Identity & Access Management Engineer

Pay Range: $83,200.00 - $124,800.00  Please email  [email protected]  if you are a candidate seeking a reasonable accommodation for the application and/or interview process. At BCBSRI, our greatest resource is our people.  We come from varying backgrounds, different cultures, and unique experiences. We are hard-working, caring, and creative individuals who collaborate, support one another, and grow together. Passion, empathy, and understanding are at the forefront of everything we do—not just for our members, but for our employees as well. We recognize that to do your best work, you have to be your best self.  It’s why we offer flexible work arrangements that include remote and hybrid opportunities and paid time off. We provide tuition reimbursement and assist with student-loan repayment. We offer health, dental, and vision insurance as well as programs that support your mental health and well-being. We pay competitively, offer bonuses and investment plans, and are committed to growing and developing our employees. Our culture is one of belonging. We strive to be transparent and accountable. We believe in equipping our associates with the knowledge and resources they need to be successful. No matter where you’re at in the organization, you’re an integral part of our team and your input, thoughts, and ideas are valued. Join others who value a workplace for all. We appreciate and celebrate everything that makes us unique, from personal characteristics to past experiences. Our different perspectives strengthen us as an organization and help us better serve all Rhode Islanders.  We’re dedicated to serving Rhode Islanders. Our focus extends beyond providing access to high-quality, affordable, and equitable care. To further improve the health and well-being of our fellow Rhode Islanders, we regularly roll up our sleeves and get to work (literally) in communities all across the state—building homes, working in food pantries, revitalizing community centers, and transforming outdoor spaces for children and adults. Because we believe it is our collective responsibility to uplift our fellow Rhode Islanders when and where we can, our associates receive additional paid time to volunteer.   Why this job matters: Supports and administers enterprise identity platforms across Microsoft Entra ID, Azure, Okta, Active Directory, and Google Cloud Platform (GCP) environments. Works under the guidance of senior engineers and IT leadership to design, implement, secure, automate, and maintain identity services that enable secure access to enterprise applications, cloud resources, and business data. Assists with identity lifecycle management, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Privileged Access Management (PAM), cloud access governance, federation services, and identity security initiatives. Contributes to the organization's Zero Trust strategy, cloud transformation efforts, automation initiatives, and regulatory compliance requirements supporting protected and sensitive data. What you will do: Administer and support Microsoft Entra ID, Active Directory, and Okta environments, including user lifecycle management, group administration, authentication services, directory synchronization, and access governance. Design, implement, and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Passwordless Authentication, and Identity Protection capabilities across cloud and on-premises applications. Manage Privileged Identity Management (PIM), Role-Based Access Control (RBAC), administrative role assignments, service accounts, and privileged access operations across Microsoft Azure, Entra ID, Okta, and GCP environments. Configure and maintain application integrations utilizing SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, Kerberos, and federation technologies to enable secure authentication and provisioning. Support Google Cloud Platform (GCP) identity services, including Cloud Identity, IAM roles, service accounts, workload identity federation, and secure access to GCP resources and services. Contribute to automation and workflow optimization using PowerShell, Microsoft Graph API, Terraform, Python, Okta Workflows, Azure Automation, and Infrastructure-as-Code practices to improve operational efficiency and governance. Investigate and resolve complex identity, authentication, provisioning, authorization, and access-related incidents escalated from Service Desk, Infrastructure, Security Operations, and application support teams. Participate in Identity Governance, compliance, audit readiness, security assessments, Proof-of-Concept initiatives, and continuous improvement efforts while supporting organizational requirements related to HIPAA, SOC2, NIST, and Zero Trust security frameworks. Perform other duties as assigned. What you need to succeed: Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related field is preferred but not required; equivalent hands-on experience may fully substitute for formal education.3–5 years of direct experience in Identity and Access Management (IAM), Cloud Identity, Directory Services, Access Management, or Security Engineering within enterprise environments. Strong knowledge of identity and access management technologies including Microsoft Entra ID (Azure AD), Active Directory Domain Services, Microsoft Entra Connect/Cloud Sync, Azure RBAC, Okta Workforce Identity Cloud, Google Cloud IAM, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and Privileged Identity Management (PIM). Demonstrated hands-on expertise with enterprise authentication, federation, and identity integration technologies including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, and LDAP. Strong understanding of Identity and Access Management (IAM) concepts and best practices. Expertise in authentication