Identity System Engineer

Sanford Health is one of the largest and fastest-growing not-for-profit health systems in the United States. Were proud to offer many development and advancement opportunities to our nearly 50000 members of the Sanford Family who are dedicated to the work of health and healing across our broad footprint.

Work Shift :

8 Hours - Day Shifts (United States of America)

Scheduled Weekly Hours :

40

Salary Range : $34.50 - $57.00Pay starts at $34.50 and increases according to years of applicable experience.

Union Position : No

Department Details

Summary

The Identity Systems Engineer is responsible for implementing and securing enterprise identity and access management infrastructure that enables reliable authentication authorization and access management across hybrid environments. Engineers in this family ensure that users systems and applications are authenticated authorized and protected in alignment with security standards regulatory requirements and business needs.

Job Description

The Identity Systems Engineer is a mid-level role responsible for implementing maintaining and securing enterprise identity infrastructure across both on-premises and cloud environments. This position deploys and manages Active Directory services including domain controllers OU structures replication health schema extensions and trust relationships while ensuring alignment with business and security requirements. The engineer oversees synchronization between AD Entra ID and other identity platforms enabling seamless hybrid identity and single sign-on for applications. Core responsibilities include configuring and managing secure authentication methods administering enterprise PKI and certificate lifecycles and enforcing access governance policies through Group Policy Objects and role-based models. The role also integrates systems via API calls (REST SOAP JSON) automates provisioning and de-provisioning workflows and supports modern authentication protocols such as Kerberos OAuth OpenID Connect and addition the Identity Systems Engineer enforces least privilege conducts access audits supports compliance with SOX HIPAA and GDPR and provides technical expertise during audits and governance reviews. With a technical focus complemented by operational oversight this role ensures the organizations identity services remain secure resilient and aligned with both regulatory and business role requires technical expertise in Active Directory Entra ID authentication protocols Identity Governance Administration (IGA) Privileged Access Management (PAM) and PKI with a strong focus on information security compliance problem-solving skills a security-first mindset and least-privilege enforcement. The Identity Systems Engineer ensures the organizations identity platforms are resilient scalable and secure to support business operations and protect sensitive data. The Identity Systems Engineer will work closely with cross-functional IT application and security teams to ensure alignment with business objectives regulatory requirements and industry best practices.

Qualifications

Bachelors degree required in lieu of education leadership may consider an Associates Degree plus 3 years of applicable experience in computer science or related field.

Minimum of 1 to 2 years applicable work experience required. Including but not limited to : Supporting Active Directory Domain Services Hybrid Identities & Entra IDImplementing SSO / MFA workflows using SAML 2.0 and / or OIDCMaintaining Public Key Infrastructure (PKI)Supporting Identity Lifecycle & Access Governance workflows and technical integrationsImplementation of information security standards and procedures including HIPAA and PCI

Security Certifications (CISSP CISA CISM Security CEH etc.) are highly desired.

Sanford is an EEO / AA Employer M / F / Disability / Vet.

If you are an individual with a disability and would like to request an accommodation for help with your online application please call 1- or send an email to

Required Experience :

IC

Key Skills

VMware,System Design,Computer Networking,PowerShell,Microsoft Windows Server,Windows,Systems Engineering,AWS,Requirements Management,Linux,SAN,Dns

Employment Type : Full-Time

Experience : years

Vacancy : 1

Monthly Salary Salary : 34 - 57