Cybersecurity Identity Automation Engineer

Envision Healthcare is seeking a Cybersecurity Identity Automation Engineer (onsite in the United States) to lead and implement identity automation initiatives within the Cyber GRC organization. The role partners with IT leadership and cross-functional peers to improve IAM and PAM automation in alignment with enterprise business goals and regulatory expectations.

Role Summary

As a subject matter expert and primary implementer for identity automation efforts, you will define and execute an approach to automate Identity and Access Management (IAM) and Privileged Access Management (PAM) workflows across the enterprise. You will also support the broader Cybersecurity program by aligning identity automation capabilities with the discipline’s operational and business objectives.

Key Responsibilities

• Collaborate with the Principal Architect of Identity Governance, the Director of Cyber GRC, and the VP of Cybersecurity to define, document, and present an execution plan for automating IAM and PAM workflows across the enterprise using existing platforms and dedicated cybersecurity tools.
• Identify, design, and implement automated entitlement provisioning and Joiner-Mover-Leaver (JML) workflows in Okta, Service Now, Veza, Active Directory, Redhat IAM, and Entra AD.
• Design automation for privileged account onboarding and offboarding in Idira (formerly CyberArk).
• With guidance from the Principal Architect of Identity Governance, help define core RBAC models that support automation objectives.
• Educate IT leaders, peers, and application owners on industry best practices and cybersecurity standards related to identity automation; identify blockers that inhibit success; coordinate across the organization to address gaps in identity and access provisioning.
• Articulate a forward-looking vision for identity automation and develop a roadmap to implement new processes and functions.
• Align identity automation work with NIST CSF and other regulatory requirements applicable to identity automation discipline.
• Ensure identity automation capabilities and focus support business objectives.
• Participate in security audits and compliance initiatives related to systems access.
• Support other security initiatives and tools as needed.

Required Qualifications

• Expert knowledge of audit methodologies and standard deliverables.
• Deep expertise in IAM/PAM solutions and identity lifecycle management.
• Familiarity with modern identity and access constructs, controls, and configurations.
• Strong working experience with a senior level understanding of network security, NIST CSF, and Zero Trust architecture.
• Ability to work independently and collaboratively in a fast-paced environment.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Bachelor’s degree in computer science, Cybersecurity, Information Assurance, or a related field.
• 4+ years of cybersecurity experience as a practitioner and at least 6+ years of working experience in identity-related roles.
• Working experience with Okta and Service Now.
• Working experience with Identity Governance and Administration platforms such as SailPoint, Savyint, and Veza (Veza experience is a plus).
• Experience with regulatory standards such as HIPAA, PCI-DSS, and NIST.
• Healthcare cybersecurity experience is a plus.
• Working experience with Okta, Active Directory, and other identity sources and platforms.
• Ability to diagram and document using common tools such as Visio, Lucid chart, Smartsheet, and Word/PowerPoint.
• Working experience with scripting or automation tools (for example, PowerShell and Python).
• CompTIA Sec+, GSEC, or similar required.
• Okta Professional/Administrator/Architect/Developer certification(s), and Service Now/Veza certification(s) are preferred.
• CISSP or CISM is a plus.

Technologies and Tools

• Okta, Auth0, Service Now, Veza, Idira, AWS IAM
• Active Directory (AD), Entra AD, Redhat IAM
• RBAC, ABAC, Python
• NIST CSF, Zero Trust architecture
• HIPAA, PCI-DSS
• CompTIA Sec+, GSEC
• SailPoint, Savyint
• PowerShell, Visio, Lucid chart, Smartsheet, Word, PowerPoint
• CyberArk

Benefits

• Medical, Dental, Vision
• Life and Disability
• Healthcare FSA, Dependent Care FSA, Limited Healthcare FSA
• FSAs for Transportation and Parking & HSAs
• Paid Time Off (PTO): minimum 20 days and up to 25 days per calendar year
• 9 observed holidays
• Paid family leave
• Qualifying employees eligible to enroll from day one

Company Overview

Envision is a leading national medical group focused on delivering high-quality care to patients when and where they need it most. The organization works with clinicians and clinical support professionals across the nation and welcomes teammates of every background who contribute to communities reflecting the racial, ethnic, gender, sexual orientation, and economic diversity of the country.