OKTA- IAM Engineer

Envision Healthcare • Nashville, TN

5d • $73,000 - $90,000 • Remote

About The Position

The IAM Engineer implements, maintains, and optimizes enterprise identity and access management solutions, with an emphasis on automation, security, and compliance. The role focuses on technical administration and integration of identity provider and privileged access management platforms, supporting secure access to clinical systems, enterprise applications, and infrastructure in a healthcare environment.

The position configures and supports Okta Identity Cloud and CyberArk PAM solutions, authentication and access controls, identity integrations, and automated identity lifecycle workflows. It works with teams across HR, IT, and Compliance to improve access processes, enforce least privilege, respond to incidents and audit findings, and maintain IAM documentation and standards. The position is remote.

Requirements

• At least 3 years of hands-on experience in IAM engineering or similar IT roles.
• Proficiency with Okta, including SSO, MFA, and Lifecycle Management, and CyberArk, including PAM, PSM, and CPM.
• Strong scripting skills, such as PowerShell, Python, or similar, for automation and integration.
• Experience with identity governance, RBAC, and directory services, including Active Directory, Entra ID, and Okta.
• Familiarity with healthcare IT systems and regulatory requirements, including HIPAA and HITECH.
• Strong analytical, troubleshooting, and communication skills.
• Bachelor’s degree in Information Security, Computer Science, or a related field.

Nice To Haves

• Relevant certifications preferred, such as Okta Certified Professional, CyberArk Defender, CISSP, or similar.

Responsibilities

• Configure, maintain, and troubleshoot Okta Identity Cloud and CyberArk PAM solutions.
• Configure and support single sign-on (SSO), multi-factor authentication (MFA), passwordless authentication, authentication policies, access controls, device assurance, and identity security controls.
• Configure, maintain, and troubleshoot integrations using SAML, OAuth, OIDC, SCIM, APIs, and other modern identity standards.
• Investigate and resolve authentication, federation, provisioning, application access, and directory synchronization issues.
• Identify, recommend, and support practical improvements to identity services, security controls, platform adoption, operational efficiency, supportability, and user experience.
• Develop and maintain automation scripts and workflows for identity lifecycle management, including provisioning, deprovisioning, and access reviews.
• Integrate IAM solutions with enterprise applications and directories such as Active Directory.
• Collaborate with HR, IT, and Compliance teams to streamline access processes and enforce least privilege.
• Monitor and respond to IAM-related incidents, alerts, and audit findings.
• Participate in designing and implementing IAM policies, standards, and controls aligned with HIPAA, HITECH, and NIST frameworks.
• Support development of self-service capabilities and user-friendly access request workflows.
• Maintain documentation for IAM configurations, procedures, and technical standards.
• Stay current with emerging IAM technologies, security threats, and best practices.

Benefits

• Medical, dental, vision, life, and disability benefits.
• Healthcare FSA, Dependent Care FSA, Limited Healthcare FSA, transportation and parking FSAs, and HSAs.
• Paid time off, accruing each pay period, with a minimum of 20 and up to 25 days per calendar year depending on position.
• Nine observed holidays.
• Paid family leave.
• Qualifying employees are eligible to enroll in benefits from day one.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level