OKTA- IAM Engineer

Summary: The IAM Engineer is responsible for implementing, maintaining, and optimizing identity and access management solutions across the enterprise, with a strong emphasis on automation, security, and compliance. This role will focus on the technical administration and integration of our IDP and PAM platforms, supporting secure access to clinical systems, enterprise applications, and infrastructure in a healthcare environment.

Company Overview: Envision is a leading national medical group focused on delivering high-quality care to patients when and where they need it most. You’ll find clinicians and clinical support professionals across the nation who are proud to call Envision home. We welcome teammates of every background and work in communities that reflect the racial, ethnic, gender, sexual orientation, and economic diversity of our country.

Benefits: At Envision, we offer benefits at the speed of your life. Our wide range of health and welfare benefits allow you to choose the right ones for you and your family. Best of all, qualifying employees are eligible to enroll from day one, so you can rest easy knowing you and your loved ones are protected. Envision offers a variety of health and welfare benefit options to help protect your health and promote your wellbeing. The benefits offered include but not limited to: Medical, Dental, Vision, Life, Disability, Healthcare FSA, Dependent Care FSA, Limited Healthcare FSA, FSAs for Transportation and Parking & HSAs.

Paid Time Off: Envision offers paid time off, 9 observed holidays and paid family leave. You accrue Paid Time Off (PTO) each pay period and depending on your position and can earn a minimum of 20 days and up to 25 days per calendar year.

• Configures, maintains, and troubleshoots Okta Identity Cloud and CyberArk PAM solutions.
• Configure and support single sign-on (SSO), multi-factor authentication (MFA), passwordless authentication, authentication policies, access controls, device assurance, and identity security controls.
• Configure, maintain, and troubleshoot integrations using SAML, OAuth, OIDC, SCIM, APIs, and other modern identity standards.
• Investigate and resolve authentication, federation, provisioning, application access, and directory synchronization issues.
• Proactively identify, recommend, and support practical improvements to identity services, security controls, platform adoption, operational efficiency, supportability, and user experience.
• Develop and maintain automation scripts and workflows for identity lifecycle management (e.g., provisioning, deprovisioning, access reviews).
• Integrate IAM solutions with enterprise applications and directories (e.g., Active Directory).
• Collaborate with cross-functional teams (HR, IT, Compliance) to streamline access processes and enforce least privilege.
• Monitor and respond to IAM-related incidents, alerts, and audit findings.
• Participate in the design and implementation of IAM policies, standards, and controls aligned with HIPAA, HITECH, and NIST frameworks.
• Support the development of self-service capabilities and user-friendly access request workflows.
• Maintain documentation for IAM configurations, procedures, and technical standards.
• Stay current with emerging IAM technologies, security threats, and best practices.

• 3+ years of hands-on experience in IAM engineering or similar IT roles.
• Proficiency with Okta (SSO, MFA, Lifecycle Management) and CyberArk (PAM, PSM, CPM).
• Strong scripting skills (e.g., PowerShell, Python, or similar) for automation and integration.
• Experience with identity governance, RBAC, and directory services (Active Directory, Entra ID, Okta).
• Familiarity with healthcare IT systems and regulatory requirements (HIPAA, HITECH).
• Strong analytical, troubleshooting, and communication skills.
• Bachelor’s degree in Information Security, Computer Science, or related field.
• Relevant certifications preferred (e.g., Okta Certified Professional, CyberArk Defender, CISSP, or similar).

Annual Compensation- $73,000-$90,000 per year

Please note, this position is remote and the pay range presented is a full range in the role specific to 100% national labor mkt avg. Salary bands across the enterprise may differ due to cost of living adjustments and are specific to an employee’s address and state and can vary for higher labor mkts.

If you are ready to join an exciting, progressive company and have a strong work ethic, join our team of experts! We offer a highly competitive salary and a comprehensive benefits package.

Envision uses E-Verify to confirm the employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.dhs.gov/E-Verify.

Envision is an Equal Opportunity Employer.