Principal IAM Engineer

Responsibilities:

• Own the identity lifecycle: joiner, mover, leaver provisioning and deprovisioning, automated from role- and attribute-based models (RBAC/ABAC).
• Own access management, including Conditional Access, phishing-resistant MFA, and privileged access on a Zero Trust model, with least-privilege by default and just-in-time elevation.
• Own directory and federation across Entra ID, single sign-on, SAML, OIDC, and OAuth2.

Key Deliverables:

• Conditional Access enforced by default on PHI-facing applications, with enforcement verified.
• Automated joiner, mover, leaver provisioning and deprovisioning that meets its SLA every time.
• A secrets golden path with vaulted secrets, none in code, and a populated key-to-owner registry.

Requirements:

• Eight or more years in identity and access management, including principal- or staff-level ownership of an identity control plane.
• Deep Microsoft Entra ID engineering, including Conditional Access, phishing-resistant MFA, and federation.
• Identity lifecycle automation across cloud, SaaS, and privileged systems with RBAC/ABAC.

Benefits:

• Medical, Dental, and Vision Insurance.
• Short & Long Term Disability and Life Insurance.
• 401k with company match, Flexible Time Off, and Paid Parental Leave.