Security Engineer

Atos is seeking an IAM SailPoint Administrator to support identity governance and administration for Cook County Health. In this remote role based in Aurora, IL, you will help run day-to-day operations across identity governance platforms, aligning processes to HIPAA, NIST, and Zero Trust expectations.

This position focuses on sustaining SailPoint Identity Security Cloud (ISC) and Non-Employee Risk Management (NERM), ensuring secure lifecycle handling for joiners, movers, and leavers while maintaining accurate identity data across enterprise systems.

Key Responsibilities

• Administer and maintain SailPoint Identity Security Cloud configurations, including Identity Profiles, Access Profiles, Roles, Policies, and Lifecycle Event triggers.
• Configure and support provisioning workflows, including approval chains and automated lifecycle events for Joiner–Mover–Leaver processing.
• Develop and maintain SailPoint Rules for Before/After Provisioning, Aggregation, and Correlation.
• Maintain identity attribute mappings, correlation logic, authoritative source configurations, and overall identity data quality.
• Monitor and troubleshoot provisioning failures, connector alerts, and identity synchronization issues.
• Support connector configuration and maintenance for enterprise applications including Active Directory, Entra ID, Epic, FreshService, HRIS, and other cloud or on-prem systems.
• Maintain documentation for configurations, workflows, and operational procedures.

Requirements

• Strong understanding of IGA methodologies and IAM best practices.
• High attention to detail and commitment to data accuracy.
• Ability to manage multiple priorities in a fast-paced environment.
• Clear, professional communication skills.
• Commitment to secure, compliant, and efficient identity operations.
• Collaborative mindset with cross-functional teams.
• Ability to explain IAM concepts to both technical and non-technical audiences.
• SailPoint Identity Security Administrator certification.
• Experience with Cerner, Epic, or other EMR identity models.
• Experience with cloud identity platforms including Entra ID, AWS IAM, and GCP IAM.
• Experience with PowerShell for operational automation (light scripting only).
• Experience with Postman.
• Familiarity with healthcare regulatory requirements including HIPAA and HITECH.
• Experience supporting identity operations in regulated industries, including healthcare or financial.
• Knowledge/Skills: Bachelor’s degree in Information Technology (IT), Computer Science, Cybersecurity, or a related field, or equivalent experience.
• 3-5+ years supporting Identity & Access Management or IGA platforms.
• Hands-on experience with SailPoint Identity Security Cloud and Non-Employee Risk Management (NERM).
• Strong understanding of identity lifecycle management, RBAC/ABAC, SoD, and access governance.
• Experience with Active Directory user administration, Entra ID, LDAP, SCIM, SSO, MFA, and HRIS systems.
• Strong analytical and troubleshooting skills.
• Ability to operate in a complex, unionized healthcare environment.

Technologies

• SailPoint Identity Security Cloud (ISC)
• Non-Employee Risk Management (NERM)
• HIPAA, NIST, Zero Trust
• SailPoint Rules, Identity Profiles, Access Profiles
• Roles, Policies, Lifecycle Event triggers
• Provisioning workflows, Approval chains
• Aggregation, Correlation
• Identity attribute mappings, connector alerts, identity synchronization
• Authoritative source configurations, identity data quality
• Active Directory, Entra ID, LDAP, SCIM, SSO, MFA
• HRIS, Epic, FreshService, Cerner
• AWS IAM, GCP IAM
• PowerShell, Postman
• RBAC, ABAC, SoD
• Joiner–Mover–Leaver

Department and Reporting

• HIS Identity and Access Management Reports to the Identity and Access Management Manager

Location and Experience

• Aurora, IL (remote)
• Minimum experience: 3 years