Cybersecurity Engineer - Identity Automation [Veza/ sailpoint]
About The Position
As a Cybersecurity Identity Automation Engineer at Envision, you will serve as a subject matter expert and primary implementer for identity automation within the Cyber GRC department. You will partner with IT leadership and peers to improve identity automation processes and support business objectives, coordinating across teams to implement standard processes and procedures that improve operational efficiency. The role focuses on automating Identity and Access Management (IAM) and Privileged Access Management (PAM) workflows across the enterprise using existing platforms and cybersecurity tools. You will develop an execution plan and roadmap, implement entitlement provisioning and joiner-mover-leaver workflows, design privileged account onboarding and offboarding automation, support role-based access control models, and promote alignment with cybersecurity standards, regulatory requirements, and business objectives. The position also participates in access-related audits and compliance initiatives and supports other security initiatives as needed. This is a remote position. The annual compensation range is $102,000–$130,000, with salary bands potentially varying by employee location and labor market. Envision offers health and welfare benefits, paid time off, observed holidays, and paid family leave.
Requirements
- Bachelor’s degree in computer science, cybersecurity, information assurance, or a related field.
- At least 4 years of cybersecurity practitioner experience and at least 6 years of experience in identity-related roles.
- Deep expertise in IAM/PAM solutions and identity lifecycle management.
- Expert knowledge of audit methodologies and standard deliverables.
- Familiarity with modern identity and access constructs, controls, and configurations.
- Strong working experience and senior-level understanding of network security, NIST CSF, and Zero Trust architecture.
- Working experience with Okta and ServiceNow.
- Working experience with Okta, Active Directory, and other identity sources and platforms.
- Working experience with scripting or automation tools such as PowerShell or Python.
- Knowledge of Okta, Auth0, ServiceNow, Veza, Idira, AWS IAM, Active Directory, Entra AD, Red Hat IAM, RBAC, and ABAC.
- Ability to work independently and collaboratively in a fast-paced environment.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to diagram and document using common tools such as Visio, Lucidchart, Smartsheet, Word, or PowerPoint.
- CompTIA Security+, GSEC, or a similar certification is required.
- Experience with regulatory standards such as HIPAA, PCI-DSS, and NIST.
Nice To Haves
- Working experience with Identity Governance and Administration platforms such as SailPoint, Saviynt, or Veza; Veza experience is a plus.
- Healthcare cybersecurity experience.
- Okta Professional, Administrator, Architect, or Developer certification(s).
- ServiceNow or Veza certification.
- CISSP or CISM certification.
Responsibilities
- Work with the Principal Architect of Identity Governance, Director of Cyber GRC, and VP of Cybersecurity to define, document, and present an execution plan for automating enterprise IAM and PAM workflows.
- Identify, design, and implement automated entitlement provisioning and joiner-mover-leaver workflows in Okta, ServiceNow, Veza, Active Directory, Red Hat IAM, and Entra AD.
- Design automation for privileged account onboarding and offboarding in Idira (formerly CyberArk).
- Work with guidance from the Principal Architect of Identity Governance to define core RBAC models that support automation efforts.
- Educate IT leaders, peers, and application owners on identity automation best practices and cybersecurity standards; identify roadblocks and coordinate improvements to address identity and access provisioning functionality gaps.
- Develop a forward-looking vision and supporting roadmap for new identity automation processes and functions.
- Align identity automation with NIST CSF frameworks and other applicable regulatory requirements.
- Ensure identity automation capabilities and priorities align with business objectives.
- Participate in security audits and compliance initiatives related to systems access.
- Support other security initiatives and tools as needed.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Disability benefits
- Healthcare FSA
- Dependent Care FSA
- Limited Healthcare FSA
- Transportation and parking FSAs
- Health Savings Account (HSA)
- Paid time off: minimum of 20 and up to 25 days per calendar year, accrued each pay period depending on position
- 9 observed holidays
- Paid family leave
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
