Identity & Access Management Engineer

GoHealth Urgent Care•Rochester, MN

About The Position

The Identity and Access Management (IAM) Engineer is responsible for efficiently onboarding and offboarding employees, ensuring they have the appropriate access to the systems needed for their roles. This position is crucial for implementing and supporting the company’s modern IAM architecture, infrastructure, capabilities, and standards. The IAM Engineer will leverage strong technical skills to analyze IAM data, identify trends or errors, and develop new IAM processes as required. They will ensure that identity and access systems are integrated to facilitate consistent setup and onboarding of new employees in the Company’s applications and systems. Collaboration with various IT roles, hiring managers, and organizational leaders is essential to ensure timely and secure onboarding and offboarding of employees.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field is preferred. Equivalent professional experience may be considered in lieu of a degree.
5+ years of experience with Identity/Access Management within a healthcare organization required
Skilled in installing, configuring, and troubleshooting Identity Management platforms, especially Okta
Familiar with identity solutions such as Okta and Azure Active Directory
Proficient in Okta Workflows and authentication protocols (e.g., SAML 2.0, OIDC)
Working knowledge of SQL databases (Microsoft SQL, Oracle)
Capable of scripting with PowerShell, Python, or using stored procedures
Understanding of Microsoft Active Directory, including Group Policy Management
Hands-on experience managing Microsoft Exchange/Outlook and Teams in a corporate setting
Advanced knowledge and comfortable working within Microsoft 365 and Entra ID environments
Knowledge of Identity Governance practices, including PIM/PAM and access audits
Strong analytical and problem-solving abilities
Effective communicator and collaborator across technical and non-technical teams
Hands-on experience with Access Profiles, Roles, Policies, and Certifications.
Strong experience with Separation of Duties (SoD) and HIPAA / PCI and PII compliance enforcement.
Experience configuring SaaS-based Identity Governance (IG) solutions.
Experience with most common identity access and governance (IGA) and SailPoint connectors including Active Directory (AD), EntraID, JDBC, Exchange, web service, EPIC, Imprivata, and authoritative sources integration (such as Workday).
Experience implementing access request, entitlements reviews, approval workflows, and certification campaigns.

Nice To Haves

Experience provisioning users within an EMR systems such as Epic and/or eClinicalWorks preferred
Relevant industry certifications (e.g. CISSP, Identity IQ Engineer/Associate, CIAM) or other relevant industry certifications are preferred. If not currently held, a willingness to pursue certification is expected.

Responsibilities

Identity and Access Management and Identity Governance Functions
Stay up to date with the latest security standards, secure protocols, authentication & authorization protocols, and best practices around IAM industry patterns, including vendor release notes for Azure Entra ID, Okta, SailPoint, Saviynt, CyberArk, Beyond Trust
Develop and architect solutions using two or more leading IAM Solution providers such as Azure Entra ID, Okta, SailPoint, Saviynt, CyberArk, Beyond Trust.
Develop, build, and maintain automated user access requests, entitlement reviews, approval workflows, and certification campaigns
Develop, build, and maintain Joiner-Mover-Leaver (JML) workflows
Implement and configure Okta features such as SSO, MFA, Lifecycle Management, Workflows, and Authorization.
Provide ongoing support for Okta IAM solutions and troubleshoot issues as they arise.
Develop and maintain custom integrations with third-party applications using Okta APIs and SDKs.
Collaborate with cross functional teams, including business stakeholders, developers, and architects, to gather business requirements and develop technical solutions and meet business needs.
Develop workflows and process to enforce Separation of Duties (SoD) and compliance with HIPAA, PCI-DSS, and PII privacy protections.
Develop and maintain custom integrations with third-party applications using Okta APIs and SDKs.
Stay up to date with industry trends and best practices related to Okta, IAM and IGA.
Implement and configure Okta features such as SSO, MFA, Lifecycle Management, Workflows, and Authorization.
Conduct testing and validation of Okta IAM solutions to ensure they meet the required standards and requirements.
Experience implementing access request, entitlements reviews, approval workflows, and certification campaigns.
Develop and maintain documentation on, including technical specifications, design documents, standard operating procedures, guides for the IT helpdesk and internal user manuals.