OKTA- IAM Engineer

Envision is a medical group seeking an IAM Engineer to implement, maintain, and optimize enterprise identity and access management solutions. The role administers and integrates identity provider and privileged access management platforms, automates identity processes, and supports secure access to clinical systems, applications, and infrastructure in a healthcare environment.

Responsibilities:

• Configures, maintains, and troubleshoots Okta Identity Cloud and CyberArk PAM solutions
• Configure and support single sign-on (SSO), multi-factor authentication (MFA), passwordless authentication, authentication policies, access controls, device assurance, and identity security controls
• Configure, maintain, and troubleshoot integrations using SAML, OAuth, OIDC, SCIM, APIs, and other modern identity standards
• Investigate and resolve authentication, federation, provisioning, application access, and directory synchronization issues
• Proactively identify, recommend, and support practical improvements to identity services, security controls, platform adoption, operational efficiency, supportability, and user experience
• Develop and maintain automation scripts and workflows for identity lifecycle management (e.g., provisioning, deprovisioning, access reviews)
• Integrate IAM solutions with enterprise applications and directories (e.g., Active Directory)
• Collaborate with cross-functional teams (HR, IT, Compliance) to streamline access processes and enforce least privilege
• Monitor and respond to IAM-related incidents, alerts, and audit findings
• Participate in the design and implementation of IAM policies, standards, and controls aligned with HIPAA, HITECH, and NIST frameworks
• Support the development of self-service capabilities and user-friendly access request workflows
• Maintain documentation for IAM configurations, procedures, and technical standards
• Stay current with emerging IAM technologies, security threats, and best practices

Requirements:

• 3+ years of hands-on experience in IAM engineering or similar IT roles
• Proficiency with Okta (SSO, MFA, Lifecycle Management) and CyberArk (PAM, PSM, CPM)
• Strong scripting skills (e.g., PowerShell, Python, or similar) for automation and integration
• Experience with identity governance, RBAC, and directory services (Active Directory, Entra ID, Okta)
• Familiarity with healthcare IT systems and regulatory requirements (HIPAA, HITECH)
• Strong analytical, troubleshooting, and communication skills
• Bachelor's degree in Information Security, Computer Science, or related field
• Relevant certifications preferred (e.g., Okta Certified Professional, CyberArk Defender, CISSP, or similar)