidance from the Principal Architect of Identity Governance, works to define core RBAC models that support automation efforts.
Educates IT leaders, peers, and application owners on industry best practices and cybersecurity standards regarding identity automation, identifies roadblocks that inhibit success, and work across the organization to educate on improvement efforts to mitigate existing functionality gaps with identities and access provisioning.
Articulates a forward-thinking vision for identity automation and develops a supporting roadmap to implement new processes and functions.
Aligns with NIST CSF frameworks and other regulatory requirements related to identity automation discipline.
Ensures capabilities and focus of identity automation align with the business objectives.
Participates in security audits and compliance initiatives related to systems access.
Supports other security initiatives and tools as needed.