IT Manager, Identity and Access Management

UMC Health System•Richmond, KY

1d•Onsite

About The Position

The IAM Manager will lead a team responsible for managing identity lifecycle processes, access provisioning, and governance across the organization. This role oversees the daily operations and long-term strategy of IAM tools and processes, with a primary focus on SailPoint Identity, Active Directory, Azure AD, and a broad portfolio of integrated healthcare and business applications. The ideal candidate will possess a deep understanding of IAM technologies, regulatory requirements such as HIPAA, and a passion for enabling secure, efficient access to systems and data.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, or related field
+ 5 years of experience with Identity and Access Management
+3 years in a leadership role, leading people and processes
Relevant certifications (e.g., CISSP, CISM, CIAM, SailPoint Engineer/Architect certification).
Experience integrating IAM with electronic health record (EHR) systems (e.g., Epic, Cerner).
Experience with automation, scripting (PowerShell, Python), and API-based provisioning.
Hands-on experience with SailPoint (IdentityNow preferred), Active Directory, and Azure AD.
Strong knowledge of identity lifecycle management, RBAC, MFA, SSO, and directory services.
Familiarity with IAM-related protocols and standards (e.g., SAML, OAuth, SCIM, LDAP).
Strong understanding of HIPAA and healthcare-specific regulatory requirements.
Excellent communication and interpersonal skills, with the ability to work effectively across technical and business teams.

Responsibilities

Lead, mentor, and develop the IAM team; set goals and manage performance.
Define and execute the IAM roadmap, aligning with organizational security, compliance, and business objectives.
Foster a culture of continuous improvement, collaboration, and service excellence.
Manage the daily operations of IAM tools, primarily SailPoint, AD, and Azure AD.
Oversee identity lifecycle processes: onboarding, offboarding, role changes, and access reviews.
Support integration and automation of IAM processes across clinical and non-clinical applications.
Maintain role-based access control (RBAC), least privilege, and segregation of duties (SoD) policies.
Ensure IAM processes comply with HIPAA, HITRUST, SOX, and other applicable standards and regulations.
Lead periodic access certifications and audits; coordinate with compliance, legal, and internal audit teams.
Develop and maintain IAM policies, standards, and procedures.
Partner with application owners, HR, IT operations, cybersecurity, and business units to align IAM services with operational needs.
Act as the escalation point for IAM-related issues and incident resolution.
Provide regular reporting on IAM metrics, risk posture, and improvement initiatives to leadership.
Stay current with IAM industry trends, emerging technologies, and best practices.
Recommend and lead initiatives to enhance security, scalability, and user experience.
Support the evaluation and implementation of new IAM technologies or integrations.