IAM Engineer

Ensemble Health Partners • Work at Home - Georgia - Other, GA

1d • $84,000 - $144,900 • Remote

About The Position

The IAM Engineer – Client Implementation & Automation is responsible for supporting secure, scalable, and audit-ready identity and access management capabilities across Ensemble’s client and enterprise environments. This role helps ensure Day-1 access readiness by translating client requirements into access models, workflows, role-based access mappings, automation opportunities, testing plans, and operational support practices.
This position works within Ensemble’s IAM operating model, supporting an identity-first, automation-first, and RBAC-first approach to client onboarding, lifecycle management, access governance, and continuous improvement. The ideal candidate is a hands-on IAM professional with strong technical troubleshooting skills, process discipline, documentation quality, and the ability to partner effectively across IAM, ServiceNow, HR/Workday, Operations, PMO, application owners, and client stakeholders.

Requirements

• Three or more years of experience in Identity and Access Management, cybersecurity, access provisioning, security operations, or a related technology function.
• Experience supporting identity lifecycle management, including joiner, mover, leaver, rehire, transfer, and access change processes.
• Experience working with workflow platforms, access request processes, system integrations, or process automation.
• Knowledge of RBAC, least privilege, and access governance.
• Experience with APIs, scripting, or automation.
• Understanding of SSO, MFA, SAML, OAuth, and LDAP.
• Strong troubleshooting, documentation, communication, and stakeholder engagement skills.
• Must be inquisitive and demonstrate openness to innovation including AI to explore better processes and ways to alleviate friction and improve patient and client experiences.
• Due to business, operational, payroll, and regulatory requirements, this position is limited to individuals who reside and are authorized to work within the United States. Applications generated from outside the United States will not be considered. Individuals may reapply when located within the United States.

Nice To Haves

• Experience supporting client onboarding, implementations, or large-scale transformation initiatives.
• Background in healthcare or regulated environments.
• Familiarity with ITSM platforms, cloud identity solutions, and SaaS application environments.
• Experience supporting audit, compliance, access reviews, or control validation activities.
• Relevant certifications such as Security+, ITIL, CISSP, or CISM.

Responsibilities

• Support IAM delivery across all onboarding phases, including discovery, design, build, UAT, go-live, and stabilization.
• Translate client requirements into access models, workflows, and RBAC mappings.
• Coordinate readiness activities across key milestones, including T-30, T-10, T-0, and T+10.
• Maintain clear and complete documentation, including requirements, workflows, UAT results, and runbooks.
• Design and support access request workflows through ServiceNow or other approved intake channels.
• Ensure access requests capture the required data for provisioning, approvals, and audit evidence.
• Manage identity lifecycle processes including Joiner, Mover, Leaver, rehire, and client changes.
• Identify and resolve workflow, approval, and provisioning issues in a timely and effective manner.
• Maintain RBAC models, entitlement mappings, and access profiles.
• Ensure access is aligned with least-privilege principles and approved role definitions.
• Support access reviews, certifications, and exception handling.
• Document risks, exceptions, and compensating controls.
• Develop automation that reduces manual provisioning effort and improves operational scalability.
• Support integrations across IAM, ServiceNow, HR/Workday, and applications.
• Leverage APIs, scripting, and workflows for lifecycle automation.
• Identify, document, and track automation opportunities and technical debt.
• Maintain complete and traceable audit evidence for access-related activities.
• Support SLA tracking, operational reporting, and leadership visibility.
• Manage exceptions with clear ownership, documented rationale, and remediation plans.
• Contribute to SOPs, runbooks, and workflow documentation.
• Partner with IAM, ServiceNow, HR/Workday, Operations, PMO, and client teams.
• Communicate status, risks, dependencies, and decisions clearly and professionally.
• Support escalations and promote transparency throughout go-live and hypercare activities.
• Translate technical IAM concepts into clear business impact and operational value.

Benefits

• Associate Benefits – We offer a comprehensive benefits package designed to support the physical, emotional, and financial health of you and your family, including healthcare, time off, retirement, and well-being programs.
• Our Culture – Ensemble is a place where associates can do their best work and be their best selves. We put people first, last and always. Our culture is rooted in collaboration, growth, and innovation.
• Growth – We invest in your professional development. Each associate will earn a professional certification relevant to their field and can obtain tuition reimbursement.
• Recognition – We offer quarterly and annual incentive programs for all employees who go beyond and keep raising the bar for themselves and the company.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed