Sr IAM Security Engineer

HealthEquity•Remote,

23h•$115,000 - $149,500•Remote

About The Position

Join our team as an Sr IAM Engineer and help design next-generation detection, prevention, automation, and governance capabilities for identity and access management, cybersecurity, and cloud identity operations. This role will drive innovation by building GenAI-enabled tools and AI agents that identify access patterns, detect anomalous activity, summarize complex issues, and recommend remediation before risk impacts the organization. You will help advance IAM automation across core platforms including SailPoint Identity Security Cloud, Microsoft Entra, cloud identity services, and secrets management. The role will focus on improving access governance, application onboarding, identity lifecycle processes, access request support, secrets lifecycle visibility, and cloud identity hygiene through intelligent automation and data-driven insights. This position provides an opportunity to collaborate with IAM engineering, cloud engineering, security, audit, compliance, application owners, and business stakeholders to mature identity and access processes while reducing manual effort and improving operational effectiveness.

Requirements

Bachelor’s degree, or the equivalent years related experience required.
10+ years of experience in Information Security, specifically in IAM.
Experience leveraging automation, analytics, AI-assisted capabilities, or emerging technologies within cybersecurity, IAM, or cloud environments.
Experience using scripting, APIs, reporting tools, and automation technologies to improve operational efficiency and effectiveness.
Familiarity with secure implementation and governance of AI-enabled solutions in enterprise environments.
Ability to evaluate emerging technologies and apply them appropriately to business and security challenges.
Proficiency in Python, SQL, Azure, OpenAI and Anthropic (Claude) frameworks, Langchain, and retrieval-augmented generation patterns.
Experience with AI development lifecycle (e.g. Claude.code) using skills, commands, and sub-agents
Knowledge of Model Context Protocol, Agent-to-Agent Protocol, and AI agent design patterns.
Strong understanding of IAM concepts, including lifecycle management, access requests, certifications, and entitlement management.
Experience with or working knowledge of SailPoint ISC, including identity profiles, sources, applications, access profiles, roles, dimensions, lifecycle states, certifications, workflows, and governance reporting.
Working knowledge of Microsoft Entra identity services, including enterprise applications, SSO, SCIM provisioning, conditional access, authentication methods, MFA, passkeys, app registrations, service principals, and cloud identity governance.
Experience with cloud identity engineering tasks in Azure or Microsoft Entra environments, including configuration review, automation, policy analysis, and integration support.
Experience with secrets management concepts and platforms such as HashiCorp Vault, including secrets lifecycle, access policies, vault paths, ownership, rotation, privileged access, and secure application integration patterns.
Ability to work with APIs, logs, configuration exports, identity datasets, access models, and platform reporting data to identify issues and recommend improvements.
Ability to partner with IAM engineering, cloud engineering, application owners, audit, compliance, security operations, infrastructure, and business stakeholders to translate identity and access challenges into actionable solutions.
Excellent problem-solving skills and judgment, including the ability to distinguish AI-assisted recommendations from engineer-reviewed actions and changes requiring formal governance, change management, or audit validation.

Nice To Haves

Relevant certifications such as CISSP, CISM, or IAM-related certifications are highly desirable

Responsibilities

Lead the design, implementation, and ongoing improvement of robust IAM solutions using SailPoint Identity Security Cloud, Microsoft Entra, Silverfort, and related IAM technologies.
Maintain IAM strategies and roadmaps to ensure alignment with organizational goals, security requirements, regulatory expectations, and industry best practices.
Function as a subject matter expert for IAM technologies, identity lifecycle processes, access governance, authentication controls, and enterprise IAM integrations.
Clearly articulate IAM initiatives, technical recommendations, risks, and implementation considerations to stakeholders and decision makers at leadership levels.
Identify opportunities to responsibly apply AI-assisted automation, analytics, and summaries to improve IAM operations, governance visibility, and decision support without replacing required engineer review or formal approval processes.
Configure, administer, and support IAM platforms including SailPoint Identity Security Cloud, Microsoft Entra, Silverfort, and related identity services.
Partner closely with the IAM Governance team to implement IAM policies, standards, procedures, controls, and workflows using enterprise IAM tools and processes.
Ensure seamless integration of IAM systems with enterprise applications, cloud services, access request workflows, provisioning processes, and authentication services.
Drive timely execution of IAM initiatives in alignment with strategic and tactical plans.
Develop and support automation that improves access request support, lifecycle event processing, provisioning issue triage, certification support, source/application onboarding, and IAM operational reporting.
Use scripting, APIs, platform reporting, logs, configuration exports, and identity datasets to identify issues, improve IAM processes, and recommend enhancements.
Utilize secure Generative AI technologies and AI-assisted tools in enterprise IAM environments to support identity administration, access governance, authentication analysis, authorization review, and operational efficiency.
Design, build, and deploy AI solutions that enhance IAM administration, governance, provisioning, authentication, and access management capabilities.
Develop or configure retrieval-augmented tools, intelligent summaries, or AI-assisted workflows that help answer IAM queries, summarize observations, identify access patterns, and recommend potential remediation actions for engineer review.
Refine prompts, retrieval strategies, and supporting data structures to improve the quality and precision of AI-assisted IAM insights, including identification of non-standard access, configuration issues, access model gaps, and governance opportunities.
Support AI-assisted use cases for SailPoint Identity Security Cloud, including access request insights, entitlement cleanup, role and access model analysis, certification support, source/application onboarding, and governance configuration review.
Support AI-assisted workflows for Microsoft Entra and related cloud identity services, including enterprise application review, SSO/SCIM validation, conditional access analysis, authentication method insights, MFA/passkey review, app registration analysis, and cloud identity hygiene.
Apply appropriate judgment regarding AI model security, prompt engineering risks, data handling, review requirements, and mitigation techniques when using AI tools in IAM environments.
Collaborate with the AI COE and AI Engineering team for best practices, technology, and AI support needs.
Monitor IAM systems for security vulnerabilities, configuration issues, anomalous access patterns, and compliance with relevant regulations and internal standards.
Conduct regular IAM security audits, access reviews, assessments, and control validation activities, and implement corrective actions as needed.
Collaborate with compliance teams, internal audit, enterprise risk management, security, and IAM Governance to ensure IAM processes meet regulatory requirements and internal control expectations.
Partner with functional owners, business stakeholders, and technical teams to develop reporting, KPIs, KRIs, and data-driven insights related to access governance, access hygiene, provisioning, authentication, and identity lifecycle processes.