Sr IAM Security Engineer

HealthEquity•Remote,

2d•$115,000 - $149,500•Remote

About The Position

HealthEquity is seeking an experienced Senior IAM Engineer to join its Security & IT team. This role designs, implements, and manages identity, access, and privileged access management systems for human, non-employee, service, and AI agent identities. The engineer will help shape identity security practices for AI agents, non-human identities, and machine-to-machine access, and serve as a subject matter expert on IAM technologies and processes. The role manages SailPoint Identity Security Cloud (ISC), including Non-Employee Risk Management (NERM), BeyondTrust, Microsoft Entra, and Silverfort. It includes designing risk-based Conditional Access policies, integrating IAM systems with applications, services, secrets-management platforms, and CI/CD pipelines, and implementing governance for AI agents and service accounts. The engineer also establishes least-privilege, auditable access frameworks for autonomous workflows and evaluates AI-assisted IAM capabilities. The position supports IAM project delivery, coordinates with IT, HR, Security, and business teams, troubleshoots IAM issues, automates tasks using APIs and PowerShell, and maintains process and configuration documentation. It is remote, with required in-person onboarding training at HealthEquity headquarters once per quarter; HealthEquity covers required travel and accommodations. Compensation is $115,000–$149,500 per year, with eligibility for performance-based incentives and benefits.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
At least 5 years of experience in IAM, including at least 3 years in a senior or principal engineer role.
Extensive hands-on experience with SailPoint Identity Security Cloud (ISC).
Strong understanding of Privileged Access Management and hands-on experience with BeyondTrust.
Proficiency with Microsoft Entra (formerly Azure AD), including Conditional Access policy design and administration.
Zero Trust expertise with technologies such as Silverfort.
Working knowledge of secrets-management and vaulting platforms for credentials, keys, and tokens used by applications, service accounts, and automations.
Familiarity with identity considerations for AI agents and non-human identities, including authentication patterns, scoped authorization, credential lifecycle, and monitoring automated access.
Proficiency in scripting and automation, such as REST APIs and PowerShell.
Excellent analytical, problem-solving, and decision-making skills.
Strong communication and interpersonal skills, including the ability to work effectively with and influence stakeholders at all levels.

Nice To Haves

Experience with SailPoint Non-Employee Risk Management (NERM).
Relevant certifications such as CISSP, CISM, or IAM-related certifications.

Responsibilities

Implement IAM and PAM solutions using SailPoint Identity Security Cloud, BeyondTrust, Microsoft Entra, Silverfort, and other IAM tools.
Help develop and maintain IAM strategies, including governance for AI agents, non-human identities, and machine-to-machine access.
Serve as a subject matter expert on IAM technologies and processes, including agentic AI identity, authorization, and lifecycle management.
Explain strategic initiatives, gain stakeholder buy-in, and establish shared understanding with leadership decision makers.
Configure and administer SailPoint ISC, including NERM, BeyondTrust, Microsoft Entra, and Silverfort.
Design and manage Microsoft Entra Conditional Access policies for risk-based, adaptive access controls across users, devices, and workloads.
Partner with the IAM Governance team to implement IAM policies, standards, and procedures using IAM and PAM tools and processes.
Integrate IAM systems with applications, services, secrets-management and vaulting platforms, and CI/CD pipelines.
Implement governance models for AI agents and service accounts, including credential issuance, scoped permissions, rotation, and decommissioning.
Drive timely execution of IAM and PAM initiatives in alignment with strategic and tactical plans.
Establish identity and access frameworks for AI agents and autonomous workflows that provide least-privilege access, auditability, and policy enforcement comparable to human identity controls.
Evaluate and integrate secrets-management solutions for credentials, API keys, and tokens used by AI agents, automations, and service-to-service connections.
Assess and pilot AI-assisted IAM capabilities to improve access certification accuracy, anomaly detection, and operational efficiency.
Support IAM projects from initiation through completion, ensuring timely delivery and alignment with project goals.
Coordinate with IT, HR, Security, and business teams to gather requirements and support successful project outcomes.
Manage project timelines and resources.
Provide advanced troubleshooting and support for IAM issues, including scripting and automation through APIs and PowerShell.
Develop and maintain documentation for IAM processes, configurations, and troubleshooting procedures.
Stay current with industry trends and emerging technologies, particularly AI, agentic systems, and non-human identity security.