Identity and Access Management Engineer

HRUCKUS is recruiting an Identity and Access Management Engineer for a nationally recognized pediatric healthcare organization. The role implements, maintains, and enhances enterprise identity governance, privileged access management, and cybersecurity solutions, including application integrations supporting clinical and research operations.

Responsibilities:

• Implement, maintain, and support enterprise identity and access management solutions, including Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Role-Based Access Control (RBAC)
• Manage and respond to user provisioning and access requests, collaborating with IT teams and business stakeholders to ensure appropriate access to technology resources
• Troubleshoot and resolve identity governance, authentication, and access-related issues while following established escalation and resolution procedures
• Provide technical support to IT teams, clinical staff, operational departments, research computing teams, and end-user services
• Evaluate existing IAM architecture, processes, and configurations, recommending improvements to strengthen security, efficiency, and overall performance
• Design and implement customized IAM solutions and integrations to meet evolving organizational and business requirements
• Collaborate with cross-functional teams to support enterprise application integrations and identity lifecycle management

Requirements:

• 3 years of hands-on experience with CyberArk or comparable Privileged Access Management (PAM) solutions
• Experience integrating enterprise applications using modern APIs and identity management protocols, including REST APIs, SCIM, OAuth 2.0, OpenID Connect (OIDC), and related authentication and provisioning technologies
• Strong understanding of identity governance, access provisioning, and enterprise security principles
• Demonstrated ability to troubleshoot complex IAM-related issues and work collaboratively across technical teams
• CyberArk certifications, including one or more of the following: CyberArk Engineering and Deployment, CyberArk Certified Delivery Engineer, or CyberArk Core Administration
• Workday Pro Integrations (Core) Certification or comparable hands-on experience
• Experience implementing or administering SailPoint or a similar Identity Governance and Administration (IGA) platform
• Experience using AI-assisted development tools such as OpenAI Codex or Claude Code to develop customized technical solutions