Cybersecurity Identity Automation Engineer

Envision Healthcare is hiring a Cybersecurity Identity Automation Engineer to support identity automation initiatives within the Cyber GRC department. This role serves as a subject matter expert and primary implementer for automating IAM and PAM workflows in alignment with enterprise business objectives.

Role Summary

In this onsite position in the United States, you will partner with IT leadership and cross-functional peers to improve identity automation processes. You will define and execute an implementation plan using existing platforms and dedicated cybersecurity tools, and you will align identity automation capabilities with applicable regulatory expectations and security frameworks.

Key Responsibilities

• Collaborate with the Principal Architect of Identity Governance, the Director of Cyber GRC, and the VP of Cybersecurity to define, document, and present an execution plan for automating Identity and Access Management (IAM) and Privileged Access Management (PAM) workflows across the enterprise.
• Identify, design, and implement automated entitlement provisioning and JML (Joiner-Mover-Leaver) workflows using Okta, Service Now, Veza, Active Directory, Redhat IAM, and Entra AD.
• Design automation for privileged account onboarding and offboarding in Idira (formerly CyberArk).
• With guidance from the Principal Architect of Identity Governance, define core RBAC models that support identity automation efforts.
• Educate IT leaders, peers, and application owners on industry best practices and cybersecurity standards for identity automation; identify roadblocks that inhibit success and help mitigate functionality gaps related to identity and access provisioning.
• Articulate a forward-looking vision for identity automation and develop a roadmap for new processes and functions.
• Align identity automation work with NIST CSF and other regulatory requirements tied to the identity automation discipline.
• Ensure identity automation capabilities and focus support business objectives.
• Participate in security audits and compliance initiatives related to systems access.
• Support other security initiatives and tools as needed.

Required Qualifications

• Expert knowledge of audit methodologies and standard deliverables.
• Deep expertise in IAM/PAM solutions and identity lifecycle management.
• Familiarity with modern identity and access constructs, controls, and configurations.
• Strong working experience with a senior-level understanding of network security, NIST CSF, and Zero Trust architecture.
• Ability to work independently and collaboratively in a fast-paced environment.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Bachelor’s degree in computer science, Cybersecurity, Information Assurance, or related field.
• 4+ years’ experience in cybersecurity as a practitioner and at least 6+ years of working experience in identity-related roles.
• Working experience with Okta and Service Now.
• Working experience with identity governance and administration platforms such as SailPoint, Savyint, and Veza (Veza experience is a plus).
• Experience with regulatory standards such as HIPAA, PCI-DSS, and NIST.
• Healthcare cybersecurity experience is a plus.
• Working experience with Okta, Active Directory, and other identity sources and platforms.
• Ability to diagram and document using common tools such as Visio, Lucid chart, Smartsheet, and Word/PowerPoint.
• Working experience with scripting or automation tools (e.g., PowerShell, Python).
• CompTIA Sec+, GSEC, or similar required.

Preferred Qualifications

• Okta Professional / Administrator / Architect / Developer certification(s); Service Now and/or Veza certification preferred.
• CISSP or CISM is a plus.

Technologies

• Okta, Auth0, Service Now, Veza, Idira (CyberArk), AWS IAM, Active Directory (AD), Entra AD, Redhat IAM
• RBAC, ABAC
• Python, PowerShell
• NIST CSF, Zero Trust architecture
• HIPAA, PCI-DSS
• CompTIA Sec+, GSEC
• SailPoint, Savyint
• Visio, Lucid chart, Smartsheet, Word, PowerPoint
• CyberArk

Benefits

• Medical, Dental, Vision
• Life and Disability
• Healthcare FSA, Dependent Care FSA, Limited Healthcare FSA
• FSAs for Transportation and Parking & HSAs
• Paid Time Off (PTO), minimum of 20 days and up to 25 days per calendar year
• 9 observed holidays
• Paid family leave
• Qualifying employees eligible to enroll from day one

Company Overview

Envision is a leading national medical group focused on delivering high-quality care to patients when and where they need it most. The organization includes clinicians and clinical support professionals across the nation, and it welcomes teammates from a wide range of backgrounds across communities that reflect the diversity of the United States.