Senior Platform Engineer

**Responsibilities:**

• Own the Microsoft Entra ID identity platform, including Conditional Access, authentication methods, MFA, and application and workload identity governance.
• Engineer privileged access for least privilege, with just-in-time elevation, scoped administrative roles, and emergency access.
• Automate the identity lifecycle end to end, and make single sign-on and automated provisioning a repeatable standard for application onboarding.

**Technical Leadership:**

• Establish cloud governance across accounts and subscriptions, including landing zone design, network architecture, RBAC, secrets management, centralized logging, and cost visibility.
• Define cloud and platform configuration as code, with peer review and deployment pipelines.
• Lead tenant, domain, and directory consolidation as new entities join, and retire inherited legacy environments.

**Culture and Collaboration:**

• Partner with Security and Compliance to engineer controls that produce their own audit evidence, and plan rollouts and remediation to fail safe under change control appropriate to a clinical environment.
• Author enforceable standards, runbooks, and architecture decision records, and provide technical guidance and mentorship to IT engineers across the US, India, and our affiliated medical groups.