IAM Engineer

Ensemble Health PartnersWork at Home - Georgia - Other, GA
$84,000 - $144,900Remote

About The Position

The IAM Engineer – Client Implementation & Automation is responsible for supporting secure, scalable, and audit-ready identity and access management capabilities across Ensemble’s client and enterprise environments. This role helps ensure Day-1 access readiness by translating client requirements into access models, workflows, role-based access mappings, automation opportunities, testing plans, and operational support practices. This position works within Ensemble’s IAM operating model, supporting an identity-first, automation-first, and RBAC-first approach to client onboarding, lifecycle management, access governance, and continuous improvement. The ideal candidate is a hands-on IAM professional with strong technical troubleshooting skills, process discipline, documentation quality, and the ability to partner effectively across IAM, ServiceNow, HR/Workday, Operations, PMO, application owners, and client stakeholders.

Requirements

  • Three or more years of experience in Identity and Access Management, cybersecurity, access provisioning, security operations, or a related technology function.
  • Experience supporting identity lifecycle management, including joiner, mover, leaver, rehire, transfer, and access change processes.
  • Experience working with workflow platforms, access request processes, system integrations, or process automation.
  • Knowledge of RBAC, least privilege, and access governance.
  • Experience with APIs, scripting, or automation.
  • Understanding of SSO, MFA, SAML, OAuth, and LDAP.
  • Strong troubleshooting, documentation, communication, and stakeholder engagement skills.

Nice To Haves

  • Experience supporting client onboarding, implementations, or large-scale transformation initiatives.
  • Background in healthcare or regulated environments.
  • Familiarity with ITSM platforms, cloud identity solutions, and SaaS application environments.
  • Experience supporting audit, compliance, access reviews, or control validation activities.
  • Relevant certifications such as Security+, ITIL, CISSP, or CISM.

Responsibilities

  • Support IAM delivery across all onboarding phases, including discovery, design, build, UAT, go-live, and stabilization.
  • Translate client requirements into access models, workflows, and RBAC mappings.
  • Coordinate readiness activities across key milestones, including T-30, T-10, T-0, and T+10.
  • Maintain clear and complete documentation, including requirements, workflows, UAT results, and runbooks.
  • Design and support access request workflows through ServiceNow or other approved intake channels.
  • Ensure access requests capture the required data for provisioning, approvals, and audit evidence.
  • Manage identity lifecycle processes including Joiner, Mover, Leaver, rehire, and client changes.
  • Identify and resolve workflow, approval, and provisioning issues in a timely and effective manner.
  • Maintain RBAC models, entitlement mappings, and access profiles.
  • Ensure access is aligned with least-privilege principles and approved role definitions.
  • Support access reviews, certifications, and exception handling.
  • Document risks, exceptions, and compensating controls.
  • Develop automation that reduces manual provisioning effort and improves operational scalability.
  • Support integrations across IAM, ServiceNow, HR/Workday, and applications.
  • Leverage APIs, scripting, and workflows for lifecycle automation.
  • Identify, document, and track automation opportunities and technical debt.
  • Maintain complete and traceable audit evidence for access-related activities.
  • Support SLA tracking, operational reporting, and leadership visibility.
  • Manage exceptions with clear ownership, documented rationale, and remediation plans.
  • Contribute to SOPs, runbooks, and workflow documentation.
  • Partner with IAM, ServiceNow, HR/Workday, Operations, PMO, and client teams.
  • Communicate status, risks, dependencies, and decisions clearly and professionally.
  • Support escalations and promote transparency throughout go-live and hypercare activities.
  • Translate technical IAM concepts into clear business impact and operational value.

Benefits

  • healthcare
  • time off
  • retirement
  • well-being programs
  • professional development
  • tuition reimbursement
  • quarterly and annual incentive programs
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service