Azure Identity Access Management Engineer III

Job Summary

The Azure Identity Access Management (IAM) Engineer III is responsible for leading the design, implementation, and managing secure identity and access solutions within the Microsoft Azure ecosystem. This position plays a critical part in enforcing least privilege access, protecting sensitive data, and ensuring compliance with regulatory frameworks such as Health Insurance Portability and Accountability Act (HIPAA), National Institute of Standards and Technology (NIST), and International Organization for Standardization (ISO) 27001. This position ensures a secure, scalable, and compliant access to cloud resources while driving automation and innovation in IAM practices.

The Engineer will support Azure Active Directory, Azure B2C, and related identity services that underpin the organization’s digital platforms, including the new Salesforce-based Member and Provider portals.

Acts as a Subject Matter Expert (SME), serves as a resource and mentor for other staff.

Duties

Design, implement and maintain a secure IAM solutions using Azure, including Azure AD and Azure B2C.

Configure and maintain authentication and authorization technologies.

Develop and enforce security policies and procedures for least privilege, conditional access, and identity governance.

Develop, evaluate, and integrate IAM solutions with enterprise applications, including Salesforce, Microsoft 365, and third-party platforms.

Monitor IAM systems for performance, troubleshoot issues, and conduct regular audits to ensure compliance with regulations and internal policies. Respond to identity-related security incidents and anomalies.

Collaborate with cross-functional teams to integrate and ensure IAM solutions meet regulatory requirements.

Support the secure onboarding of users and applications to Azure B2C for external member and provider access.

Automate identity lifecycle management using scripting and orchestration tools.

Provide subject matter expertise on IAM technologies and best practices and stay current with industry trends. Maintain documentation and contribute to IAM governance frameworks and best practices.

Create technical documentation, process guidelines, and system architecture diagrams.

Participate in audits and assessments related to identity and access controls.

Apply subject matter expertise in evaluating business operations and processes. Identify areas where technical solutions would improve business performance. Consult across business operations, provide mentorship, and contribute specialized knowledge. Ensure that the facts and details are correct so that the program's deliverable meets the needs of the department, organization and legislation's policies, standards, and best practices. Provide training and recommend process improvements as needed.

Perform other duties as assigned.

Duties Continued

Education Required

Education Preferred

Experience

Required:

At least 5 years of experience in identity and access management, with a focus on Azure.

Experience with Azure AD, Azure B2C, and conditional access policies

Experience with scripting and automation.

Preferred:

Experience in the healthcare payer industry.

Experience integrating IAM with Salesforce and other SaaS platforms.

Experience with identity governance tools (e.g., SailPoint, Saviynt)

Skills

Required:

Strong understanding and working knowledge of security and regulatory compliance frameworks (HIPAA, NIST, ISO 27001)

Strong understanding of identity federation, SSO, OAuth, OpenID Connect, and SAML

Proficiency in scripting (PowerShell, Python).

Excellent analytical and critical thinking skills.

Effective communication skills including verbal, written and presentation; speaks clearly and persuasively in positive or negative situations.

Strong time management and organizational skills.

Ability to work independently and provide leadership within a team environment.

Ability to produce deliverables and tasks on time.

Ability to collaborate with strong teamwork skills and work well independently with limited supervision.

Preferred:

Familiarity with DevSecOps and cloud-native security practices.

Familiarity with identity governance tools.

Knowledge of project lifecycle management.

Licenses/Certifications Required

Licenses/Certifications Preferred

Required Training

Preferred:

Azure-specific IAM and security training

Physical Requirements

Additional Information

This position is critical to enabling secure, compliant, and user-friendly access to digital healthcare services for members and providers.