Sr IAM Security Engineer

HealthEquity is dedicated to saving and improving lives by empowering healthcare consumers. The Sr IAM Security Engineer will design next-generation detection, prevention, automation, and governance capabilities for identity and access management, focusing on improving access governance and operational effectiveness.

Responsibilities:

• Lead the design, implementation, and ongoing improvement of robust IAM solutions using SailPoint Identity Security Cloud, Microsoft Entra, Silverfort, and related IAM technologies
• Maintain IAM strategies and roadmaps to ensure alignment with organizational goals, security requirements, regulatory expectations, and industry best practices
• Function as a subject matter expert for IAM technologies, identity lifecycle processes, access governance, authentication controls, and enterprise IAM integrations
• Clearly articulate IAM initiatives, technical recommendations, risks, and implementation considerations to stakeholders and decision makers at leadership levels
• Identify opportunities to responsibly apply AI-assisted automation, analytics, and summaries to improve IAM operations, governance visibility, and decision support without replacing required engineer review or formal approval processes
• Configure, administer, and support IAM platforms including SailPoint Identity Security Cloud, Microsoft Entra, Silverfort, and related identity services
• Partner closely with the IAM Governance team to implement IAM policies, standards, procedures, controls, and workflows using enterprise IAM tools and processes
• Ensure seamless integration of IAM systems with enterprise applications, cloud services, access request workflows, provisioning processes, and authentication services
• Drive timely execution of IAM initiatives in alignment with strategic and tactical plans
• Develop and support automation that improves access request support, lifecycle event processing, provisioning issue triage, certification support, source/application onboarding, and IAM operational reporting
• Use scripting, APIs, platform reporting, logs, configuration exports, and identity datasets to identify issues, improve IAM processes, and recommend enhancements
• Utilize secure Generative AI technologies and AI-assisted tools in enterprise IAM environments to support identity administration, access governance, authentication analysis, authorization review, and operational efficiency
• Design, build, and deploy AI solutions that enhance IAM administration, governance, provisioning, authentication, and access management capabilities
• Develop or configure retrieval-augmented tools, intelligent summaries, or AI-assisted workflows that help answer IAM queries, summarize observations, identify access patterns, and recommend potential remediation actions for engineer review
• Refine prompts, retrieval strategies, and supporting data structures to improve the quality and precision of AI-assisted IAM insights, including identification of non-standard access, configuration issues, access model gaps, and governance opportunities
• Support AI-assisted use cases for SailPoint Identity Security Cloud, including access request insights, entitlement cleanup, role and access model analysis, certification support, source/application onboarding, and governance configuration review
• Support AI-assisted workflows for Microsoft Entra and related cloud identity services, including enterprise application review, SSO/SCIM validation, conditional access analysis, authentication method insights, MFA/passkey review, app registration analysis, and cloud identity hygiene
• Apply appropriate judgment regarding AI model security, prompt engineering risks, data handling, review requirements, and mitigation techniques when using AI tools in IAM environments
• Monitor IAM systems for security vulnerabilities, configuration issues, anomalous access patterns, and compliance with relevant regulations and internal standards
• Conduct regular IAM security audits, access reviews, assessments, and control validation activities, and implement corrective actions as needed
• Collaborate with compliance teams, internal audit, enterprise risk management, security, and IAM Governance to ensure IAM processes meet regulatory requirements and internal control expectations
• Partner with functional owners, business stakeholders, and technical teams to develop reporting, KPIs, KRIs, and data-driven insights related to access governance, access hygiene, provisioning, authentication, and identity lifecycle processes

Requirements:

• Bachelor's degree, or the equivalent years related experience required
• 10+ years of experience in Information Security, specifically in IAM
• Experience leveraging automation, analytics, AI-assisted capabilities, or emerging technologies within cybersecurity, IAM, or cloud environments
• Experience using scripting, APIs, reporting tools, and automation technologies to improve operational efficiency and effectiveness
• Familiarity with secure implementation and governance of AI-enabled solutions in enterprise environments
• Ability to evaluate emerging technologies and apply them appropriately to business and security challenges
• Proficiency in Python, SQL, Azure, OpenAI and Anthropic (Claude) frameworks, Langchain, and retrieval-augmented generation patterns
• Experience with AI development lifecycle (e.g. Claude.code) using skills, commands, and sub-agents
• Knowledge of Model Context Protocol, Agent-to-Agent Protocol, and AI agent design patterns
• Strong understanding of IAM concepts, including lifecycle management, access requests, certifications, and entitlement management
• Experience with or working knowledge of SailPoint ISC, including identity profiles, sources, applications, access profiles, roles, dimensions, lifecycle states, certifications, workflows, and governance reporting
• Working knowledge of Microsoft Entra identity services, including enterprise applications, SSO, SCIM provisioning, conditional access, authentication methods, MFA, passkeys, app registrations, service principals, and cloud identity governance
• Experience with cloud identity engineering tasks in Azure or Microsoft Entra environments, including configuration review, automation, policy analysis, and integration support
• Experience with secrets management concepts and platforms such as HashiCorp Vault, including secrets lifecycle, access policies, vault paths, ownership, rotation, privileged access, and secure application integration patterns
• Ability to work with APIs, logs, configuration exports, identity datasets, access models, and platform reporting data to identify issues and recommend improvements
• Ability to partner with IAM engineering, cloud engineering, application owners, audit, compliance, security operations, infrastructure, and business stakeholders to translate identity and access challenges into actionable solutions
• Excellent problem-solving skills and judgment, including the ability to distinguish AI-assisted recommendations from engineer-reviewed actions and changes requiring formal governance, change management, or audit validation
• Relevant certifications such as CISSP, CISM, or IAM-related certifications are highly desirable