IAM Engineer

Overview Since our founding in 1924, we've cut cardiovascular disease deaths in half, but there is still so much more to do. To overcome today’s biggest health challenges and accelerate this progress, we need passionate individuals like you. Join our movement, be part of the progress, and help ensure a healthier future for all. You matter, and so does the impact you can make with us. We are seeking a skilled and motivated IAM Engineer to join our Business Technology team. In this role, you will be responsible for engineering, operating, and continuously improving enterprise identity and access management services across cloud and on-premises environments. You will support identity lifecycle management, authentication, authorization, access governance, directory services, federation, and privileged access capabilities. The ideal candidate is a detail-oriented engineer with hands-on experience in Microsoft Entra ID, Active Directory, identity governance, automation, and modern authentication. You will collaborate with Cybersecurity, Human Resources, application owners, infrastructure teams, and business stakeholders to deliver secure, reliable, and user-friendly identity solutions aligned with organizational policy, audit requirements, and business objectives. The Association offers many resources to help you maintain work-life harmonization through your changing needs and life situations. To help you be successful, you will have access to Heart U, our award-winning corporate university, as well as additional training and support, locally. #TheAHALife is more than a company culture; it is our way of life. It embodies our commitment to work-life harmonization and is guided by our core values where our employees can thrive both personally and professionally. Discover why you will Be Seen. Be Heard. Be Valued at the American Heart Association by following us on LinkedIn, Instagram, Facebook, X, and at heart.jobs. Responsibilities Identity Engineering and Lifecycle Management   Design, implement, and maintain identity lifecycle processes for employees, contractors, partners, and service identities  Engineer automated joiner, mover, and leaver workflows using authoritative identity sources and policy-based provisioning  Configure and support Microsoft Entra ID, Active Directory, hybrid identity synchronization, and directory-integrated applications  Develop and maintain role-based access control, group-based access, entitlement structures, and access packages  Create automation using PowerShell, Microsoft Graph, APIs, and workflow tools to improve accuracy, consistency, and speed  Authentication, Federation, and Access Controls   Implement and support single sign-on, multifactor authentication, passwordless authentication, Conditional Access, and risk-based access controls  Configure and troubleshoot SAML, OAuth 2.0, OpenID Connect, SCIM, and related identity protocols  Integrate enterprise applications with identity providers and establish secure authentication and provisioning patterns  Support privileged identity and access management controls, including just-in-time access and administrative role governance  Identity Governance, Compliance, and Security   Implement access reviews, separation-of-duties controls, certification campaigns, and governance reporting Partner with Cybersecurity, Internal Audit, Legal, and application owners to address identity risks and control requirements  Monitor identity-related events, investigate anomalous access, and support security incident response activities  Maintain evidence, documentation, and control records that support audits and compliance assessments  Operations, Support, and Continuous Improvement  Monitor IAM service health, provisioning performance, synchronization, authentication, and integration failures  Troubleshoot complex access issues and perform root-cause analysis across directories, applications, and identity platforms  Participate in incident response, change management, problem management, and an on-call rotation as required  Maintain technical designs, operational procedures, support documentation, and troubleshooting guides  • Evaluate emerging identity capabilities and recommend improvements that strengthen security and user experience  Qualifications Bachelor’s degree or equivalent experience 3 years of relevant experience  3+ years of experience in identity and access management, directory services, cybersecurity engineering, or a related technical role  Hands-on experience with Microsoft Entra ID and Active Directory in enterprise environments  Experience with identity lifecycle management, automated provisioning and deprovisioning, access governance, and role-based access control  Knowledge of modern authentication and federation standards, including SAML, OAuth 2.0, OpenID Connect, and SCIM  Experience configuring multifactor authentication, Conditional Access, single sign-on, and privileged access controls  Experience with PowerShell, Microsoft Graph, REST APIs, or comparable scripting and integration technologies  Understanding of least privilege, zero trust, separation of duties, and identity-related security controls  Preferred Qualifications Experience integrating IAM platforms with human resources systems and enterprise applications  Experience with Microsoft Entra ID Governance, Privileged Identity Management, entitlement management, and access reviews  Knowledge of privileged access management platforms and service account governance  Experience with identity monitoring, logging, reporting, and security incident investigation  Familiarity with IT service management, change control, audit evidence, and compliance frameworks    Identity and security certifications such as:  Microsoft Certified: Identity and Access Administrator Associate (SC-300)  Microsoft Certified: Cybersecurity Architect Expert (SC-100)  Certified Info